Security

Your money
stays yours.

Not a promise on a landing page — a property of the contracts. Self-custody by default, an agent that physically cannot withdraw, and every rule inspectable on-chain.

01 — Custody model

You hold the keys. There is no custodian.

Your stocks and dollars sit in a Safe smart-account vault that only your keys control. Stock Cards operates the app around it — it never takes possession of your assets, and it cannot move them.

Key export is available at any time. If Stock Cards disappeared tomorrow, you would still control the vault, withdraw, and close positions directly through Safe's own tooling and any block explorer.

Assets never touch a Stock Cards-controlled wallet
Your keys can be exported to any Safe-compatible interface
No custodian can freeze, seize, or rehypothecate your balance

02 — The caged agent

An agent funds the card. It can never take money out.

To keep the card topped up, an automated agent needs some authority over your vault. We bound that authority with Zodiac Roles + Delay modules — the same permission framework used by large on-chain treasuries. The agent gets a narrow role, not your keys.

The agent CAN

Draw against your collateral in the lending market
Top up the card account, up to your buffer
Repay the loan from released holds

The agent CANNOT

Transfer assets to any outside address
Export or change your keys
Raise its own limits — a timelock delays every change

The allow-list and the delay are enforced on-chain. Transfers to external addresses aren't "discouraged" — they revert. See the exact configuration on the Transparency page.

03 — Audits & verification

Built on rails that were boring on purpose.

Stock Cards doesn't reinvent custody or lending. It composes contracts that have been live, audited, and attacked for years — so the trust surface is small and well-understood.

Safe — audited by multiple firms, securing $100B+ across chains
Zodiac (Roles + Delay) — open-source, widely deployed treasury tooling
The lending market and card-account glue undergo independent audit + formal verification before launch
The card is issued through Gnosis Pay and a regulated e-money partner (Monavate), under a Visa licence

Audit reports and the formal-verification scope are published on the Developers page as they complete.

04 — Threat model

What can actually go wrong — and what we do about it.

Self-custody removes the custodian risk, but it doesn't make risk zero. Here's the honest list.

Liquidation. You're borrowing against your portfolio. If it falls hard, collateral can be liquidated. Mitigation: a 120% backing floor, a Safety Meter that warns early, and the agent repaying from released holds.
Smart-contract risk. Any contract can have bugs. Mitigation: reused, audited components; formal verification; a timelock on privileged changes.
Oracle / market risk. Prices and rates come from on-chain markets. Mitigation: conservative LTV, transparent live rate shown before every draw.
Issuer / regulatory risk. The card rail is a regulated third party. Mitigation: the on-chain balance is yours regardless; the card is one spending surface, not custody.
Key loss. Self-custody means you're responsible for your keys. Mitigation: export + recovery guidance, and Safe's multi-owner options.

This is not a deposit and returns are not guaranteed. Full Risk disclosure.

Read it in code, not marketing.