Safe
Safe
Custody · Multisig

Safe holds more onchain money than any other piece of software, and it earned that. A Safe is an account that will not move a thing unless the people you named say so, together. No single key on a single laptop, no one person who can be phished into losing the company. Thousands of teams, funds and DAOs keep their treasury behind one, and they are right to.

The custody is not the problem. The waiting is. Every action a Safe takes is a queue: somebody proposes, everybody else has to notice, open the app, read it and sign, and only then does anything happen. A rebalance that made sense on Tuesday collects its last signature on Friday. A position that needed topping up at 2am waits for the morning. The quorum that protects the money also stands between the money and every single decision about it, forever, on every transaction.

A plug moves the quorum from the front of the queue to the inside of the transaction. The owners sign off once, onchain, and that sign-off becomes a condition the plan reads at the moment it runs: how many owners have approved, what the account's own threshold is, and whether the two have met. The plan waits on the people. The people stop waiting on the plan.

That buys the part which has always been out of reach. A rebalance that only fires once three of five have blessed it, and fires the second the third one does, at four in the morning, with nobody awake. An emergency exit written in advance, sitting armed, running on the block the quorum is reached rather than the hour everybody finished reading Telegram. A payment run that holds until sign-off and then goes, with no window in between where somebody has to remember.

None of this takes the veto away. The owners still decide, and a plan nobody has signed off on does nothing at all. What goes away is the gap between the decision and the thing happening.

Posts · 4