Security & transparency

Non-custodial, verifiable, boring on purpose

• Funds move from your wallet directly into your circle's own contract. There is no master wallet.
• Every deposit, payout, yield claim and refund is a public Monad transaction you can verify yourself.
• Circle rules are immutable after activation — no admin, including MonSave, can change the payout order, recipients or amounts.
• Payout execution is permissionless: our automation is a convenience, never a dependency.
• Contracts use OpenZeppelin primitives, reentrancy guards, checks-effects-interactions, bounded loops and custom errors, with fuzz and invariant test suites.

What administrators can and cannot do

Protocol governance (a Safe multisig in production) can list supported assets, cap circle sizes, pause new circle creation and adjust the yield-fee within a hard 10% contract cap. It cannot withdraw member principal, change an active circle's rules or recipients, mark payouts complete, fabricate yield or redirect refunds. Pausing creation never traps funds in existing circles.

Audit status

MonSave's contracts have not yet completed an external security audit. We publish the full source, tests and threat model in the repository, and we will not describe the protocol as audited until a named external audit exists. Until then, Mainnet deposit caps are kept deliberately low.

Report a vulnerability

Found something? Please report it responsibly via the repository's security policy before public disclosure. We take reports seriously and respond quickly.