Loading
What is enforced today, where it is enforced, and what still needs work. No independent security audit has been done yet.
Squads v4 multisig. Human signers in their own wallets.
No treasury or withdrawal key on any GUY server.
Requests only. Server caps and an allowlist, then the multisig threshold.
macOS Seatbelt sandbox: no network, no home-folder reads, writes only to its job folder, CPU and time limits, no installs.
Served from a separate origin with connect-src 'none', reviewed by a human before publishing.
Sign-In With Solana: single-use five-minute nonce, bound to domain and URI, replays rejected.
Hash-chained, append-only audit log. Ledger and reviews are immutable in the database.
A database trigger forbids attaching a Devnet treasury or ledger row to a mainnet coin.
Webhook signature and replay checks are built. Processing is switched off.
Don't test against other people's wallets or funds. Describe it privately to the project operator. There's no public bounty programme yet.