Skip to main content
Some products list features. This page lists refusals — because each one is load-bearing for the guarantees on the rest of the site.

We never hold your money

What that rules out

No balance held on your behalf, no escrow, no rolling reserve, no payout threshold, no settlement delay.

What you get instead

No counterparty risk. Our insolvency, outage, or bad decision cannot strand your funds.
Concretely: the function that releases your funds is callable by anyone. We could not withhold your money if we wanted to, and neither could a regulator ordering us to.

We can’t freeze or reverse a payment

Once confirmed, a payment is final. Not reversible by the payer, their bank, us, or you. That’s protection against fraudulent chargebacks and, equally, the reason refunds are something you send manually.

We don’t do KYC

No identity documents from you or your customers. Sanctions screening checks a wallet address against a public list — a lookup on a public identifier, not identity verification. Sanctions.
If your business requires customer identity verification, that’s your obligation to meet in your own flow. We neither provide it nor prevent it.

We don’t touch fiat

No on-ramps, no off-ramps, no conversion to or from bank money. Not offered, not integrated, not recommended.
This is a firm line rather than a missing feature. Facilitating conversion between crypto and fiat is what pulls a business into a different regulatory category, with obligations that would change the product fundamentally — including the custody model everything else depends on. Cashing out is between you and whichever exchange or service you choose.

We don’t convert volatile assets at checkout

Phase 1 is stablecoin-only: USDC, USDT, EURC. A customer can’t pay in ETH and have it swapped to USDC on the way in. Accepting volatile assets means someone bears price risk between payment and settlement, and the swap can fail if liquidity moves. It’s planned, carefully. Roadmap.

We don’t lend, stake, or invest your balance

Funds sit in your pool. They are not deployed anywhere, and generate no yield. If a payment processor offers yield on your balance, ask where the yield comes from — it comes from doing something with your money that you can’t do while it’s genuinely yours.

We don’t have an admin key

Your pool has no owner, no upgrade path, and no pause function. There’s no privileged key to steal, subpoena, or misuse — including by us. The trade-off is honest: no undo button. A wrong payout address can’t be fixed by support, which is why the attestation is signed from your own wallet and shown back for confirmation.

What we do claim

On-chain verification, with its conditions

A real mechanism with real limits, stated plainly.
We describe security as mechanisms with conditions, never as guarantees of invulnerability. Any vendor telling you their system cannot be compromised is telling you they haven’t thought about it carefully.