Your money

Who holds it

You do. Your funds stay in your wallet as a token that proves you own them. You give the contract permission to move them, not to keep them.

During a move, the contract holds your funds for one step, because an exchange has to happen somewhere. Before that step ends, it checks that it kept nothing. If it did, the whole move is undone.

What the program can do

One thing: propose a move inside your rules.

It cannot pay itself. It cannot spend more than your funds released. It cannot send anything anywhere except back to you or into the market. A misbehaving program could move you within your own rules, and nothing else.

What the contract will not do

• Move your funds to another market.
• Make a band wider or narrower than you said.
• Move more often than you allowed.
• Keep less of your funds working than you demanded.
• Act after your rules expire.
• Keep anything.

Each of those is a line in the contract that refuses the move, and each line has a test.

Updates to the contract

The contract can be updated, and we say so plainly. Three things keep that honest: an update waits two days after it is announced, the announcement is fixed and expires after seven days, and your exit is never affected by a pending update.

The honest part

Nothing is live yet, and the contract has not had a professional audit. Twelve automated reviewers went over it, then six more; that is not an audit. See Status.