Security

What we secure, and how honestly.

ArcPay is a control plane, not a custodian. We say what's live, what's pre-alpha, and what's still pending.

Non-custodial

ArcPay never holds keys. Signing happens in your wallet, or via Ika dWallet policy approval when enabled.

Viewing keys, not surveillance

Auditors get scoped, expiring viewing keys per disclosure scope. The public ledger doesn't expose per-agent revenue.

Shielded rails when live

Cloak (devnet today) and Umbra route incoming and outgoing funds. We label devnet as devnet — no production claims on rails that aren't live.

Date-range audit exports

Every action — payment, swap, yield deposit, policy change — is exported with the matching transaction signature.

Policy-enforced spend

Daily limits, per-tx caps, allowed tokens, blocked actions, minimum GoldRush score, contractor allowlist, emergency pause.

Final-review modal, always

Network, wallet, token, amount, fees, route, slippage, recipient — every money-moving action confirms before signing.