Security model

These are constraints, not slogans. A sheet that breaks any of them is not this product.

1. No custody at any point

   Approvals only. Funds move once, at execution, directly into the swap. There is no shared wallet and no vault.

2. All or nothing

   If any leg fails, the entire transaction reverts and every approval remains unspent. Never a partial execution.

3. Exact amounts

   Approvals are for an exact amount, never unlimited, and lapse at expiry. The button on this site will not request max uint.

4. Consensus price, deep pools

   Execute only at a consensus price across pools deeper than $50,000. Pools of one asset on this chain have diverged by as much as 5.71% at the same instant.

5. US market hours, real calendar

   Execute only during the US cash session, on a market holiday calendar, not a weekday rule. Labor Day is closed even though it is a Monday.

6. Audited settlement

   Build on a standard, audited settlement primitive. Do not write a bespoke pooling contract.