Security

Safeguards, stated plainly.

No marketing language about safety. These are the controls that exist today, who can do what, and the risks that remain. Unslept is in a guarded launch and has not completed a third-party audit.

Guarded launch

Not yet audited by a third party. Until an audit is published, total buffer deposits and each asset are capped at 50,000 USDG by the contracts.

24-hour timelock

Every admin change, from fee levels to new assets, is scheduled on chain a full day before it can take effect. Anyone can watch it coming.

Verified source

Every deployed contract matches its published source exactly on Sourcify, so anyone can read the code that actually runs.

Policies on chain

Per-call caps, daily caps, payee and domain allowlists are checked by the account contract itself, not by the SDK or a server.

Owner always exits

Each agent has its own smart account. The owner can pause, revoke, unwind and withdraw at any time. Unslept never holds your keys.

Watched around the clock

Buffer health, liquidity, price freshness, timelock operations and write-offs are checked every 15 minutes, with alerts on anything new.

Permissions

Who can do what.

Every role is narrow by design. The keys your agents run with can spend within limits you set, and nothing else.

Account owner
Your wallet. Sets the policy, adds payees, funds, unwinds and withdraws, pauses and revokes.
Agent signer
Your agent's key. Can only request payments within the policy, and can never withdraw.
Keeper
Moves an account's idle cash into a registered asset and back. Cannot send funds anywhere else.
Admin
A 24-hour timelock. Every parameter change is public a full day before it can take effect.
Anyone
Can trigger debt settlement and buffer refills, which only repay what is already owed.

Put idle agent money to work.

Create an agent account in a few minutes, or supply the liquidity that settles payments.