Is my money safe?

"Is my money safe" is really five questions wearing one coat, and they have five different answers. Four of them are strong. One of them is a genuine risk that most platforms would rather not spell out, so it gets its own section here.

1. Can the firm refuse to pay me?

No, and this is the question the entire protocol was built to answer.

A firm cannot deny a payout. It can be slowed when the firm is under financial stress, and the delay is bounded and published rather than open-ended, but the claim does not go away and there is no desk with the authority to cancel it. A firm also cannot shut down and walk off with its treasury: there is no instruction anywhere in the protocol that closes a solvent firm. The only way a firm ends is automatic bankruptcy, and that path is gated on paying every trader it owes first.

If a firm did try to falsify a result, the attempt is provable by anyone rather than only by you, and a proven fraud costs the operator a collateral bond they posted for exactly this. Half of that bond goes to whoever caught it.

Trader protections is the full list. What makes this different explains why "cannot" rather than "will not" is the accurate word.

2. Can DecentralProp take my money?

Not from your wallet. Funds in your wallet move only with your key, and we do not have it.

The honest boundary: while you hold an open evaluation or funded account, the balance on that account is a position inside the firm's books rather than a balance in your wallet, and it becomes yours in your wallet when a payout settles. What stops that from being a trust exercise is that the settlement is committed on-chain hourly and can be checked against the firm's own trade history by anyone. How settlement actually works covers the specific proofs.

One real exception exists in both directions. The integrity engine can hold a payout automatically while it checks a suspected abuse pattern. Those holds are time-bounded, they are backed by a proof anyone can replay, and held is not the same as seized. How integrity detection works sets out what triggers one.

3. Who controls the treasury my payout comes from?

Nobody, and that is worth saying precisely rather than as a slogan.

A firm's treasury is not an account the operator logs into. It is an account owned by the protocol's code, at an address deliberately built so that no private key exists for it. Not a key held by us, not a key held in a vault, not a key split between executives. No key at all. That means there is no person, on any team, who can be persuaded, pressured, bribed or hacked into moving a firm's treasury, because the ability to move it by signature simply does not exist. Funds leave when the rules say they leave.

It is the difference between a firm that promises to keep client money separate and one where separation is a property of the accounting system itself. On-chain architecture & trust covers how those accounts work.

4. Can I lose it myself?

Yes. This is the risk that is new if you are coming from a traditional firm, and it is the one worth taking seriously.

You hold your own keys. There is no password reset, no account recovery, no identity check that gets you back in. If you lose your recovery phrase, the funds in that wallet are gone, and nobody on earth can restore them. If someone tricks you into revealing the phrase, they can empty the wallet and the transaction cannot be reversed.

That is the cost of the guarantee in question 1. The same property that stops anyone from freezing or taking your funds also stops anyone from rescuing them.

In practice, four habits cover almost all of it:

• Write the recovery phrase on paper and store it like a passport. Not a screenshot, not a note on your phone.
• Never enter the phrase anywhere except your own wallet app during a restore. No genuine support person from any company will ever ask for it.
• Install wallets from the official site rather than from a search advert.
• Send a small test amount the first time you send funds to a new address.

Getting a wallet goes through the setup with these built in.

5. Is the code itself safe?

Partly, and here is the exact state rather than a reassurance.

What is real: the on-chain programs have been through repeated internal adversarial review, and the core money paths have been exercised end to end against real deployed programs with real transactions rather than only reviewed as source. The published source is mirrored publicly so the deployed programs can be checked against it.

What is not there yet: no independent third-party security audit has happened. One is planned and funded from protocol revenue, and the decision was made to run it after launch rather than before. Until it completes, internal review and the on-chain penalty for cheating are the controls in place, and nothing else is standing in for an external audit.

This is stated on the security and audit status page in the same words, and it should factor into how much you put at risk. It is a fact to weigh, not a reason the platform cannot be used.

What "devnet" means for your safety

The protocol currently runs on devnet, a full working copy of the Solana network that uses free test money. Think of it as a dress rehearsal performed on the real stage with real equipment and no real money in the till.

For you, that means the balances on the platform today are test funds. You cannot lose real money here right now, because there is no real money here right now. It also means you can try the whole thing, end to end, for free, before deciding whether to risk anything at mainnet.

The one rule while this is true: do not send real SOL to anything on the platform. Mainnet has not opened, and when it does, What's live today changes first.

The summary