Safety

Non-custodial by design, with no admin key on funds.

Non-custodial

Sheaf never holds your funds in a wallet it controls. Payments move from the payer, through the router, to you, in one transaction. Queued amounts sit in the protocol under your address and can be withdrawn by you at any time.

No admin key on funds

There is no key that can move, freeze or redirect user funds. Only protocol parameters (for example the price band or the small-payment threshold) can change, and only behind a timelock, so every change is public before it takes effect.

Frozen or paused tokens

Stock Token issuers can freeze or pause a token. If that happens, Sheaf does not block the payment: the shares part is paid in USDG, and the receiver is notified.

Your split, your control

Only the receiver can set or change a split. The payer cannot influence it.

Audits

Independent audits are planned before mainnet. Reports will be published in these docs.