Security
Who can do what,
in full.
coffr is meant to be non-custodial software. This page will list every key that matters, what it can do and what it cannot.
Last updated 29 October 2026
The short version: There is no coffr program on mainnet yet, so there are no keys to list today. This is what we are building to, and the page will be filled in with real addresses before a single deposit is taken.
01The program
coffr will be one Solana program that holds each pool's yield tokens in an account only the program itself can sign for. No person will hold a key that can move deposits or interest directly. Its address will be published here and on X before it takes deposits.
02What the team will hold
Any upgrade key, admin key or resolution key will be listed here with exactly what it can and cannot do, before launch. Our intent: deposits can always be withdrawn by their owner, and no key can redirect a deposit to anyone else.
03What you hold
Your wallet and its keys. You sign every transaction yourself. We never see your private key and cannot move, recover or reverse anything you send. A confirmed transaction on Solana is final.
04Third parties
Yield tokens are issued by third parties, and outcomes are resolved by Polymarket. coffr does not control either.
05Reporting a bug
Write to hello@coffr.bet with "Security" in the subject. Please do not test against other people's funds or post details publicly before we have answered.