Tillwarden $TILL Open app
Read this first

Use at your own risk.

Tillwarden is new software that handles money. We wrote it carefully and tested it, and it can still be wrong. Here is what you should know before you put anything in.

  1. Not audited. The contracts, the engine, the SDK and this site have not had an external security audit. They have unit tests and tests against a fork of mainnet. Tests are not an audit.
  2. Bugs can lose money. A bug in the module could let a payment through that should have been stopped, or lock funds until you disable the module. Keep only what your agent needs in the account.
  3. The firewall is a filter, not a promise. The hidden-instruction check looks for known patterns. A new trick can get past it. The on-chain rules are the hard limit, so set them tight.
  4. Allowlisted contracts are trusted. If you allowlist a contract that turns out to be malicious, it can act within the allowance and budgets you gave it.
  5. The engine can go down. If it is down, agents cannot pay through it. Your Safe and the money in it are not affected, and you can still act as owner from any Safe interface.
  6. Keys are yours to keep. We never see owner keys or agent private keys. If you lose an owner key, we cannot recover it. If an agent key leaks, remove the agent in the app.
  7. Chain and token risk. Robinhood Chain, USDG, Safe and Pons are run by others. Their failures are outside our control.
  8. $TILL is not an investment. There is no promise of returns. Burns depend on real payment volume, which can be zero. Token prices can go to zero. Nothing on this site is financial advice.