Security
The safest thing we can do is hold nothing. Here is how that works, how the app is designed to handle the rest, and the risks that still remain with you.
smart contracts deployed by us
backends or databases
self-custody
monthly hosting cost
- Built on Ether.fi's existing, deployed cash-v3 contracts
- Every transaction is simulated before you sign it
- Exact-amount approvals only, never unlimited
- You always see the contract, function and amount
- No private keys or seed phrases, ever
- Third-party widgets run sandboxed, with no wallet access
What could go wrong, and how the app is designed to handle it
Signing the wrong thing
Every write is simulated first, and you see the contract, function, amount and chain before signing. Approvals are exact-amount only.
Fake or wrong addresses
Every contract address comes from one config file with a link to Ether.fi's official source. Unverified entries stay empty rather than guessed.
Misleading numbers
No invented APY, limit or health values. Stale or zero oracle prices are flagged on screen.
Malicious third-party code
Voucher and off-ramp widgets run in sandboxed frames with no access to your wallet, behind a strict content security policy.
Leaked secrets
There are no private keys or server secrets to leak. Public configuration only, and nothing sensitive in the repository.
Vulnerable dependencies
Lockfile committed, dependencies audited before each release, and every change that touches the chain gets a security review.
Risks that remain with you
No interface can remove these. Know them before you deposit.
Liquidation
If your collateral falls in value, your position can be liquidated. Keep your health factor comfortably above 1.5x.
Smart-contract risk
Ether.fi's contracts are battle-tested but not risk-free. Bugs can cause loss of funds.
Oracle risk
Prices come from oracles. Wrong or delayed prices can affect limits and liquidations.
Third-party services
Card, voucher and off-ramp providers have their own terms, fees, availability and KYC requirements.
Regulation & tax
Rules differ by country. You are responsible for yours. Nothing here is legal or tax advice.
Your safety checklist
- Check the URL before connecting your wallet.
- Read the transaction in your wallet. It should match what the app showed.
- Start with a small amount the first time.
- Never share your seed phrase. We will never ask.
- Keep health factor above 1.5x and repay early if prices drop.
- Revoke approvals you no longer need.