> select wallet

System Assurances,
F**k You.

Stake in SAFU.

Your insurer had assurances. SAFU has math.
Stake ETH. Get covered. If your wallet gets drained — payout activates automatically. No committee. No vote. No waiting room.

[ whitepaper ]
100%
CATCH RATE
0.015Ξ
STAKE AMOUNT
0.25Ξ
MAX COVERAGE
90d
COVERAGE WINDOW
ACTIVE STAKERS

Get covered.

safu-stake.sh
[01]
Connect your wallet
MetaMask, Rabby, Rainbow, Trust, Safe — any EIP-1193 compatible wallet.
[02]
Set your beneficiary
Payouts stream here if a claim is approved. Must be a different address from your staker wallet.
⚠ Do not enter your own staker wallet as beneficiary — payouts will be unclaimable. Use a separate cold wallet or trusted address.
✗ Beneficiary matches your staker wallet — change this before proceeding.
[03]
Get oracle approval
The SAFU oracle scores your wallet and issues a signed approval.
[04]
Stake 0.015 ETH
Your wallet will prompt for confirmation. Coverage activates immediately after the tx confirms.

If you get drained.

safu-claim.sh
[01]
Scan the drain transaction
Paste the Ethereum tx hash of the drain. The oracle scores it. Scanning is safe — no commitment, no consequences.
[02]
Drain detected — confirm claim submission.
The oracle confirmed a qualifying drain. Before submitting:
⚠ Submitting this claim permanently forfeits your 0.015 ETH stake. Your beneficiary will begin receiving the payout stream. This cannot be undone — no recourse once submitted.
[03]
Claim submitted.
Your claim has been submitted for activation. Payout will begin streaming to your beneficiary. No further action required.
[02]
Below threshold — request human review.
The oracle did not detect a qualifying drain. Submit a dispute for manual review.
safu-stream.sh — pull your daily entitlement
[—]
Pull claim stream
Call once per day after your claim activates. Claim ID is emitted in the ClaimActivated event on Etherscan.

What is SAFU?

[ the problem ]

The system assured you. Your exchange had insurance. Your wallet provider had guarantees. When your wallet got drained — the system shrugged. No recourse. No payout. No accountability.

[ the protocol ]

SAFU is a staking protocol with a protection layer. Stake ETH. Get covered. If a drain is verified — payout activates deterministically. No humans in the loop. No governance vote.

[ the oracle ]

Every submitted drain gets scanned by the SAFU oracle — a closed-source fraud detection engine trained on verified on-chain drain patterns. Same inputs. Same verdict. Every time.

[ the catch rate ]

100% of confirmed drain transactions detected in controlled testing.* Human review is available for disputed verdicts.

*Based on test conditions using verified historical hacks. Real-world performance may vary.


Audited. Verified.

hashlock-ai-audit.txt — 2026-05-28
[ Hashlock AI Audit ]
CRITICAL1demo pool size — intentionally small, disclosed to all participants
HIGH4all reviewed — 1 minor improvement queued for next version
MEDIUM4all reviewed — 1 minor improvement queued for next version
LOW3accepted design choices
INFO4accepted
✓ all 18 findings reviewed
view full report ↗
halmos-symbolic.txt — 2026-05-27
[ Halmos Symbolic Execution — a16z ]
10 / 10
properties verified — zero counterexamples
  • Claiming permanently forfeits your stake — enforced by the contract, not just policy
  • Pool balance stays accurate when a claim is cancelled
  • Once a claim is filed, the original stake cannot be withdrawn
  • All stake records reset correctly on cancellation
  • The two approval keys are always held by different addresses
  • Contract ownership cannot be transferred to the co-approval address
  • The contract never owes more than it holds in ETH
  • Payouts above the maximum allowed amount are always blocked
  • Payouts above coverage limits are always blocked
  • A cancelled claim can never release further payments
[ security review — comprehensive ]
CRITICAL 0 HIGH 0 MEDIUM 0 LOW 0
✓ PASS — 2026-05-27
[ forge test suite ]
37 / 37
tests pass — all fixes covered
[ contract ]
Solidity 0.8.25 · BUSL-1.1
etherscan verified ↗
[ your wallet stays yours ]

Staking sends exactly 0.015 ETH to the pool. No token approvals. No spending permissions. The contract cannot access any other asset in your wallet — before, during, or after staking.

[ your stake is protected on-chain ]

Symbolic verification across every possible contract state confirmed no unauthorized withdrawal path exists. The pool is mathematically guaranteed to always hold more ETH than it owes. Your staked ETH cannot be removed by anyone other than you — not the pool operator, not the signing key.


Who built this

Murtaza Kanchwala
Co-founder

Murtaza has been working in crypto across sales, BD, and operations for several years. He started SAFU after going through a standard claims process on a wallet loss. Filing forms, waiting for someone to vote, hoping the committee was paying attention. He decided the fix was to remove the committee.