Custody

Spend Market is non-custodial. We never hold your funds.

Where your money is. Email or social sign-in: Privy provisioned an embedded wallet tied to your login, and your USDC sits there. External wallet: your USDC stays in your wallet and you sign every transaction. Either way, the keys are yours, the funds are yours, the positions are yours.

Where your positions are. Outcome tokens are ERC-6909 tokens held in your wallet. ERC-6909 is a multi-token standard: a single contract can hold every outcome token across markets, which is what keeps minting and burning complete sets cheap and efficient.

Spend Market can: operate the markets, pricing, and resolution infrastructure; process deposits and withdrawals within its own smart contracts; resolve markets per each market's stated rules.

Spend Market cannot: move funds without a transaction you signed; access your bank credentials (Plaid handles that in a tokenized flow); prevent you from withdrawing your balance; reverse transactions you've signed.

Audits. Spend Market's contracts have completed two independent audit rounds and were reviewed by six independent security researchers, supplemented by AI-assisted review across several automated tooling suites (including 33 Labs Captain Hook, Pashov Solidity Auditor v3, Plamen, Zellic V12, and Test Machines' Azimuth AI auditor). The intent was to pair human judgment with broad automated coverage. Findings were triaged and remediated where applicable. As with any audit, this work should be understood as meaningful risk reduction rather than a guarantee that no issues exist. Full audit reports will be published and linked here following completion of our in-progress audit, with auditor names and profiles included for anyone who wishes to verify them independently.

Recovering access. Email or social? Privy provides recovery flows through their documentation; losing both your login and your recovery method means losing that embedded wallet. Visit https://home.privy.io/login for further assistance. External wallet? recovery is controlled by your wallet provider. Back up your recovery method. Spend Market cannot restore access you've lost.