> For the complete documentation index, see [llms.txt](https://docs.spend.market/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.spend.market/custody-and-eligibility/custody.md).

# Custody

Spend Market is non-custodial. We never hold your funds.

**Where your money is.** Email or social sign-in: Privy provisioned an embedded wallet tied to your login, and your USDC sits there. External wallet: your USDC stays in your wallet and you sign every transaction. Either way, the keys are yours, the funds are yours, the positions are yours.

**Where your positions are.** Outcome tokens are ERC-6909 tokens held in your wallet. ERC-6909 is a multi-token standard: a single contract can hold every outcome token across markets, which is what keeps minting and burning complete sets cheap and efficient.

**Spend Market can:** operate the markets, pricing, and resolution infrastructure; process deposits and withdrawals within its own smart contracts; resolve markets per each market's stated rules.

**Spend Market cannot:** move funds without a transaction you signed; access your bank credentials (Plaid handles that in a tokenized flow); prevent you from withdrawing your balance; reverse transactions you've signed.

**Audits.** Spend Market's contracts have completed two independent audit rounds and were reviewed by six independent security researchers, supplemented by AI-assisted review across several automated tooling suites (including 33 Labs Captain Hook, Pashov Solidity Auditor v3, Plamen, Zellic V12, and Test Machines' Azimuth AI auditor). The intent was to pair human judgment with broad automated coverage. Findings were triaged and remediated where applicable. As with any audit, this work should be understood as meaningful risk reduction rather than a guarantee that no issues exist. Full audit reports will be published and linked here following completion of our in-progress audit, with auditor names and profiles included for anyone who wishes to verify them independently.

**Recovering access.** Email or social? Privy provides recovery flows through their documentation; losing both your login and your recovery method means losing that embedded wallet. Visit <https://home.privy.io/login> for further assistance. External wallet? recovery is controlled by your wallet provider. Back up your recovery method. Spend Market cannot restore access you've lost.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.spend.market/custody-and-eligibility/custody.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.