Security

Your wallet stays yours

If you signed in with email or Google, we created a secure wallet for you automatically. It's tied to your account, secured by Privy, and you don't need to manage it. Its key never reaches MyPact. Payments from it need your email or Google sign-in, so protect that account with two-factor login.

If you connected your own wallet (e.g. MetaMask or Coinbase Wallet), your private key never leaves your device. We only request signatures for actions you choose, such as approving a payment or depositing funds.

Where the funds are

In Escrow agreements, funds are held by the agreement's automatic rules on the blockchain — not by MyPact. We never custody your money. The last approval needed pays the payee directly, in the same step — there is no separate release that anyone could hold up. Until then, the payer can cancel for a refund once the agreement allows it, and the payee can refund the payer at any time.

The contract’s rules don’t let MyPact take your money or send it anywhere else. Money in an escrow can only go to the payee or back to the payer. We keep two powers over the contract itself, and both have limits. The pause is described below; the upgrade power is under Upgrades and audits.

Built-in safety limits

While MyPact is early, we deliberately limit the blast radius of any possible bug:

• $5,000 cap per escrow. Live-mode escrows are limited to $5,000 each. We'll raise this as the platform proves itself.
• Emergency pause, limited to 30 days per pause. See When we will and won't pause.
• Open, verified code. The agreement rules are published and verified on the public block explorer, so anyone — including independent security researchers — can inspect exactly what the code does.
• Automated security analysis. Every release runs through industry-standard automated security scanning before it ships.

When we will and won’t pause

Pausing is the power we'd use in an emergency, and it can delay your funds, so we commit publicly to how it is used.

We will pause only for:

• A suspected or confirmed vulnerability in the agreement code.
• A credible report that funds are actively at risk across the platform.

We will never pause:

• Because one party to an agreement asks us to. Disagreements between a payer and a payee are not ours to settle — we do not take sides, and the contract's rules don't let us reverse or redirect a payment.
• To freeze a specific user, agreement, or wallet.
• At the request of one party who says the other has behaved badly.

Limits. A pause stops new agreements, new deposits and payouts; refunds to the payer keep working. It cannot move, take, or redirect anyone's funds. It is capped at 30 days in the contract itself: after that, approvals and collection work again, even if the pause is still active. The 30-day limit applies to each pause. In Test mode, one MyPact key can start and lift a pause.

What you’re signing

When you "Sign off," your approval is recorded permanently on the blockchain. It cannot be altered or deleted. This is a technical record, not a legal signature in the traditional sense. We show you a clear summary before you confirm.

Testnet first

You can create agreements in Test mode (Sepolia) with no real money. Live mode (real USDC on Base) opens on 13 October 2026. Until then, everything runs in Test mode.

Upgrades and audits

We can replace the contract’s code to fix bugs, and an upgrade could change any of the rules above. In Test mode, a single MyPact key can upgrade the contract. We announce every upgrade on this page at least 7 days before it takes effect. The exception is an urgent security fix, which we announce as soon as it is live.

We commit to a scoped independent security audit within 60 days of our mainnet launch, and we will publish the report here. Like all software, even audited code can contain bugs — use the test network to verify behavior before moving significant funds to the live network.

Check it yourself

These are the addresses MyPact uses. Each link opens the public block explorer, where the contract code is published and verified.

• Escrow contract (Test mode): 0x6D8DcCBBC4bf8a1f2D4c78199f72aA8da3B6915e
• Record contract (Test mode): 0x584303260669138E80E931EF7C7D0F09980A3562

Our only website is mypact.net. MyPact will never ask for your recovery phrase or wallet key.

Contract changes

Every change to the contracts is listed here. So far, Test-mode contracts have been deployed fresh for each version, so no Live contract has been upgraded.

• V16 · 1 Oct 2026 · Test mode — new contract. Every deposit is bound to the agreed terms, and only the payer can add approvers. Live mode starts on this version.
• V15 · 28 Sep 2026 · Test mode — new contract. The approval that meets the rule pays the payee in the same step; the payee can refund the payer at any time.

If MyPact is ever unavailable

Your money stays in the contract, which keeps working without our website. Each person can still do their part — approve, cancel, refund or collect — directly on the public block explorer, with their own wallet. Read the recovery guide. If you signed in with email or Google, back up your wallet key in Settings now, while MyPact is running.