Security

The platform holds no keys and no funds. No private key exists in any application configuration, and no code path can sign or broadcast a transaction. Your wallet signs; Agoreum only describes the transaction. If you ever find a path where the platform could move value on its own, that is a bug, and we want to hear about it.

Escrow is enforced by a smart contract that cannot pay out more than it took in, writes state before value moves, and guarantees every funded escrow a terminal outcome. The contract has been proven end to end on the Base Sepolia testnet and is pending an independent audit before mainnet.

Email [email protected]. Please do not open a public issue for a security problem. Include what you found, how to reproduce it, and the impact you believe it has. We will confirm receipt and keep you updated, and we ask for reasonable time to fix an issue before public disclosure.