> select wallet

System Assurances,
F**K YOU.
Stake in SAFU.

Your exchange had assurances and your wallet provider had guarantees, and when your wallet got drained anyway, neither one paid you back.
Put in a small amount of ETH and get covered for up to fifteen times that, and if your wallet gets drained the contract pays you back automatically with no claim form, no committee, and no one deciding whether you deserve it.

[ whitepaper ]
100%
CATCH RATE
*test conditions, see below ↓
0.015Ξ
STAKE AMOUNT
15:1
COVERAGE RATIO
90d
COVERAGE WINDOW
—
ACTIVE STAKERS
// 01 — stake

How staking works.

safu-stake.sh
[01]
Connect your wallet
MetaMask, Rabby, Rainbow, Trust, Safe — any EIP-1193 compatible wallet.
[02]
Set your beneficiary
Payouts stream here if a claim is approved. Must be a different address from your staker wallet.
⚠ Do not enter your own staker wallet as beneficiary — payouts will be unclaimable. Use a separate cold wallet or trusted address.
✗ Beneficiary matches your staker wallet — change this before proceeding.
[03]
Get oracle approval
The SAFU oracle scores your wallet and issues a signed approval.
[04]
Stake 0.015 ETH
Your wallet will prompt for confirmation. Coverage activates immediately after the tx confirms.
// 02 — claim

If you get drained.

safu-claim.sh
[01]
Scan the drain transaction
Paste the Ethereum tx hash of the drain. The oracle scores it. Scanning is safe — no commitment, no consequences.
[02]
Drain detected — confirm claim submission.
The oracle confirmed a qualifying drain. Before submitting:
⚠ Submitting this claim permanently forfeits your 0.015 ETH stake. Your beneficiary will begin receiving the payout stream. This cannot be undone — no recourse once submitted.
[03]
Claim submitted.
Your claim has been submitted for activation. Payout will begin streaming to your beneficiary. No further action required.
[02]
Below threshold — request human review.
The oracle did not detect a qualifying drain. Submit a dispute for manual review.
safu-stream.sh — pull your daily entitlement
[—]
Pull claim stream
Call once per day after your claim activates. Claim ID is emitted in the ClaimActivated event on Etherscan.
// 03 — about

What is SAFU?

[ the problem ]

The system assured you. Your exchange had insurance. Your wallet provider had guarantees. When your wallet got drained, the system shrugged. No recourse, no payout, no accountability.

[ the protocol ]

Put ETH into the pool and get covered for up to fifteen times what you put in if your wallet gets drained. The math decides, with no humans involved and no governance vote.

[ the oracle ]

Every submitted drain gets scanned by the SAFU oracle, a closed-source fraud detection engine tested against verified real-world hacks. The same transaction always produces the same verdict, every time.

[ the catch rate ]

100% of confirmed drain transactions detected in controlled testing.* Human review is available for disputed verdicts.

*Based on test conditions using verified historical hacks. Real-world performance may vary.

// 04 — security

Independently audited and verified.

hashlock-ai-audit.txt — 2026-05-28
[ Hashlock AI Audit ]
CRITICAL1demo pool size — intentionally small, disclosed to all participants
HIGH4all reviewed — 1 minor improvement queued for next version
MEDIUM4all reviewed — 1 minor improvement queued for next version
LOW3accepted design choices
INFO4accepted
✓ all 18 findings reviewed
view full report ↗
halmos-symbolic.txt — 2026-05-27
[ Halmos Symbolic Execution — a16z ]
10 / 10
properties verified — zero counterexamples
  • Claiming permanently forfeits your stake, enforced on-chain by the contract itself
  • Pool balance stays accurate when a claim is cancelled
  • Once a claim is filed, the original stake cannot be withdrawn
  • All stake records reset correctly on cancellation
  • The two approval keys are always held by different addresses
  • Contract ownership cannot be transferred to the co-approval address
  • The contract never owes more than it holds in ETH
  • Payouts above the maximum allowed amount are always blocked
  • Payouts above coverage limits are always blocked
  • A cancelled claim can never release further payments
[ security review — comprehensive ]
CRITICAL 0 HIGH 0 MEDIUM 0 LOW 0
✓ PASS — 2026-05-27
[ forge test suite ]
37 / 37
tests pass — all fixes covered
[ contract ]
Solidity 0.8.25 · BUSL-1.1
etherscan verified ↗
[ your wallet stays yours ]

Staking sends your ETH to the pool and grants no further permissions. The contract is structurally prevented from accessing any other asset in your wallet, at any point before, during, or after staking.

[ your stake is protected on-chain ]

Mathematical verification confirmed the pool always holds more ETH than it owes. Only you can withdraw your staked ETH, and that guarantee holds regardless of who operates the pool or holds the signing key.

// 05 — team

Who built this

Murtaza Kanchwala
Co-founder

Murtaza spent years in crypto across sales, BD, and operations. He started SAFU after filing a claim on a wallet loss, waiting three weeks for a governance vote, and receiving nothing. He decided the fix was to remove the committee.

linkedin ↗ @MrMtazk ↗