Safe: The Multisig Wallet Standard for Self-Custody

The Problem With Single-Key Wallets

Most people's first crypto wallet is a single-key wallet, also called an externally owned account, or EOA. MetaMask, Trust Wallet, and Exodus are common examples. These wallets are secured by one seed phrase, which doubles as the private key. If that phrase is lost, stolen, or mishandled, whoever holds it controls the funds outright — there's no second check and no way to intervene.

That's a manageable risk for personal spending money. It's a much bigger problem the moment more than one person has a stake in the funds. A single employee, co-founder, or teammate with sole access to a treasury key can drain it by accident or on purpose, and there's no way to stop them after the fact. Even a solo founder managing their own funds through one key is still exposed to that same single point of failure — lose the phrase, lose everything.

This is the gap Safe is built to close.

What Is Safe (Formerly Gnosis Safe)?

Safe is a smart contract wallet — often called a "smart account" — that runs on Ethereum and a wide range of other EVM-compatible networks. Instead of one private key controlling the funds, a Safe account is configured with a group of signer addresses and a threshold, such as 2-of-3 or 5-of-9, that must approve a transaction before it can be executed.

If a business has three core stakeholders, for example, the Safe can be set up so any two of them must sign off before funds move. No single person, however senior, can act alone. This same structure works whether the account belongs to a DAO treasury with dozens of signers, a startup with two co-founders, or an individual who wants redundancy across their own devices.

Because the wallet's logic lives in an audited, open-source smart contract rather than in a centralized custodian, users keep full self-custody throughout. There's no company holding the keys and no product team that can freeze the account — only the signers the account owner has chosen.

Gnosis originally built the project as the Gnosis Multisig, then rebuilt it as Gnosis Safe. In 2022 it spun out from Gnosis and rebranded as Safe, which is the name it operates under today, alongside the product name Safe{Wallet}.

How Safe Works

Ethereum accounts fall into two categories: externally owned accounts (EOAs), which are controlled by a single private key, and contract accounts, which are governed by code rather than a key. Safe is built as a contract account, meaning the rules for approving and executing a transaction are enforced onchain rather than by a single piece of hardware or software that could be lost or compromised.

A signer can approve a pending Safe transaction from a connected EOA wallet (like MetaMask or a hardware wallet), from the Safe web app, or from the Safe mobile app. Once enough signers have approved a transaction to meet the account's threshold, anyone can trigger its execution on the network.

This structure gives Safe users three practical advantages:

• Safer fund management — a transaction only goes through once the required number of signers agree, so no single person can move funds unilaterally.
• Accountability for sensitive transactions — meaningful transfers, contract upgrades, or treasury decisions require sign-off from multiple trusted parties.
• Redundancy — if one signer loses access to their key, the remaining signers can still operate the account and can replace the missing signer entirely.

Key Features

Multisignature control: Owners define exactly how many approvals are required before any transaction — including changes to the Safe's own configuration — can execute, which prevents any minority of signers from acting alone.

Transaction scanning and simulation: Safe can simulate a transaction and surface risk signals before it's signed, so signers can see what a transaction will actually do rather than approving blind.

Spending limits and roles: Safe supports daily spending limits and role-based permissions, so day-to-day operational spending doesn't require a full multisig approval every time, while larger transactions still do.

Multichain treasury management: Teams can deploy and track Safe accounts across many networks and manage them from a single interface.

Transaction Builder: Multiple actions can be bundled into a single transaction and a single signing step, which cuts down on repeated approvals and gas costs.

Safe Shield: Built with security partner Hypernative, Safe Shield adds automated transaction guards, custom security policies, and a monitoring dashboard, giving organizations enterprise-grade controls for blocking malicious or policy-violating transactions before they execute.

Which Networks Does Safe Support?

Safe is deployed on Ethereum mainnet and a broad and growing set of EVM-compatible networks, with new networks added regularly. The current, up-to-date list of supported chains is maintained on the Safe Help Center.

How to Create a Safe

Setting up a Safe account takes only a couple of minutes, according to Safe's own documentation:

1. Open the web app. Go to app.safe.global.

2. Connect a signer wallet. Safe supports a wide range of signer wallets. If you're deploying on a network that isn't fully gasless, make sure your wallet holds enough of that network's native token to cover deployment fees.

3. Name your Safe and choose signers. Give the account a name (stored only locally, never shared), then add signer addresses or ENS names. The wallet you connected is suggested as the first signer by default, and you can add or remove others.

4. Set the confirmation threshold. Decide how many of your signers must approve a transaction — or a change to the Safe's own settings — before it goes through. It's worth double-checking that you (or your organization) can realistically reach that threshold; if you can't, you risk locking yourself out of your own funds.

5. Review and deploy. You can either deploy immediately by paying gas ("Pay now"), or use a gasless setup that only requires payment when the first real transaction is sent ("Pay later"). Deployment itself typically takes well under a minute.

Note that a true multisignature Safe (more than one required signer) currently has to be deployed with an onchain transaction; only single-signer Safes can be created fully gaslessly.

Security and Trust

Safe's smart contracts are open source and have gone through multiple rounds of audits from firms including OpenZeppelin, Certora, Runtime Verification, and Ackee Blockchain, and the contracts are widely considered among the most battle-tested account infrastructure on Ethereum. Safe also emphasizes that it holds no admin backdoor over user funds — recovery options, like nominating a trusted guardian, are opt-in and controlled entirely by the account owner.

At the scale Safe now operates, security is treated as core infrastructure rather than an add-on: Safe Shield exists specifically because the platform now secures tens of billions of dollars in assets on behalf of DAOs, foundations, protocols, and individual power users, and a single compromised transaction at that scale can be catastrophic.

SAFE Token and Governance

Following its 2022 spin-out from Gnosis, Safe transitioned governance to a community-run body, SafeDAO, with control formalized in 2023. The SAFE token is used for governance decisions over the protocol's direction. For current tokenomics detail, allocation, and governance mechanics, Safe's own governance page and blog are the most reliable sources, since token distribution schedules and DAO structure have evolved since the token's original launch.

Conclusion

Secure, flexible custody is foundational to crypto actually working at scale — for individuals and even more so for organizations managing shared funds. Safe has spent years building toward that goal, evolving from an early Gnosis side project into what is now widely described as core infrastructure for onchain treasuries, DAOs, and protocols, with major players across the ecosystem — from the Ethereum Foundation to large DeFi protocols — relying on it to manage funds without handing custody to a third party.