Safe{Labs}

Building products to make self-custody easy and secure

[Safe{Labs} @SafeLabs_]

Eight years. $100B in secured assets. Hundreds of treasury teams.

This is the security foundation our enterprise setup is being built on.

A clean Safe setup checklist for finance teams (a thread) 🧵

https://t.co/dyih732704

[Safe{Labs} @SafeLabs_]

Multisig isn't a buzzword. It's how you sleep.

In Safe, every owner is named, every threshold is explicit, and every signature is recorded onchain.

Add owners. Set quorum. Rotate when people change roles.

Treasury hygiene at the protocol level, with the security model protecting $100B+ in onchain assets.

https://t.co/jU2qmmTUa8

[Safe{Labs} @SafeLabs_]

Eight years. $100B in secured assets. Hundreds of treasury teams.

This is the security foundation our enterprise setup is being built on.

A clean Safe setup checklist for finance teams (a thread) 🧵

https://t.co/dyih732704

[Safe{Labs} @SafeLabs_]

An important clarification on the issue Zodiac has disclosed:

This is a vulnerability in two third-party Zodiac modules (Roles Modifier v2 and Delay Modifier v1.1.0).

Important: Safe smart contracts, Safe{Wallet} infrastructure and UI and account recovery, are not affected.

If you have either module enabled, follow the steps in Zodiac's notice.

We're supporting the response alongside the Zodiac Team, Gnosis Team, and the security community.

[Zodiac @zodiaceco]

Community Notice: Zodiac Roles Modifier v2 and Delay Modifier v1.1.0 — Security Update

We identified a vulnerability in two Zodiac modules: Roles Modifier v2 and Delay Modifier v1.1.0. It affects only accounts where one of these modules is enabled AND a Safe account with a vulnerable fallback handler is itself assigned as a module or role member to the affected module.

Safe smart contracts, Safe{Wallet} infrastructure & UI are not affected.
Other Zodiac modules and setups are also not affected.

We've been working directly with affected users since identifying the issue. Over 95% of identifiable accounts have already resolved it.

If you have either module enabled and have not yet acted, check your account and follow the steps: https://t.co/1wWBSPehT7

We apologize for the disruption and concern this incident has caused. Our team is working as quickly as we can to support affected users and help wherever possible.

A full post-mortem will follow.

If you have any questions, reach us at [email protected]

[Safe.eth @safe]

Safe{Research} spotlight 🔬

Traditional multisig: more signers = more gas.
FROST signature verification: ~5,600 gas. Whether you have 3 signers or 1,000.
That's 95% more efficient than pairing-based threshold signatures. It matches the FROST standard exactly (RFC-9591), with no EVM-specific modifications.
How we built it 👇
https://t.co/hm6MtGJuH2

[Safe.eth @safe]

First Slowly, Then All At Once

[Safe{Labs} @SafeLabs_]

Sophisticated attacks on treasury wallets are now standard. Safe Shield catches what humans miss:

→ Malicious contract simulation
→ Address screening
→ Anomaly detection

Default-on protection. Security your enterprise can scale with.

https://t.co/h3EjKGTTAZ

[Safe{Labs} @SafeLabs_]

Treasury ops don't pause when you're not at your desk.

Positions on Mobile gives finance leads the same complete view of every Safe, chain, and position – wherever they are.

Same Safe security standards. Full visibility on mobile.

https://t.co/qfpUDHy42n

[Safe{Labs} @SafeLabs_]

Safe Shield: real-time threat detection built directly into Safe{Wallet}.

Not a third-party add-on. Not an afterthought.

The security layer, inside the interface you're already using.

https://t.co/lpQrNbHc0s

[Safe{Labs} @SafeLabs_]

For treasury teams managing multiple Safes across chains, Positions gives you a single view.

Every Safe, every chain, every position.

Also on mobile.

https://t.co/oIz7qeol0n

[Safe{Labs} @SafeLabs_]

The most expensive typo in crypto is one wrong address.

Safe's Address Book helps:
✅ Label your trusted addresses
✅Protect against address poisoning
✅ Multichain support across all your Safes

One source of truth for every address your team touches.

https://t.co/j0RzGEdOe5

[Safe{Labs} @SafeLabs_]

@Fricoben Safe Shield (Copilot) only display flags.

So if the transaction has a tight execution window, and the user is convinced this is a false positive, they can manually verify and they can still execute (and report the FP)

[Safe{Labs} @SafeLabs_]

Eight years. $100B in secured assets. Hundreds of treasury teams.

This is the security foundation our enterprise setup is being built on.

A clean Safe setup checklist for finance teams (a thread) 🧵

https://t.co/dyih732704

[Safe{Labs} @SafeLabs_]

Multisig isn't a buzzword. It's how your CFO sleeps.

In Safe, every owner is named, every threshold is explicit, and every signature is recorded onchain.

Add owners. Set quorum. Rotate.

Treasury hygiene at the protocol level, with the security model protecting $100B+ in onchain assets.

https://t.co/jU2qmmTUa8

[Safe.eth @safe]

Safenet moves transaction security from warnings to enforcement.

Safe has processed $1.4T in cumulative value. For years, the security layer underneath crypto has relied on offchain heuristics, APIs, and UI warnings.

Safenet replaces that with cryptographic attestations verified onchain before a transaction can execute.

How it works:

→ a transaction is proposed
→ Safenet Validators check it against defined security rules
→ If it passes, they produce a cryptographic attestation
→ The Safe Guard verifies that attestation onchain
→ only then can it execute

If a transaction does not satisfy the protocol’s requirements, it cannot execute by default.

If the user still wants to proceed, they can do so with explicit additional owner approval after a delay.

Self-custody is never removed.

$SAFE now has its first live economic function beyond governance.

Validators stake SAFE to run the network. Delegators back Validators and can earn rewards without running infrastructure.

Safenet Beta is live.

Stake today: https://t.co/fyqC4rOQqe

[Safe{Labs} @SafeLabs_]

This is the end of the thread 💚

[Safe{Labs} @SafeLabs_]

This is the foundation. Everything we ship next compounds from here ✅