Self-custody model

You always own your assets. MakeBanc does not, and cannot, take possession of them.

What self-custody means here:

When you allocate, your assets move into an ERC-7540 smart contract on Base: public, audited, immutable. Your wallet signs the transaction. You receive vault shares. No internal ledger says "MakeBanc owes you X." Only the on-chain record of your shares.

Why this matters:

If MakeBanc disappeared tomorrow, your shares still exist. The vault still operates. Your right to redeem is still enforceable through the contract.

"Non-custodial" is not a label. It's a property of the architecture. This is the platform's design position, supported by independent legal opinion.

What MakeBanc can and cannot do:

MakeBanc can:

  • Read your on-chain balance to display on the dashboard
  • Construct transactions for you to sign
  • Coordinate settlements with the asset manager
  • Apply fees as defined in the vault's smart contract rules

MakeBanc cannot:

  • Move your assets without a transaction signed by your wallet
  • Freeze your account
  • Reverse a signed transaction
  • Access funds redeemed to your wallet

This isn't a policy choice. It's a structural property of the smart contracts.

The signing layer:

Every meaningful action requires your wallet's signature: allocating capital, submitting a redemption request, cancelling a redemption before processing, updating access permissions on a Safe multisig.

The platform constructs the transaction and presents it. You review. You sign or you don't. Without your signature, nothing happens.

What this means in practice:

You are responsible for your wallet's security. The platform can't recover funds if you lose access; it doesn't hold a separate copy.

If you wouldn't trust a wallet to hold a meaningful amount of stablecoins, don't use it here. For enhanced key management: Safe multisig is supported. For a smoother experience: embedded Privy wallets are rolling out. These change the UX, not the model.

The trade-off:

Self-custody puts more responsibility on you. No support line can reverse a signed transaction. No escalation path ends with someone moving funds on your behalf.

That trade-off exists because the alternative is worse. Custodial platforms have failed catastrophically and frequently, because the asset manager could move customer funds, and under pressure, they did.

The non-custodial architecture is designed to prevent that category of failure. Because MakeBanc does not hold custody of user assets, the risk of asset manager misappropriation is structurally reduced, though not eliminated entirely.