Security

Small on purpose, plain about risk

The less a contract can do, the less can go wrong with it. Here is what the ledger and the relay can do, what they cannot, and what you should keep in mind.

The ledger

MutiqActionLedger

Status: Deployed
Address: 0x2ab870450de2013184ad53e7a2d44365d03d0f16
Chain: Robinhood Chain (4663)
Global owner, fee, upgrade: None
Holds funds: No
Machine-readable: /contracts.json

What are the risks?

Before you rely on it

· The code is young and has not been through wide use. Use it with care.
· A simulation can differ from the real outcome, because state moves between the two.
· Local data lives in your browser. Clearing site data forgets the queue.
· Ledger writes are public and permanent. Keep private details out of names and scopes.
· Read what your wallet shows before you sign. The wallet's screen is the one that counts.

The contract can

01
Keep a record
Namespaces, roles, rules, action states and repeat counts.
02
Refuse a registration
A rule, a pause, an open conflict or a passed deadline ends in a custom error.
03
Let namespace admins manage their own space
Roles are per namespace, and a namespace always keeps one admin.

The contract cannot

01
Hold or move funds
Nothing is payable, there is no receive function and it makes no external calls. ETH sent to it reverts.
02
Touch another namespace
No address has power over a namespace it holds no role in. There is no global owner, fee or upgrade path.
03
Stop your other transactions
It knows only what is registered with it.
04
Prove an outcome
A bound hash and a reported result are an operator's words. Anyone can check them against the chain.

The relay

01
Never sends
Signed transactions are refused, and only listed read methods pass.
02
Capped simulations
Gas is capped at 3,000,000 and call data at 32 KB. State overrides are refused.
03
Narrow log reads
Ledger events only, numeric block bounds, 20,000 blocks at most.
04
Budgets
Each network has a cost budget and the whole site has a ceiling, always charged.
05
No secrets
The site needs no key to run, and it never asks for your wallet's secret phrase.