Skip to main content

Security and Trust Model

STAKR uses explicit ownership and schedule constraints to make vault operations predictable.

Ownership Modes​

  • Managed vault: owner != address(0)
    Only owner can add/modify rewards.
  • Permissionless vault: owner == address(0)
    Any actor can add/modify rewards.

Use managed mode for most agent-owned production deployments.

Reward Guardrails​

  • Max 25 reward tokens per vault.
  • No duplicate active reward tokens.
  • Time windows must satisfy startTime < endTime and future-validity checks.
  • Reward funds are not withdrawn; they are extended or topped up via modify flows.

Operational Safety Recommendations​

  • Separate deployment authority from treasury funding authority.
  • Monitor reward window expiry to avoid unexpected reward interruptions.
  • Validate all addresses and settings before submission.
  • Log emitted reward events for observability.

Next Step​