Safenet launches four-firm security jury to defend multisig transactions against AI-powered attacks

Safe Labs has launched Safenet, a decentralized transaction security network for Safe accounts. Four independent firms, BlockSec, Candide, IntentGuard and OpenCover, assess transactions for new and emerging threats before execution. Each firm bonds every verdict, creating a financial penalty for errors. Safenet is now available to Safe Pro users on Ethereum, Arbitrum, and Gnosis Chain. Visible checks will expand to all Safe multisig users in 2027, with optional onchain enforcement through Safenet Guard to follow.

Safe Labs • 21 October 2026

Safenet launches four-firm security jury to defend multisig transactions against AI-powered attacks

BERLIN, Germany, 21 October 2026: Safe Labs today launched Safenet in Safe{Shield}, its security co-pilot. Before a transaction executes, Safenet submits it to a jury of independent security firms and records the jury’s verdict onchain.

Most self-custody losses begin when a user validly signs a manipulated transaction involving, for example, a poisoned address, a malicious app or a compromised front end. The user approves what appears on screen, unaware that it has been altered. AI is making these attacks cheaper to produce and easier to run at scale. Today, the main defence is often a warning within the wallet interface, an interface the attacker may also be able to manipulate.

Safenet replaces that interface-level warning with an independently verified verdict and makes the firms issuing it financially accountable. Each firm reviews the transaction and bonds its verdict. Incorrect verdicts can trigger slashing under the protocol’s rules. The outcome is recorded onchain for anyone to verify.

"Multisig gives organizations control over their assets, but control alone doesn't eliminate the risk of signing a malicious transaction. As more capital moves onchain, security needs to become part of how organizations operate, not another warning they have to interpret. By bringing Safenet into Safe Wallet, we're making independent transaction verification accessible within the workflows teams already use, while keeping them in control of their assets."

Rahul Rumalla, CEO, Safe Labs

“Safe accounts have processed over $1 trillion in transactions, and the attacks aimed at them are getting cheaper to run,”

“Security at that scale cannot rest on a pop-up warning that an attacker can also manipulate. Users need an independent second opinion with real accountability. That is the difference between a warning and an onchain verdict.”

Richard Meissner, co-founder of Safe

How it works

At launch, OpenCover, BlockSec, Candide and IntentGuard serve as Sentinels, evaluating transactions. Gnosis, Greenfield, Safe Labs and Core Contributors serve as Validators, combining the Sentinels’ verdicts and attesting the result. Safe{DAO} owns and governs Safenet.

  • Sentinels check transactions: When a transaction is proposed, independent Sentinels evaluate it against the Safenet Charter, a public rulebook maintained by Safe{DAO}. The checks cover recipient or target manipulation, changes to an account’s owners or threshold, dangerous approvals, delegatecall integrity and known malicious targets. No single Sentinel can approve a bad transaction or block a good one; split verdicts proceed to arbitration.

  • Validators attest to results: Validators combine the Sentinels’ verdicts into a single onchain attestation. A threshold-signature scheme ensures that no single Validator controls the key.

  • Safe Pro users see verdicts onchain: Safe Pro users can view every attestation onchain in the Safenet explorer today. In 2027, visible checks will expand to all Safe multisig users, and users will be able to activate the optional Safenet Guard. The Guard permits a transaction to execute only if it carries a valid attestation for that exact transaction. A delayed escape hatch ensures that users retain control of their accounts.

This release follows Safenet Beta and is the first production-ready version of Safenet. It is available now to Safe Pro users on Ethereum mainnet, Arbitrum and Gnosis Chain, with every check visible onchain. Optional enforcement through Safenet Guard will follow in 2027. The protocol’s core components have undergone audits and formal verification. Documentation and audit reports are available at docs.safefoundation.org/safenet, with further information at safenet.xyz.

Supporting Quotes

“Attacks on multisig users rarely break the cryptography. They trick the people signing, and those lures are getting more convincing and cheaper to produce. We see these patterns across chains every day. Safenet puts that intelligence in front of a transaction before it executes, with a bond behind our verdict, which is where it does the most good.”

Andy (Yajin) Zhou, Co-Founder, BlockSec

“Our threat intelligence has always been only as good as the user’s willingness to read it. In Safenet, our verdicts are bonded and enforced, so the protocol does the protecting instead of the user.”

Marc Sednaoui, Co-Founder, Candide

A transaction that's safe when signed isn't necessarily safe when executed. Today, understanding these risks requires expertise that we shouldn't expect from everyday users. To onboard the next billion users, proactive security must become the standard, not the exception. We're excited to be part of Safenet and help bring peace of mind to crypto asset users."

Jean-Loïc Mugnier, Founder & CEO, IntentGuard.

“Having covered bilions in onchain risk, OpenCover contributes its hardened transaction underwriting discipline to Safenet. We are excited to help Safe users stay safe onchain and protect teams operating at the onchain frontier.”

Jeremiah Smith, OpenCover


About Safe

Safe (previously Gnosis Safe) is an onchain asset custody protocol with over $1.4T in total value processed (TVP). Released as an open-source software stack by the Safe Ecosystem Foundation, it is establishing a universal smart account standard for secure custody of digital assets, data, and identity. Safe is built for the mission to unlock digital ownership for everyone in web3, including DAOs, enterprises, retail, and institutional users.

About Safe Labs, Berlin, Germany

Safe Labs GmbH builds enterprise-grade smart account infrastructure that brings Safe Smart Accounts to business and institutional use cases. Headquartered in Berlin, Germany, Safe Labs provides products and services for organizations adopting smart accounts at scale. Safe Labs GmbH is a wholly owned subsidiary of the Safe Ecosystem Foundation.

Website, Twitter, Blog, GitHub, Docs, Launch app

About the Safe Ecosystem Foundation, Zug, Switzerland

The mission of the Safe Ecosystem Foundation is to support the development of Safe, to strengthen Safe technology and to promote the Safe Ecosystem. The Safe Ecosystem Foundation is a non-profit organisation based in Zug, Switzerland, that helps educate people about Safe smart accounts and promotes Safe technology through the provision of grants and other forms of funding.

Website, Twitter, Blog, Research, Ventures

About the Sentinel and Validator partners

About BlockSec

BlockSec is a full-stack blockchain security and crypto compliance provider. We protect our customers’ crypto platforms by monitoring and intercepting malicious transactions, and help them meet AML/CFT obligations by identifying and tracing illicit funds.

Website, Twitter, Blog, LinkedIn

About Candide

Candide has built smart wallet infrastructure on Safe since 2022, processing over 2 million transactions for neobanks and fintech products. We help teams ship self-custodial wallets that feel as simple as a banking app: passkey login, gas paid in stablecoins, and one deposit address that works from any chain. We also build open-source signing tools that show users exactly what they’re approving.

Website, Twitter, Blog, GitHub, Docs

Safe Labs • 21 October 2026

Safe

Start in minutes. Scale to institutions

Get started with Safe{Wallet}, or talk to our Enterprise team.