Security

WorkTGT is a non-custodial service. Your team's funds sit inside a Safe multisig vault your team owns, and our servers never store any private key. Signing and payout execution always happen in each member's own wallet, and by design there is no path for WorkTGT to move funds on its own.

We never write our own smart contracts. Custody and execution run only on the long-proven Safe Protocol standard contracts, and when you create a Safe from the app it uses the official deployed contracts as-is.

Passwords are hashed with Argon2id, so the plaintext is never stored. After 5 failed logins the account is locked for 15 minutes.

We support two-factor authentication (TOTP), and sensitive actions like approvals require re-authentication. Sessions are kept only in HttpOnly cookies and can be reviewed and revoked per device.

All traffic is encrypted over HTTPS. Two-factor secrets are stored encrypted with AES-256-GCM, and a payout request's amount and receiving address use only server-computed values. Client input is never trusted.

Every action is kept in an append-only audit log that cannot be edited or deleted. For payouts, the on-chain transaction hash serves as a receipt anyone can verify directly on the blockchain.

If you find a security vulnerability, please tell us at [email protected]. We review reports with priority and welcome good-faith research.