Security & trust
A platform that touches institutional capital is a permanent target. Here is exactly what CapFin does — and does not do — to earn trust, with no vague reassurances.
Non-custodial by design
CapFin never takes possession of your assets. In practical terms: your funds sit in a wallet, multisig, or institutional custodian that only you control. CapFin can generate a proposed transaction, but it cannot move a single dollar without that wallet's signature. There is no CapFin-controlled account for an attacker (or a bug) to drain, because CapFin was never holding the funds in the first place. This is also why CapFin does not need to register as a money transmitter in this phase — non-custodial, propose-only architecture is the specific design choice that keeps it that way.
A minimum bar for every protocol we touch
CapFin doesn't treat every DeFi protocol as fair game just because it offers a yield. Protocols are only eligible for inclusion once they clear a defined bar: audits from at least two reputable security firms, a minimum track record and total value locked, and no unresolved critical findings. This is a floor, not a substitute for the risk scoring described on the How It Works page — a protocol can clear this bar and still score poorly if its risk profile changes.
Independent audits and a public bug bounty before real funds move
Any smart contract CapFin authors itself — for example a future router or vault contract — will go through independent third-party audit and a public bug bounty before it is ever used with real client funds. We are not asking you to take that on faith once it matters: audit reports will be published, not just referenced.
Skeptical-by-default risk scoring
CapFin's scoring methodology is built to discount unaudited, high-APY opportunities hard — not as an afterthought, but as the core design goal. A protocol that looks exciting on a headline-APY chart and a protocol that is actually safe are two different rankings, and CapFin is built to show you the second one by default.
An honest note on where we are today
CapFin.ai is currently in Phase 1 systems testing. No real funds are being allocated through the platform yet, and the sign-up flow you can try right now creates a test account only — it does not link a real wallet or move real assets. Custody, fiat conversion, and full regulatory licensing (covered in detail in our internal architecture plan) are explicitly out of scope for this phase and will only be introduced alongside the corresponding legal and banking work. We would rather tell you exactly what phase we're in than imply more maturity than the product actually has.