Trust and security
Your money, in an account only you control.
Oiko runs on USDC and USDT stablecoins on NEAR. Here is exactly who can do what, the code you can check, and the risks in plain words.
Who holds the money
Your name, like steve.oiko.near, is your identity account. It holds your keys. Your money lives in a separate account, vault.steve.oiko.near, which has no access keys: nobody can sign for it directly, including Oiko. It only follows the rules in its code, on instructions signed by you or by an agent you allowed.
You
steve.oiko.near holds your keys, on your device (passkey).
Your account
vault.steve.oiko.near holds the money. It has no keys of its own and its code cannot be changed.
Your agents
Each gets a limited key the account added itself: caps, payees, expiry. Revocable at once.
Code you can check
Every account runs the same published code. There is no upgrade method and no admin key. The fingerprint below is read live from the deployment.
Account code fingerprint (sha256 code hash)
…
Every Oiko account runs this exact code. You can compare it with the hash of the code built from the open-source repository.
- Name registryn/aCreates names and each person’s account. Holds no money.
- USDCn/aThe USDC stablecoin contract (issued by Circle).
- USDTn/aThe USDT stablecoin contract (issued by Tether).
- Lending (Earn)n/aRhea lending market used only by pots with Earn switched on.
- ROSCA savingsn/aHolds ROSCA contributions and bonds under fixed rules.
Locks only the date can open
When you lock a pot until a date, the account code refuses every withdrawal from it before that date. There is no override: not you, not Oiko, nobody. You can extend a lock, never shorten it.
Agent limits and revoke
Oiko has no built-in AI. When you connect your own agent, your account adds a key that can only call Oiko’s agent methods, never transfer freely. The account checks every request against the limits you set: what it may read, whether it may only suggest or also act, per-payment, daily and weekly caps, the payees it may pay, and an expiry.
Every request is written to an access log you can read. Disconnect deletes the agent’s key from your account immediately. Oiko cannot verify who runs an agent, so only connect agents you trust.
Earn safeguard
Earn is off by default. If you switch it on, that pot is lent on the Rhea lending market. Before lending, your account checks how much of the pool is already borrowed and refuses above 92% (never configurable above 95%), so you can usually take money back out. This is a safeguard, not a guarantee.
Risks in plain words
- Stablecoins are not dollars. USDC and USDT are stablecoins designed to track the US dollar. They are not dollars and are not bank deposits. They can lose their peg and issuers can freeze them.
- Not a bank, not insured. Nobody insures your balance.
- Smart contract risk. Bugs in Oiko’s code or in the contracts it uses (stablecoins, lending) could lose money. Because the account code cannot be upgraded, a bug cannot be patched in place.
- Yields are variable and can go to zero. Lending can be paused or run out of room.
- Your device matters. If you lose every way to sign in and your recovery options, nobody can recover the money for you.
- Agents can be wrong. An agent can make bad choices inside the limits you gave it. Keep caps small.
Oiko is not a bank. Balances are not insured. Yields are variable and can go to zero. Stablecoins carry issuer risk. Not investment, legal or tax advice.