FAQ
Where do my funds sit?
In your custody wallet. A swap sends its proceeds straight back there. A Blend supply made through Prime is held in the Prime Account's name while it's open, and withdrawing sends the funds back to custody.
Do I need a new wallet?
No. Any Stellar wallet that can sign Soroban authorisations works, for example Freighter. The wallet you connect first becomes the account's first signer.
Can an agent go beyond its rule?
No. The account contract rejects anything outside the rule's venue, amount band or approvals. Keep each agent key on one rule; see Setting up policies.
Can I stop a move after the agent has signed it?
Yes, if the rule has a wait. Custody or the account's signers can cancel it from the Queue until it runs. See Use the wait.
What happens if custody loses its keys?
If the gate has a recovery address, the Prime Account's signers can move the funds there without custody. See Recover custody funds.
What if I lose a Prime signer key?
With 2 of 3, the other two signers can still act and replace the lost key. With 1 of N, one stolen key can act alone. With N of N, one lost key locks the account.
Can I change signers later?
Yes, from the Signers tab on the Policies page. It takes two transactions. See Signers and approvals.
What does it cost?
Stellar network fees in XLM. Creating the account is one transaction. Setting up the gate is one plus one per asset, and the execution contract is two (create it, then let it run stored moves). Installing a rule or running a move is one each, and a move with a wait is two (store, then run).
Why did one transaction cost more than usual?
Stellar archives contract data when its lifetime runs out: on mainnet, about 120 days after it was created or last extended. The next transaction that uses it restores it and pays a one-off restore fee, which your wallet shows before you sign.
Is it audited?
An external audit is in progress. See Security.
What if the app goes down?
The funds are in your custody wallet, and the account and its rules are contracts on Stellar, so they keep working without the app. Pending co-sign requests are held by our service until they're submitted. The interpreter's address and code hash are published, so you can check what the account runs without relying on our app.
Is there an EVM version?
Yes, on the Base Sepolia testnet only. It follows the same steps as on Stellar, built from Safe, Zodiac Roles and OpenZeppelin contracts; see Prime on EVM.