Security
How the money in a deal is protected, who controls what, what has been checked, and what has not. Every contract is verified on-chain, so every line here can be checked against the code.
We can never take the money in a deal.The owner of the contract can set the protocol fee and pause new deals. That is all. There is no sweep, no rescue and no withdraw function: money only ever leaves a deal to the client or the provider.
Pausing never touches a live deal.A pause stops new deals from being created. Every existing one carries on: accept, deliver, approve, release and refund all keep working.
Terms cannot change after you agree.Amounts, due dates, the review window and the kill fee are written into each deal when it is created. No later setting can reach them.
Exact amounts or nothing.If a token arrives short, creating the deal fails. The provider can never find out at the last milestone that the money was never all there.
A client who goes quiet cannot freeze the payment.Once the review window has passed, anyone can release a delivered milestone. Silence is approval.
A provider who misses the date cannot keep the money.After a due date the milestone can no longer be delivered, and the client takes it back in full.
Status
Read from the site's own services when you open this page.
Checking...
Checking...
Checking...
Who controls what
| Contract | What the owner can do |
|---|---|
| VeilRetainer | Set the protocol fee for new deals and pause new deals. Nothing that touches a live deal or the money in it. |
| VeilFeeRouter | Change the split, the marketing wallet, the keeper or the minimum holding, each only after 48 hours' public notice on-chain. Switch payouts off at once in an emergency. |
| FeeSplitter | Choose where protocol fees go. It only ever holds fees, never deal money. |
| $VEIL | No owner. A plain token launched on Pons. |
Today one wallet owns the three contracts above: 0x3887...321d. That is a single key. It cannot reach the money in any deal, and every action it takes is public on-chain.
Read this before committing anything.
The contracts are not audited by a third party. Do not lock money you cannot afford to lose until they are.
The contract never judges the work. A client can reject a delivery they do not like; what protects the provider is the kill fee agreed at hire, not a verdict.
Listings, proposals and names are off-chain claims. A profile's record of finished, paid and missed deals is read from the contract and cannot be edited, but it says nothing about work done elsewhere.
What has been checked
185 contract testsacross the protocol, 26 of them on the retainer alone: every state, every deadline and every way to end a deal.
Every deal action rehearsed on a copy of mainnetagainst the live retainer contract, with exactly what the site sends: hire, accept, deliver, approve, reject, release, reclaim, cancel and resign.
Marketplace checks against the live contract.A deal is linked to a listing only after the chain confirms who the client and the provider are.
Source verified, exact match,for every deployed contract, so what you read is what runs.
Found a problem?
If you find a bug that could put money at risk, send a direct message to @veilmarketplace on X before you share it anywhere else, with the contract, the function and the steps to reproduce it. We will reply, fix it, and credit you publicly if you want.