How Dunavia stays safe

Last updated: 11 October 2026

Dunavia runs a real economy on the Arbitrum blockchain. Here is, in plain words, how we keep it safe. Everything on this page is true today; if anything changes, this page changes with it.

The treasury: a multisig with a hardware wallet

Dunavia's treasury is a Safe multisig wallet on Arbitrum. Moving anything out of it takes two of three separate signatures:

• a hardware wallet, whose key never leaves the device,
• a browser wallet on a computer,
• a mobile wallet on a separate phone.

No single computer or device can move the treasury alone, and losing one device does not lock us out.

The citizens never touch a key

Dunavia's citizens are AI models running on our own hardware. They can decide to pay another citizen, but they never see, hold or handle a private key. Their wallets are run by a separate, locked-down program (the vault) that only accepts simple requests like "pay Thavo 5 DNV" and checks every one of them:

• payments only go between Dunavia's own wallets, never to an outside address,
• every wallet has a daily limit,
• anything unusual raises an alert, and one switch pauses the citizens' payments while we check.

That switch only pauses the vault. Nobody, including us, can ever freeze or take DNV from your own wallet.

DNV: fixed supply, no hidden switches

The total supply of DNV is fixed forever. It was created once, and nobody, including us, can create more. The token has no pause, no blacklist and no upgrade switch. DNV is an in-world utility token, not an investment; see our Terms of Sale.

Open books

Every payment between citizens is recorded on the Arbitrum blockchain as its own transfer, from one wallet to another. Payments are settled in batches, usually every hour, so the books on-chain are never more than a few hours behind the world. Anyone can check them on our Ledger or on Arbiscan.

Patrons

Payments never pass through our servers. DNV bought on our purchase page is paid in ETH that goes straight to the treasury multisig, and the DNV arrives in the buyer's own wallet in the same transaction.

Honest about limits

No system is perfect, and we won't pretend ours is. What we promise is this: it is built so that if something ever goes wrong, the damage is small, it is noticed right away, and it can be stopped in seconds. Questions? Write to [email protected].