Stay safe

How to stay safe with Arx Key.

Arx Key never holds your wallet's keys or your funds. Scammers still copy popular projects, so here is what is official, what we will never ask for, and what to do if something looks wrong. Last updated 1 November 2026.

What you sign, and what each signature does

Your wallet shows every request before you approve it. If it shows a different contract, amount or receiver than below, reject it.

You doWhat your wallet asksWhat happens
Create a SafeOne transaction to the Safe factoryA smart account that only your wallet owns. About 0.75 test CHZ of gas.
Fund the SafeSend CHZ to your own Safe addressThe CHZ moves from your wallet into your Safe. It is still yours.
Register a CharterOne transaction to the Arx Session ModuleWrites the agent's rules: allowed jobs, caps, expiry, its session key.
Pause or revokeOne transaction to the Session ModulePause stops every Charter on the Safe; revoke ends one Charter for good.
Start or stop a simulated agentOne transaction to the Arx simulation registryRecords who started which simulation and when. No CHZ or tokens go into it; about 0.2 test CHZ of gas.
Make an agent public or privateOne transaction to the Arx visibility settingPrivate leaves your agent out of the Live agents and Community lists on arxkey.com. It does not hide anything on-chain: anyone with the address can still read it. Only an owner of the Safe can change it. About 0.1 test CHZ of gas.
Buy a data callA signature for an exact USDC amount on BasePays $0.02 to $0.05 to the Arx Key desk. No gas for you.

Arx Key never asks your wallet to approve spending of your tokens. A page that asks for an unlimited token approval "for Arx Key" is not ours.

Official contracts

On the Chiliz Spicy testnet (chain id 88882) unless marked. Compare the address in your wallet with this list; each one opens on the explorer. Contracts marked source verified show their Solidity source on Chiliscan (verified 2 Nov 2026, compiler 0.8.24): open one and choose the Contract tab. Session Module v1.1 and v1.0 and the Safe setup helper were built from earlier source and are not verified. Verified source is not an audit.

ContractAddress
Session Module v1.2 source verified guards every new Safe0x7aed962126C674c268c422F82AE16Bc678f3d8Db
Session Module v1.1 · v1.0 older Safes0xD6C278682B1c25071E2593A7F7fBF0bAFf76b4E0
0x0219a4Af72C9af7810ef8D739e34792C1F34A029
Safe setup helper0x87da25b4712d76874aC5b30d865C64c3d434A497
Strategy registry source verified0x84e10FBcf5229c496d92A75c8762DB28E5245892
Strategy rules (manifests) source verified0xcaffA466b4D9D62B05CD4cad2519d8e0f0c86808
Settlement v2 · settlement gate both source verified0x97751513186b7E5Fe0913EaEF6D63cdd6F8A3159
0x866f7b6b46F33c551ae899a1fa5F6B6AB563e7ee
Simulation registry source verified records simulated agents, holds nothing0xF412a9B2274104729d2e5C3fA62B2D23919ccC4F
Visibility setting source verified public or private on arxkey.com, holds nothing0x7470Dc9730B11eEecF9CD90A223b76a346002210
Arx Pass · Arx Agent NFT both source verified0x3398d9A688EC5Ce013A6A10c6ED8ef40aD7ed937
0x6300485C055934D43199E2eacc4FA81696183129
Arx Fan Poll source verified demo poll for the Vote job0x947f4272b968c7188A0BBaa2900B5701fB52e065
Kayen stCHZ not Arx's; the Liquid-stake job may call it0xA1212D220143E36C6E3A96Dba4FFa6894a2EaA81
Arx hosted agent key the session key in "Let Arx run it"0xA65453BE568c788545E1A7C1fda2d01257F3F576
Data desk receiver Base mainnet, USDC0x168909Bd65B30d0F5411E68a054242635C3169A4

What an agent can and cannot do

It can

  • ✓Do only the jobs ticked in its Charter: stake, liquid-stake, trade, provide liquidity, vote.
  • ✓Call only the contracts on its allowlist.
  • ✓Spend only inside its daily cap, total cap and hourly limit, until its expiry date.

It cannot

  • ✕Send your funds to an address you did not allow, or make a raw transfer.
  • ✕Raise its own limits or extend its own expiry.
  • ✕Act after you pause the Safe or revoke the Charter.

The Session Module that checks every action has no admin key: Arx cannot change it, pause it for you or upgrade it. Only your Safe can create, pause or revoke its Charters. To stop an agent: open My agents and press Pause the Safe (stops every Charter at once) or Revoke on one Charter. One signature each.

The honest risks

Scams aimed at fan-token holders

Look-alike websites

A domain close to ours, often from an ad or a reply. Type arxkey.com yourself or use a bookmark.

"Support" in your DMs

Someone offers to fix a problem and sends a link or asks for your phrase. We never DM first.

Airdrops and claims

"Claim your Arx Key reward" or a token sale. We have no token.

Wallet "validation"

A page that says your wallet must be synced or verified with your seed phrase. Always a theft.

Unlimited approvals

A request to approve spending of all your tokens. Our flows never ask for one.

Fake partnerships

"Socios × Arx Key" rewards or giveaways. Check the partner's own official channels first.

Paying for data calls

On Pricing you can buy one call of the Fan Token & Chiliz data desk with a wallet.

If something looks wrong

  1. Pause your Safe in My agents, or revoke the Charter. This stops the agent at once.
  2. Do not sign anything else you do not understand, and do not share your seed phrase or keys with anyone.
  3. Email hello@arxkey.com with your Safe address and the transaction hash. We reply from that address only.
  4. If arxkey.com itself ever has a problem, we post it at the top of this page.

We cannot reverse transactions on a blockchain, and we will never promise to recover stolen funds; anyone who does is running a second scam.

Report a security problem

Email hello@arxkey.com with Security in the subject: what you found, how to repeat it on the Spicy testnet, and how to reach you. Test only with your own Safes and test CHZ, and give us time to fix it before you tell others. The same contact is in /.well-known/security.txt.