Security &
Custody
StakeMyGold is non-custodial. You keep control of your wallet. Staking is executed via smart contracts.
StakeMyGold is an independent platform and is not affiliated with GGBR, XAUT, PAXG, or any token issuer.
Wallet control
You connect your wallet and approve transactions. StakeMyGold never holds your private keys.
Smart contract execution
Staking actions are executed on-chain through smart contracts.
Permissioning
No account creation is required to stake. Access is controlled by your wallet.
At StakeMyGold, security is a continuous, evolving process. To augment our periodic CertiK audits, we crowdsource our security through an active Bug Bounty Program, inviting top Web3 researchers to stress-test our smart contracts around the clock.
How it works:
CertiK's seasoned security engineers act as the first line of defense. They screen and validate all bug submissions, filtering out noise to ensure rapid response to genuine threats.
When a vulnerability is verified, CertiK works alongside our development team to implement and deploy the correct fixes securely before any public disclosure.
Go to FAQ ↗Every resolved finding is integrated directly into our CertiK Skynet Trust Score, ensuring our real-time security metrics are transparent and up-to-date for the GGBR community.
We continuously monitor and protect your staked assets to ensure the highest level of security for your funds.
Monitoring and incident response processes
Change management for contract updates
Transparency updates for material changes
While we employ robust security measures, any activity involving smart contracts and third-party partners carries inherent risks that you should be aware of:
| Risk Category | Explanation | Mitigation |
|---|---|---|
| Smart Contract Risk | The possibility of a bug or vulnerability in our staking smart contract that could be exploited, leading to a loss of funds. | Our smart contracts are designed with security best practices and are often subject to independent audits by Certik and Cyfrin. |
| Rehypothecation/Counterparty Risk | The risk associated with our institutional partner who stores and uses the majority of your tokens as collateral. If the partner were to face insolvency or operational failure, it could affect the recoverability of your assets. | We partner exclusively with reputable, regulated financial institutions and maintain strict legal agreements to safeguard staked assets. |
| Liquidity Risk | The risk that the on-chain withdrawal pool temporarily runs low. While we are committed to full coverage, extreme, unforeseen market events could theoretically delay the immediate processing of a large, simultaneous volume of unstaking requests. | The system is designed to always have full coverage between the on-chain pool and the partner's balance, minimizing this risk. |
| Gas Fee Volatility | The transaction fee (Gas) required to stake or unstake can spike significantly during periods of high network congestion on Ethereum. This doesn't risk your staked principal, but it can make it temporarily expensive to unstake. | We recommend monitoring gas prices and transacting when the network is less busy (e.g., non-peak hours). |
It is an ongoing security initiative that financially rewards ethical (white-hat) hackers for discovering and responsibly reporting vulnerabilities in the StakeMyGold smart contracts or related infrastructure.
Go to the dashboard to start gold staking.
