A Safe owner can replace a signer without asking SAFE voters. SafeDAO can pass a proposal without becoming the owner of every Safe account. Safe Labs can ship a wallet interface without acquiring the assets inside those accounts. The history of SAFE is best read by keeping those control rooms apart.
Gnosis Safe began as an open-source multisig project inside Gnosis. GIP-29 in February 2022 proposed spinning it out, forming a Swiss foundation and minting SAFE so a new SafeDAO could govern defined ecosystem assets.
That institutional change did not convert user vaults into DAO property. A Safe account remains self-custodied by the addresses and threshold recorded in that account.
The account is a small proxy holding owners, threshold and assets while delegating logic to a versioned singleton. A factory lowers deployment cost and makes canonical addresses reproducible across networks.
There is no central upgrade that silently rewrites every deployed Safe. Owners must authorize a migration transaction that changes the singleton pointer.
That autonomy carries a sharp edge: delegatecalling an untrusted migration can hand over the whole account. Version and deployment registry checks matter more than a familiar logo.
Modules may execute through alternative authorization paths; guards inspect or veto calls; fallback handlers add interfaces such as ERC-1271 and the Safe4337Module’s ERC-4337 validation.
Each extension changes the trust boundary. Owners approve installation, but a malicious module can move assets and a malicious guard can stop transactions.
“Guardian” is especially overloaded here. An account guard is code selected by owners, while Safe ecosystem Guardians were a token-allocation constituency; neither is a Foundation master key over every Safe.
SAFE lives on Ethereum at 0x5aFE3855358E112B5647B952709E6165e1c1eEEe. The constructor minted 1 billion with 18 decimals and no inflation or burn route; April 2024 governance used the owner Safe to unpause transfers forever.
The distribution did not unlock on one date. SafeDAO’s 40% treasury runs over eight years, while GnosisDAO, contributors, backers, users and Foundation portions use different immediate amounts, cliffs and mostly four-year vesting.
The contract owner remains the Safe at 0x8CF60B289f8d31F737049B590b5E4285Ff0Bd1D1. With transfers already unpaused, that owner cannot pause them again or mint; its residual powers include transferring ownership and rescuing other ERC-20s accidentally sent to the token contract.
SAFE holders can vote with eligible vested and unvested power or delegate it. Anyone may develop a proposal, but token weight matters at the voting stage.
The governance framework draws a perimeter: SafeDAO covers its treasuries, constitution, frameworks and transferred protocol domains; Foundation fiat and its own SAFE allocation remain outside unless dedicated.
The Swiss Foundation stewards procedures and can implement outcomes where required. Since 2025, its wholly owned Safe Labs subsidiary commercializes products, but token ownership is not corporate equity or a blanket claim on that revenue.
Safenet Beta added a live use beyond voting in April 2026. Six permissioned genesis validators check transactions and issue attestations that an installed guard can enforce; holders delegate SAFE behind them.
By Q2, 54.8M SAFE sat behind 539 staker addresses. The experiment is real but bounded: SafeDAO approved 5M SAFE for six months of rewards, Beta terms say rewards are experimental and no slashing applies, and withdrawals are not on demand.
SAFE can therefore secure an optional layer without becoming necessary for ordinary multisig execution. That distinction protects the strongest fact in Safe’s story: the account answers first to its own owners.
The multisig account product begins inside Gnosis.
The plan separates Safe, creates SafeDAO and calls for a Swiss foundation and fixed SAFE token.
Governance begins before the token becomes freely transferable.
SEP-4 gives the new DAO a mission and governing principles.
SEP-22 executes unpause through the owner Safe without changing vesting schedules.
The Foundation creates a wholly owned commercial subsidiary for product growth.
SAFE delegation begins behind six permissioned genesis validators.
The Foundation reports 54.8M SAFE staked across 539 addresses.
Last evidence review: 2026-09-05
Safe began as Gnosis Safe and became independent infrastructure for programmable, self-custodied EVM accounts. A Safe Smart Account is a proxy controlled by its configured owners and threshold; Safe{Wallet} is one interface, and Safe Infrastructure serves builders. SAFE is a separate Ethereum ERC-20 used for SafeDAO voting and, since 2026, Safenet Beta staking. Running an ordinary Safe account does not require SAFE.
A single-key EOA makes one key the whole security policy. Safe moves policy into an account contract: several owners can approve, transactions can be batched, and modules, guards and fallback handlers can extend behavior. This flexibility creates a second problem—an enabled module may execute without the normal multisig path, a malicious guard can block funds, and migration to a bad singleton can surrender the account.
Each proxy delegates logic to a versioned Safe singleton but keeps its own owners, threshold and assets. Owners approve changes to modules, guards and handlers and can deliberately migrate the proxy implementation. The SAFE token at 0x5aFE3855358E112B5647B952709E6165e1c1eEEe minted 1,000,000,000 units once, has 18 decimals and no mint or burn path. Transfers were irreversibly enabled in April 2024. Holders may vote or delegate voting power within SafeDAO’s defined scope. Safenet Beta now lets them delegate staked SAFE to a permissioned validator set; its current rewards are DAO-subsidized and Beta terms specify no slashing.
No. Account ownership, thresholds and gas operate independently of SAFE. SAFE is used for SafeDAO governance and Safenet staking.
An existing proxy continues using its selected singleton until that account’s owners authorize a migration. A malicious migration, module, guard or fallback handler can compromise or block that particular account.
The Ethereum contract minted 1 billion once and exposes no further mint or burn function. It is unpaused permanently; ownership remains relevant for ownership transfer and rescuing unrelated ERC-20s, not inflation.
They can vote or delegate within SafeDAO’s defined domains, including DAO treasury and governance frameworks. Foundation fiat and its own SAFE allocation are outside that scope unless specifically dedicated.
Safenet Beta accepts delegation to a permissioned validator set. Q2 2026 recorded 54.8M SAFE staked, but rewards are experimental and DAO-subsidized; Beta terms state no slashing and no perpetual reward guarantee.
No reviewed instrument makes a holder a shareholder of the Swiss Foundation or Safe Labs, or promises redemption, dividends or a general claim on product revenue or account assets.
Choose a tracking site for Safe:
