Guardrail: Locking Down Delegate Calls in Safe

Safe Ecosystem Initiatives
1

Meet Guardrail - our new project at Safe Research, which introduces a simple, composable Guard that blocks unauthorized DELEGATECALLS in your smart wallet flow

Think of it this way:
Multisig = multiple keys to your vault
Guardrail = a security officer at the door, double-checking every transaction even after it’s signed

Guardrail focuses on one high-risk area: DELEGATECALL
This opcode lets your Safe run external code as if it were its own. Super flexible, but also dangerous if misused

Guardrail only lets your Safe DELEGATECALL into contracts on a specific allowlist.

  • You control the list.
  • New additions are time-delayed
  • Removals are instant

This gives you time to catch any malicious/dangerous transaction attempts.

For more information, read our blog post.

6 Likes
2

It will be great when the Safe native accounts from app.safe.global and ecosystem built Safes offer easy to set up and audited Safe Guards in the UI.

This is important for transactions txs where the tx data is not easily readable in the Safe app to automatically check for certain conditions.

  • ≤ Specified quantity of asset(s)
  • Specify specific assets or number of assets that can be transacted with at a given time
  • Allow and deny lists
  • etc.

Safe Guards are automated multifactor verification MFV.

1 Like
3

We just dropped Part 2 of our Safe Guard series. Read more about it in this thread: Fiducia - Onchain Trust Rules and Cosigning

1 Like