Trust & security

The high-level answers to “why should I trust this with money?”

You can’t cheat the learning

• All grading happens on our servers — answer keys never reach your browser.
• Answers lock once checked, so options can’t be brute-forced.
• Replays and practice runs are clearly separated and never count toward streaks or yield.

We can’t touch your principal

• The vault is owned by an on-chain program with no “withdraw to admin” ability. The only destination your principal can ever have is your wallet.
• The worst our servers could ever get wrong is the yield percentage on a claim — never the principal.

The blast radius is capped

• Beta limits ($50 per lock, $1,000 platform-wide) are enforced by the blockchain itself, bounding what could ever be at risk while the system is young.
• If Locked In vanished tomorrow, the 180-day force return still gets everyone their funds back — it needs nothing from us to work.

Found a problem?

If you believe you’ve found a security issue, please reach out before making it public — responsible disclosure will be respected and credited. Contact links are at www.lockedin.quest .