safeaudit recovery-readiness for Safe multisigs

Can your Safe recover from a lost key?

Paste a Safe multisig address and pick the chain. safeaudit reads the public Safe Transaction Service (no auth, no KYC) and tells you on-chain whether the committee has headroom, a recovery module, a guard and a fallback handler — plus a 0-100 recovery-readiness score and concrete recommendations. Everything runs in your browser: nothing is sent to us.

try:

How the score works

  • Headroom (0/20/40): owners − threshold. ≥2 = 40, 1 = 20, 0 or negative = 0 and a critical note. Running N-of-N (threshold = owner count) leaves zero tolerance for a lost key.
  • Recovery module (0/15/30): 30 if a recognised recovery module is installed, 15 if modules exist but none recognised, 0 if none. Safe's recovery module (guardian + 7/14/28/56-day delay) must be configured before a key is lost.
  • Transaction guard (0/10): presence of a guard (hardening, optional).
  • Fallback handler (0/10): EIP-1271 signature validation handler (normal, not recovery).
  • Maximum 100. The score is a heuristic on public configuration data, not a security audit.

Why this exists

In February 2025 the front-end of Safe{Wallet} was compromised and made a multisig sign a change of implementation worth ~$1.4B (Bybit). The check has to happen outside the wallet UI. safeaudit does the recovery-readiness half of that check: are you configured so that losing one key does not brick the treasury? Pair it with txray for the transaction-decoding half.