The Model: Cohesive Isolation
Blend’s architecture is built on the principle of Cohesive Isolation. Every user’s assets are held in a personal, dedicated Gnosis Safe smart contract wallet. You, and only you, are the owner of this Safe. This ensures that you always retain full custody of your funds. However, these isolated Safes don’t operate in a vacuum. They act cohesively, running sophisticated, automated strategies without ever compromising your custody. Permissioned modules and transaction guards make this possible.- Per-user Safe: Each account has its own Safe. There are no pooled funds, eliminating the risk of cross-user contamination.
- Sole Signer: You are the sole signer on your Safe. Whitelisted, on-chain modules that your Safe explicitly trusts handle all automation.
- Transaction Guards: Every transaction is validated by a
RolesGuardcontract, which enforces system-wide rules like emergency pauses and role-based access control.
How Automation Works
The “cohesive” part of the model is enabled by a set of audited, on-chain contracts that orchestrate strategy execution across all user Safes.What You Can Do
- Withdraw anytime: Directly from your Safe, bypassing all automation.
- Revoke permissions: Remove the
StrategyManagermodule from your Safe’s settings. - Monitor performance: Via the API or SDKs.
Account Isolation Diagram
Direct Exit
Because you hold the admin keys to your Safes on every chain, you can always exit directly. If Blend’s interface went offline tomorrow, your funds would still be in your Safes. You could:- Go to safe.global or any block explorer
- Interact with your Safe contracts directly
- Withdraw your funds on each chain independently
Contracts
Core contracts and interfaces.
Security Model
How your funds are protected.
How Blend is Different
SMA vs pooled vaults explained.
Cross-chain
How Safes work across chains.