Security & Custody
An honest map of the trust model: what CSL custodies, what it does not, and the specific guards that stop a bad price or a bad actor from draining the book.
What CSL holds
CSL is custodial during the beta. Deposited USDC sits in protocol-controlled Solana accounts, your balance is an entry in CSL's ledger, and withdrawals are executed by the protocol. That is the plain truth and you should size your positions with it in mind.
What CSL never touches: your Steam inventory, your skins, your private keys. Nothing about a position requires you to hand over an item.
Oracle guards
A perp is only as safe as its price feed, so the mark is defended on several fronts:
- Multiple sources. Marketplace prices are aggregated, not taken from a single seller.
- Smoothing. The mark is an exponential average, so one absurd listing cannot move it.
- Stale-price guard. If the feed goes quiet, trading on that market is blocked rather than run on a rotting price.
- Outlier rejection. Ticks that jump implausibly against the recent mark are discarded.
Details in Price Oracle.
Engine guards
| Guard | Why it exists |
|---|---|
| Per-position collateral cap | One account cannot become the whole book. |
| Open-interest cap per market | Bounds the house's exposure on a single skin. |
| Liquidation buffer | Positions close while collateral still covers them, not after. |
| Withdrawal rate limits | A stolen session cannot drain an account instantly. |
| Idempotent deposit scanner | Keyed by transaction signature — no double-credits, ever. |
Your side of the deal
- Sign in with an account you control — a compromised X or Google account is a compromised CSL balance.
- Double-check the destination address on every withdrawal. On-chain transfers are final.
- CSL will never DM you, never ask for a seed phrase, and never ask you to "verify" a wallet by signing a transfer.
Where this is going
Custodial beta is a starting point, not the destination. The path to reduced trust runs through on-chain settlement of balances and positions. See Roadmap for what is committed and what is still an intention.