Safe (formerly Gnosis Safe) is the smart-contract wallet that holds the money for most of the DAO world. It is a multisignature account: instead of one private key, a Safe is controlled by a set of signers and a threshold – an “m-of-n” rule such as 4-of-7 – so no single person can move funds, and a transaction executes only once enough signers approve it on-chain. First shipped as Gnosis Multisig in 2017, rewritten as Gnosis Safe in 2018 and rebranded to Safe in 2022, it has become the base custody layer for DAO treasuries. (Safe docs) On non-EVM chains the same custody role falls to dedicated multisig standards – on Solana, Squads.
A Safe is deployed as its own contract account with an owner list and a confirmation threshold. To spend from the treasury, an owner proposes a transaction; other owners add their signatures; once the threshold is met the Safe contract executes it atomically. Ownership, threshold and the queued transactions are all on-chain and publicly inspectable, which is why a DAO can hold a nine-figure treasury in a Safe and have every member verify exactly who can authorize a spend. (what is Safe)
Safe is deliberately minimal at its core and extended through modules (which can trigger transactions under custom rules) and guards (which add pre-execution checks). This is the seam where custody meets governance: Zodiac's SafeSnap module lets a passed Snapshot vote execute against the Safe under an optimistic challenge window, turning an off-chain signal into a binding treasury action without handing the keys to a single party. (UMA retired oSnap, the other module of this shape, on 15 December 2025; treasuries that still have it installed should disable it.) Most DAO payments, streaming and analytics tools build directly on the Safe account model, and a further layer sells the workflow above it – Den adds notifications, decoded transactions and gas paid from the Safe without deploying any contract of its own. (Safe modules)
A treasury is a DAO's most valuable and most attacked asset, and Safe hit the pragmatic sweet spot: fully self-custodial and on-chain, but simpler and cheaper to run than a bespoke on-chain governor for a small or early organization. Its ubiquity is self-reinforcing – because nearly every treasury tool integrates Safe, new DAOs adopt it by default, and it secures a large share of all EVM DeFi value. (Messari: Safe)
A multisig is a deliberate compromise. It buys speed, low cost and operational safety, but it concentrates power in the signer set: the treasury is only as decentralized as its m-of-n, and a colluding or compromised majority of signers is a real risk – which is why mature DAOs pair a Safe with on-chain governance (a Snapshot-plus-SafeSnap bridge or a full Governor) rather than letting a small council spend unchecked.
Caper folds custody into the protocol instead of bolting on a separate multisig. A caper's treasury is a contract-controlled vault governed directly by member votes and executed on-chain, so there is no signer set to trust and no threshold to capture. It also adds a property a Safe does not have: members can exit and redeem their fair share of that treasury, set by the same earned vote weight that governs their votes – not a claim by balance alone, since the redemption consumes both the governance tokens and the soulbound vote tokens a member earns only by voting – so custody and exit are governed by the same rules rather than by a council's discretion.