Safety

#Your money

• We never hold it. Collectors pay the creator’s own @handle. xnft.money never receives, holds or forwards dollars.
• Refunds are guaranteed by a bond. Every creator posts one before selling; overdue refunds are paid from it.
• We don’t take payments we can’t deliver. Checkout pauses when a creator’s watcher is offline, a refund is overdue, the bond is missing, the chain is unavailable or deliveries are paused.

#What counts as proof

• Only the payment as it appears in the creator’s own X Money activity completes an order — never a screenshot or a pasted ID.
• Each watcher report is signed with a key that never leaves the creator’s device, and can’t be replayed.
• One X Money transaction can settle at most one order.
• A creator saying “refund sent” is a claim; the collector confirms it, or disputes it.

#Delivery

• Anything ambiguous goes to review; the piece stays locked. We never deliver on a guess.
• Every drop contract mints an order at most once, even if a transaction is retried.
• Delivery addresses are screened against sanctions lists; blocked wallets never receive anything.
• Repeated delivery failures stop that collection automatically and alert our team.

#Ownership

• Creators own their collection contracts. Our relayer can only mint, and the owner can revoke that.
• An NFT in escrow can only go to its seller or to the buyer holding the reservation.
• Creators can always withdraw their bond (after a 4-day delay) and their unreserved NFTs, even if a contract is paused.

#Staff and records

• Every sale is on the public ledger and on-chain.
• Every staff action is recorded, and nobody on our team can decide a case they’re part of.

During the private beta, contracts run on Base Sepolia; they will be audited before launch on Base.