Security.

Two models must agree.

Every check sends the same question to a model from OpenAI and a model from Anthropic, and neither sees the other’s answer. Only an answer both give is delivered.

Charged only on agreement.

SECONDED settles a payment only when the two models agree. When they disagree, or a fact SECONDED verified contradicts a “proceed”, the result is NOT VERIFIED and nothing is charged.

Facts from two readers.

Checks that read the chain use two independent readers that must agree at the same block. If they disagree, the check stops before either model is asked, and nothing is charged.

Tested on cases the models have never seen.

Test cases are written and cross-checked by models from labs outside the tested pair, and held out until the run. More on how checks are tested.

On September 27, 2026, before mainnet launch, the code that takes payment and the Trade Check code were reviewed by AI models from a different model family than the one that wrote the code under review. The launch-blocking problems those reviews found were fixed and reviewed again before launch.

These are internal reviews that we ran with AI models. They are not an audit: no outside firm has audited SECONDED, and no review can show that code is free of bugs.

Agreement is not proof.

Both models can make the same mistake, and no check catches every problem. No per-check accuracy figure is published yet.

Some trades are not fully decoded.

Trade Check fully decodes a Uniswap Universal Router trade only through one of Uniswap’s official router deployments, which SECONDED pins and reviews; a trade that is not fully decoded never gets a “proceed”. The preview of a transaction’s effects is not available yet. A Permit2 permit’s signature scope is not checked, and neither is who controls a token that is not on a reviewed list.

Stock tokens on Base.

On Base, Stock Token Check flags a pause for a corporate action, but it does not measure halts or trading restrictions, and market holidays are not modelled.

Spending limits are yours.

SECONDED installs nothing on your side and keeps no budget for you. Set a price ceiling on each check, set any other budget in your agent or its x402 client, and keep only a few dollars in the paying wallet.

Your key stays with you.

SECONDED never holds or asks for the paying wallet’s key. Keeping that key safe is up to you and your agent.

What a check is, and isn’t

If you find a security problem in the SECONDED service, its API or this site, email support@secondedoracle.xyz. Tell us what you found and how to reproduce it, with the receipt ID if there is one.

Report privately first.

Give us time to fix a problem before you describe it in public.

Do no harm.

Do not overload the service, reach data that is not yours, or move funds that are not yours.

Never send a key.

SECONDED never asks for a seed phrase or a private key, and a report never needs one.

No bug bounty.

There is no paid bug bounty.

This contact is also published at secondedoracle.xyz/.well-known/security.txt. For anything that is not a security problem, use Support.