What Is Safe and How It Protects Your Picnic Account

Safe is the smart account technology that holds the assets of people who use Picnic. When you open your account, the app creates a Safe in your name. The Safe defines who can authorize a transaction, and that is why control of your assets stays with you, not with Picnic.

This post is part of a series about the partners that make Picnic possible. Of all the pieces, Safe is the one that sits closest to your money.

What is Safe?

Safe is a smart account: an account that lives in a smart contract, with programmable rules, instead of depending on a single private key. The project was born inside Gnosis, under the name Gnosis Safe, and later became an independent project.

According to Safe's own website, the technology has been securing self-custody at scale since 2017. In November 2026, the site listed more than 60 million accounts, more than US$60 billion in assets and more than 40 supported networks. It is the same foundation used by funds, companies and protocols that need serious security to hold assets.

The feature that made Safe famous is multi-signature: a wallet that only moves funds when a minimum number of keys approve. We explain this model in detail in our guide to multisig wallets.

How is a smart account different from a regular wallet?

In a regular wallet, everything depends on one private key, usually protected by a 12- or 24-word seed phrase. Lose the words and you lose access. If someone copies the words, they can take everything.

A smart account replaces that single key with rules. It can:

• accept other kinds of signatures, such as a passkey protected by your phone's biometrics;
• change who signs without you having to change your address;
• take modules, extra pieces that add features, such as a recovery flow.

This flexibility is what is called account abstraction (in Portuguese). In practice, it allows an experience closer to a regular app, without giving up self-custody.

How does Safe work inside Picnic?

Every Picnic account is a Safe. The app creates your account on the Safe-compatible networks Picnic uses, such as Ethereum, Polygon, Base, Arbitrum and Gnosis, and runs these accounts on the ERC-4337 standard, which lets Picnic handle the technical side of each transaction for you.

Three things change for you because of this:

1. You keep control of your assets. The Safe only executes a transaction with the signature authorized by your account.
2. You can sign with a passkey. Instead of writing down a seed phrase, you can use a passkey, authorized with Face ID, your fingerprint or your device PIN. The Safe recognizes that signature. We explain how this works in the guide on wallets without a seed phrase (in Portuguese).
3. There is a recovery path. When you turn on your passkey, Picnic installs a recovery module on your Safe. If you lose your device, recovery goes through a seven-day waiting period before it completes. That period exists to give you time to notice and react if someone tries to recover the account in your place. See the step-by-step guide in lost your phone: how to recover access (in Portuguese).

The recovery module is not a Safe product. It is provided by another partner, Candide, and it only works because Safe was designed to accept modules. It is a good example of how open pieces fit together.

What Safe does not do

It is worth being clear about the limits, because self-custody also means responsibility.

• Safe does not stop you from signing a transaction to the wrong address. Checking the destination is still your part.
• Self-custody is about control, not privacy. Picnic has operational visibility of balances in order to run the app, even though it cannot move them.
• A smart account is a smart contract. Audited contracts reduce risk, but they do not eliminate it. Safe reports more than 18 independent audits of its contract, which is part of the reason we chose this foundation.

Why this matters to you

Most apps that let you buy digital dollars or crypto hold the assets in the company's name. If the company freezes withdrawals or goes bankrupt, the customer is left waiting. With Safe, the account is yours from day one: the app is the interface, but the rule for who can move the money lives in the contract, not in an internal spreadsheet.

At the same time, you do not need to become a wallet expert to get this. Safe takes care of the contract's security; Picnic takes care of the app experience.

Thank you, Safe

Picnic exists the way it does because Safe built, tested and maintained, for years, a smart account foundation that people can trust. Building simple self-custody for people who have never heard of a seed phrase would be much harder without that work. Thank you to the Safe team for the partnership and for keeping this infrastructure open to the whole ecosystem.

Want to understand the logic of holding assets under your own control? Start with our guide on what self-custody is.

Picnic is a technology platform that lets users independently interact with USDC, a U.S. dollar-pegged stablecoin issued by Circle, on public blockchains. USDC is not legal tender in Brazil.

Displayed exchange rates vary with market conditions. The final applicable amount is the one shown on the transaction confirmation screen. Cryptoassets involve risks, including volatility and loss of peg.

Picnic does not custody user assets and is neither a financial institution nor a virtual asset service provider. Sending and receiving U.S. dollar payments through a U.S. account is offered in partnership with Noah Savings Inc. Terms and conditions apply.

Information verified in April 2026.