> ## Documentation Index
> Fetch the complete documentation index at: https://docs.microset.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Security Overview

> A concise summary of Microset's behavior and security posture.

<Info>
  This page is the fastest way to understand Microset's behavior and risk
  posture. Each claim links to a more detailed page elsewhere in this
  documentation, and can be independently verified against the source code and
  on-chain data.
</Info>

## At a glance

Microset is a non-custodial **Solana prediction market**. Users connect their own
Solana wallet, and every on-chain action — placing a prediction or claiming winnings —
requires a transaction the user explicitly signs. Stakes are held in
program-controlled vault PDAs and paid out only according to on-chain rules.

## Why Microset is safe to use

<AccordionGroup>
  <Accordion title="Non-custodial by design">
    Users sign their own Solana transactions. The program cannot move a user's
    funds without that user's signature. See [Wallet Interactions](/security/wallet-interactions).
  </Accordion>

  <Accordion title="Transparent, rule-based settlement">
    Market reserves live in program-derived vault accounts and pay out by fixed
    on-chain parimutuel formulas. See [Contracts](/security/contracts)
    and [Transaction Safety](/security/transaction-safety).
  </Accordion>

  <Accordion title="Reviewable, open instructions">
    Every program instruction, its access rules, and the events it emits are
    documented in [Contracts](/security/contracts) and verifiable in the source.
  </Accordion>

  <Accordion title="Independent, data-driven resolution">
    Outcomes are not set by Microset. Markets are resolved using **trusted
    third-party data APIs** (such as the Roanuz Sports API), tying settlement to
    real-world results.
  </Accordion>
</AccordionGroup>

## What Microset does NOT do

<Warning>
  The following behaviors are not part of Microset. Each can be verified against
  the source code and on-chain data.
</Warning>

| Behavior                                  | Status                                                  |
| ----------------------------------------- | ------------------------------------------------------- |
| Request seed phrase or private keys       | ❌ Never                                                 |
| Execute hidden or background transfers    | ❌ Never — funds move only via signed instructions       |
| Use deceptive or blind signature requests | ❌ Never — sign-in message and transactions are explicit |
| Take custody of user funds off-chain      | ❌ Never (non-custodial; reserves held in on-chain PDAs) |
| Use Ethereum / EVM contracts              | ❌ Solana-only                                           |

## Security checklist

* [ ] No seed phrase / private key requests — **Confirmed by design**
* [ ] No hidden transfers — **Confirmed: funds move only through documented instructions**
* [ ] No blind/deceptive signatures — **Confirmed by design**
* [ ] All actions user-initiated and user-signed — **Confirmed by design**

## Contact details

| Field                    | Value                                       |
| ------------------------ | ------------------------------------------- |
| Project                  | Microset                                    |
| Website                  | [https://microset.io](https://microset.io)  |
| Support email            | [tech@microset.io](mailto:tech@microset.io) |
| Security / abuse contact | [tech@microset.io](mailto:tech@microset.io) |