Gnosis Pay’s on-chain infrastructure is built on top of the Safe protocol, providing a secure and programmable foundation for digital payments. Each user receives a unique Safe account that acts as their on-chain wallet, with additional modules that enable spending limits, time delays, and delegated spending capabilities.
Architecture Overview
The Gnosis Pay Safe consists of a core Safe account with three main modules:
- Core Safe Account: The base Safe wallet that holds funds and processes transactions
- Delay Module: Controls transaction timing and provides security delays
- Roles Module: Manages spending permissions and allowance limits
Instant Withdrawals
Withdrawals from the Gnosis Pay Safe reduce the spendable balance immediately to avoid double spending and then sync with the on-chain balance. During this process, the card is not blocked from operations.
Multi-Currency Support
The Roles module now supports multi-token configurations so that users can spend different currencies via their spending safe.
Module Configurations:
Delay Module Settings
- Transaction delay: 25 hours
- Transaction expiration: 31 hours
These extended timeouts are designed to discourage direct delay module interaction. Failed transactions require the full expiration period before they can be skipped.
Daily onchain spending limits
The Roles module enforces a hardcoded on-chain limit of $20K per token*, twice the card limit. This buffer exists because card clearing and settlement can take 1–4 days after a transaction, and the higher on-chain limit ensures uninterrupted card operations over that window without requiring any additional user signatures.
Any interaction with the delay module will block the card and require customer support intervention to resolve the issue.
Account balances state breakdown for authenticated user
Gnosis Pay provides detailed balance breakdowns to give users complete visibility into their fund status. The authenticated user’s account displays four distinct balance types:
