No single person can move Kutip's money.

The ecosystem fund and escrow withdrawals are gated by a Safe multisig on Kite testnet. Two of three signers must approve any transaction — so even if one signer's key leaks, funds stay put. Attestation signing stays on the agent's AA (fast path), config changes go through the Safe (slow path).