# Treasury in wallets, payroll on chain, a month the accountant can read URL: https://www.orla.finance/en/for/crypto Markdown twin of that page. Append `.md` to any Orla page URL to get one. Basalt Labs pays contributors in USDC, keeps its treasury on three chains, and answers to an accountant. #### Wallets beside the bank USDC in a 2 of 3 Safe on Base, USDT on TRON, ETH in cold storage, SOL for grants, an exchange and a bank. What is the treasury worth this morning, and how much of it is really free? - Banks, exchanges, wallets and cash, added up to a treasury total. - An EVM address that turns out to be a Safe says so on its own: a "Safe 2 of 3" badge and a card with the owners and how many of them must sign, read from the chain when the account syncs. Nothing is typed in, and this is on every plan. - Live exchange sync is on every plan, the free one included, and bank feeds too where they are open for connection; plans do not count connections. What a plan counts is synced rows a month, shown on the Connections page. When they run out, sync pauses until the first of next month and nothing is lost; the trading journal does not use them. - Ask how much is really free: free on the accounts you can send from, committed to this week's payments, and what is left, per currency. Wallets and exchanges stand beside the figure, not inside it, because a position is not money to send. - Balance history per account, exchange P&L, send, receive and swap, WalletConnect. - Prove a wallet is yours before trusting it; share one account into another space. - A low balance alarm, and the balance reconciled against the provider. - A Rates card on the home board holds up to four pairs, fiat and coins together: the rate Orla values your money by, refreshed about hourly, not a trading quote. #### Payroll on chain: Orla proposes, the owners sign Three contributors paid in USDC on the first, out of a Safe. Who prepares it, who signs it, and what stops a single person, or Orla, from sending the treasury anywhere? - A queue for signature with an approval threshold and the number of signatures it takes; nobody signs a payment they prepared. - Paying from a Safe: the approved payment becomes a proposal in the Safe, and its row says "in Safe, awaiting signatures". Nothing has left until the owners sign to the threshold in Safe{Wallet} and execute. Orla checks the Safe once an hour and books the payment under its real transaction hash; a proposal that reverted or was replaced goes back to approved with a note. - Orla inside Safe{Wallet}: open Apps there, add a custom app with the address https://app.orla.finance/safe-app, and sign in by pairing the wallet you own the Safe with. Only an owner of that Safe gets in. The page shows the owners and the threshold, what waits in the Safe, and the payments your team already approved in Orla from that account: tick them, press Propose in Safe, and they enter the Safe's queue as one transaction for the owners to sign right there. - An owner can register Orla as the Safe's delegate with a signature from their own wallet. From then on an approved payment is proposed within the hour, and a run of several payments becomes one proposal. A delegate can propose and nothing else; Revoke takes it off, again with an owner's signature. - The chain obeys the owners, not Orla: a transfer signed straight in Safe{Wallet}, around the space's approvals, still lands in the book and is marked paid outside the space's rules in the audit trail, with one notice to the owners. Nothing is reversed. - The Safe queue is read on Ethereum, Base, Arbitrum and Polygon. Proposing needs the treasury features of a higher plan, and Orla turns these on per space. - TRON, EVM and Solana payouts with a quorum; an on-chain row becomes executed on the broadcast, not before, and never by one person alone. A TRON account that needs more than one key is signed rather than sent: each holder signs from their own wallet and Orla broadcasts when the weight is reached, which is being rolled out gradually. - A contact carries its wallet per chain; changing its rails takes the trust away. - Batch payouts, on the plans that carry them: up to 200 per batch, CSV preview, duplicate warning, autosave, and a template for the next one. #### An address screened before it is paid, and the name behind it A new contributor sends a wallet address in the chat, and their invoice names a company nobody has heard of. Is the address clean, is the company real, and who checked before the first payout left the treasury? - Screen an address before you pay it or the one that just paid you; keep addresses under watch; unscreened inbound money queues up, screened by hand or hourly. - Counterparty check, on the contact's card: the company or the person is screened by name against sanctions, politically exposed persons, criminal lists and adverse media, and a company with a registration or VAT number is confirmed in its registry. The verdict is a traffic light, Clear, Matches to read or Sanctioned, with the list each match came from. - A counterparty check spends one check from the same wallet the address screenings spend: one balance for both. A verdict under thirty days old answers again for free, pressing twice buys one check, and a provider that did not answer costs nothing. Not them marks a namesake under the name of whoever dismissed it, and a list that was cut short is never called Clear. - Every screening is one credit from a monthly grant that carries over up to three months, and an address verdict under a week old is reused in the space for free. - The assistant says whether a counterparty was checked and offers a paid check as a card with the price on it; it never runs one by itself. - The record stays: who screened what, when, and the verdict, exportable as a journal. #### The patterns fraud leaves A contributor's payout is going to a wallet that appeared on chain two days ago. Would anyone notice before it left, and would it say why? - TRON and Ethereum payouts watched for the patterns fraud leaves: kickbacks, ghost employees, split payments, brand-new wallets, and links to addresses known for scams. - Nothing to set up: your wallets and the contacts with crypto addresses are watched, and the role of each counterparty decides which patterns apply to them. - A finding names who, how much and why it fired; mark it handled or normal, or open the evidence as a PDF case with a public link for 30 days. - In the book as well as on chain: a line under a payment says This does not look like you when a payee is paid far above their usual, a first-time payee gets a lot by this book's scale, or the same amount goes to the same payee twice in a week. It explains and never blocks: signing works exactly as it did. #### Cost basis that survives a swap ETH bought last year, part of it swapped to USDC in March, some SOL granted out. What is the realised gain, and in which month does it sit? - Cost basis FIFO, LIFO or HIFO with the date and cost of acquisition; realised crypto gains in the same report. - The year in four steps: what is not ready, does it reconcile, the return, the seal. - A sealed year reports its own drift; the book is checked against the chain. - A trade is priced at its minute; a transfer between your own wallets is not income. #### A swap that stays in the book Six ETH become USDC for the quarter's payroll. Where does the gain sit, and does the accountant see one movement or two wallets that disagree? - Send, receive and swap from a verified wallet, and WalletConnect brings in the wallet you already use, nothing to install, no key to hand over. - A swap is priced at the minute it happened, and a transfer between your own wallets is neither income nor an expense, only a move between them. - Cost basis survives the swap, and the realised gain sits in the same month as rent. - Balance history per account, so the treasury's shape over time is a chart, not a memory. #### Agents that pay for what they use A research agent buys API calls with x402 and an indexer pays for compute. Whose money is it, how much may they spend, and who signed? - Every dollar an agent moved, with a receipt that says which agent, whose it is, how much, to whom, and who decided it: the agent, a human, or a decision still pending on it. - A fence per agent: a term, the x402 hosts it may pay with a ceiling per request, and a daily cap on its wallet, or a card whose balance is the whole limit. The worst case is the deposit it was given. - The first x402 payment pins the address a host is paid at; a later quote with another address is refused until the owner confirms the change by hand. - An agent can spend from a Safe allowance instead of its own float: the owners sign the setup in Safe{Wallet}, and the chain itself holds the limit. This is being rolled out gradually. - Watch mode by default. An agent pays out alone only from its own wallet, inside your limits; a payout from the treasury is its proposal, and people sign it. - Freeze an agent and even its reads refuse; its rights are recomputed on every call. #### Idle USDC earning on Aave, without handing over a key The treasury sits idle between payrolls. Can it earn on Aave, and can the team borrow against it, without anyone holding a private key on their laptop? - Aave v3 positions per wallet with their rates; Orla never holds a key. - Calldata prepared unsigned, the health factor checked, a quorum on the large ones. - Liquidation risk is watched hourly; borrowing stays off without that watch. #### Cards funded from the treasury Infra bills want a card and the conference wants a hotel. Can a stablecoin treasury pay for them without a bank in the middle? - Cards on a prepaid balance you fund in USDT or USDC, Visa or Mastercard as you choose per card. - A card per person with a ceiling, freeze and block; the issuer's history is checked against what you allocated, so a stray charge shows up the same day. - Cards for agents, fenced by balance: a card holds what you moved onto it and nothing more. New agent cards carry no merchant rules or limits at the issuer, so the balance is the whole fence and the card says so. - Refunds are answered in the books on their own. #### Who can move money, and what holds them Four people, three chains, one treasury. Who can sign, who can only prepare, and what does the auditor read at the end of the month? - Roles: owner, admin, member, viewer, accountant. - Signing rules: a threshold, the number of signatures, address book only, a monthly allowance per person counted across every door. - The authority map: who in this book can move money, and what holds each of them. - A monthly oversight report frozen the day after the month ends, with the exceptions to the approval rules listed, one page instead of the log. #### Five people around one Safe - Founder: Signs in Safe{Wallet} what the team approved in Orla, and reads the treasury as one figure. - Treasury: Prepares the payroll batch and proposes it to the Safe, screens every new address and the name behind it, and answers the findings. - Finance lead: Keeps the cost basis right, prices the swaps, and closes the month. - Team member: Files the conference receipt from the channel and sees only what is theirs. - Accountant: Starts from crypto rows already priced by the day, and reads the closed period without editing it. #### Ask it before you sign off a payout A payment on your signature comes with who they are, what you paid them before, and how far this one is from usual. - A brief before you sign: For a payment on your signature: who they are, what you paid them before, their risk, and how far this amount is from usual. - A payee out of pattern: A payment that does not match the history of that payee and amount, on any rail, not only crypto. It explains and never blocks. - Free against this week: Three figures for each currency: Free, Committed to the week's payments, and Left. Wallets and exchanges stand beside them, not inside. #### Six chains, a Safe, six exchanges and the bank Six chains by address, a Safe through Safe{Wallet}, six exchanges by read-only key, the bank by feed. #### Orla proposes to the Safe. Its owners sign - Your keys stay yours: Wallet keys stay in your browser or your signer. Orla never signs as a Safe owner or executes: it only proposes, and holds only a card balance or an agent's wallet. - Quorum: A threshold and the signatures it takes; the proposer never counts toward their own quorum. - Screened first: An address is screened before it is paid, and the counterparty behind it by name, from one balance of checks; the verdict and who asked for it stay in the journal. - Watched: Payouts on TRON and Ethereum are watched for the patterns fraud leaves, with nothing to set up. #### Questions ##### Does Orla hold the treasury? No. Wallets are watched by address and proven yours by a signature; keys stay in your browser or your signer. From a Safe, Orla only proposes: the owners sign to the threshold in Safe{Wallet} and execute, and Orla never signs as an owner. Elsewhere a payout is prepared as unsigned calldata, waits for the quorum, and becomes executed on the broadcast, not a minute before. ##### How does Orla get into Safe{Wallet}? As a custom app you add by its address: in Safe{Wallet} open Apps, add https://app.orla.finance/safe-app, and sign in by pairing the wallet you own the Safe with. Only an owner of that Safe gets in. The payments your team approved in Orla are ticked there and proposed as one transaction. Proposing needs the treasury features of a higher plan and is turned on space by space. ##### Is checking a counterparty by name a separate purchase? No. It spends one check from the same balance the address screenings spend, and the plan's monthly checks and the pack apply to both. A verdict under thirty days old answers again for free, and the assistant never runs a paid check by itself. ##### Do exchange connections need a paid plan? No. Live exchange sync is on every plan, the free one included, and plans do not count connections. A plan counts synced rows a month; the Connections page shows how many are used, and when they run out sync pauses until the first of next month with nothing lost. ##### How is a swap booked? A trade is priced at the minute it happened, a transfer between your own wallets is not income, cost basis survives the swap, and the realised gain sits in the same month as rent. ##### What does the accountant get? The month as a zip archive, a journal CSV and each account's feed for QuickBooks Online and Xero, with the crypto rows already priced into the base currency.