Payment Rails CROPS Dashboard
Unaudited, unvetted, experimental. Do not use as a reference. AI-researched ratings that may be wrong; not advice or a statement of fact about any provider. Full disclaimer
Pending review. 1150 of 1150 ratings not yet checked by a human. Do not rely on unreviewed ratings.

Evidence-only assessment

Payment rails, rated on what can be verified

50 payment rails rated on 23 questions about who can block payments, whether the code is open and free to reuse, what leaks about users, and who can lose or lock up funds. Every rating rests on an onchain read or a file at a pinned commit, never on a vendor's word. Each rating's newest evidence was checked or re-confirmed between 2026-10-07 and 2026-10-19 (median 2026-10-19).

How to read this

3 Strong
Property fully held and verified from code or chain
2 Partial
Held, with a bounded and disclosed compromise
1 Weak
Weakly held, or supported by documents only
0 Fails
Absent, only claimed, or disproven
No evidence
Nobody has submitted checkable evidence yet. Counts as 0.

Ratings by pillar

Show

Select a rating for the provider's findings and evidence, or compare every criterion side by side. Select a column heading to sort within each group.

ProviderCensorship ResistanceOpenFreePrivacySecurityCROPS tallycriteria heldEvidence
Checkout and invoicing 3
Coinbase Commerce (Onchain Payment Protocol)BaseBase0 Fails Weakest: Admin pause or freeze powers1 Weak Weakest: Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences1 Weak Weakest: Tracking and analytics; Data collected beyond payment; Payments linkable onchain; Third parties in the payment flow0 Fails Weakest: Audits and bug bounty11 of 23 hold up12 fall short23 of 23 evidenced
0 reviewed
Daimo PayBaseBase0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services0 Fails Weakest: Can be self-hosted0 Fails Weakest: Open-source licences; No proprietary dependencies1 Weak Weakest: Tracking and analytics; Data collected beyond payment; Payments linkable onchain; Third parties in the payment flow0 Fails Weakest: Who holds funds in transit; Funds safe if provider disappears; Audits and bug bounty7 of 23 hold up16 fall short23 of 23 evidenced
0 reviewed
Request NetworkBaseBase0 Fails Weakest: Token and chain freeze risks disclosed1 Weak Weakest: Can be self-hosted2 Partial Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies0 Fails Weakest: Payments linkable onchain0 Fails Weakest: Token approval scope; Audits and bug bounty13 of 23 hold up10 fall short23 of 23 evidenced
0 reviewed
Cards 14
Bitget Wallet CardArbitrum OneArbitrum OneSettles in USD24, EUR24, CHF24 +1 · platform token0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Neutral settlement, disclosed filtering No evidence Weakest: Can be self-hosted0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Endpoints can be changed0 Fails Weakest: Who holds funds in transit; Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty2 of 23 hold up16 fall short · 5 no evidence18 of 23 evidenced
0 reviewed
SafePal CardArbitrum OneArbitrum OneSettles in USD24, EUR24, CHF24 +1 · platform token0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Neutral settlement, disclosed filtering No evidence Weakest: Can be self-hosted0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Endpoints can be changed0 Fails Weakest: Who holds funds in transit; Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty2 of 23 hold up16 fall short · 5 no evidence18 of 23 evidenced
0 reviewed
Ethena PayAvalanche C-ChainAvalanche C-ChainSettles in USDe, USDC · stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services0 Fails Weakest: Can be self-hosted0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Tracking and analytics; Endpoints can be changed0 Fails Weakest: Who holds funds in transit; Secrets and webhook handling; Audits and bug bounty1 of 23 hold up17 fall short · 5 no evidence18 of 23 evidenced
0 reviewed
Tuyo CardBaseBaseSettles in USDC · stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services No evidence Weakest: Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies0 Fails Weakest: Payments linkable onchain; Third parties in the payment flow; Endpoints can be changed No evidence Weakest: Who holds funds in transit; Who can upgrade the code; Token approval scope; Secrets and webhook handling; Audits and bug bounty0 of 23 hold up12 fall short · 11 no evidence12 of 23 evidenced
0 reviewed
Wirex OneBaseBaseSettles in WUSD, WEUR · platform token0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services0 Fails Weakest: Can be self-hosted0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies0 Fails Weakest: Endpoints can be changed0 Fails Weakest: Who holds funds in transit; Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty1 of 23 hold up20 fall short · 2 no evidence21 of 23 evidenced
0 reviewed
Holyheld CardEthereumEthereumSettles in USDC · stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Token and chain freeze risks disclosed0 Fails Weakest: Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; No proprietary dependencies0 Fails Weakest: Payments linkable onchain; Endpoints can be changed0 Fails Weakest: Who holds funds in transit; Who can upgrade the code; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty2 of 23 hold up20 fall short · 1 no evidence22 of 23 evidenced
0 reviewed
Payy CardEthereumEthereumSettles in USDC · stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services1 Weak Weakest: Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Endpoints can be changed0 Fails Weakest: Who holds funds in transit; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty4 of 23 hold up16 fall short · 3 no evidence20 of 23 evidenced
0 reviewed
Gnosis PayGnosis ChainGGnosis ChainSettles in EURe, GBPe, USDC.e · stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services1 Weak Weakest: Can be self-hosted0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies1 Weak Weakest: Tracking and analytics; Data collected beyond payment; Third parties in the payment flow1 Weak Weakest: Who holds funds in transit; Audits and bug bounty10 of 23 hold up13 fall short23 of 23 evidenced
0 reviewed
MetaMask CardLineaLineaSettles in USDC, USDT, WETH +5 · stablecoin, other token, platform token0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services1 Weak Weakest: Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies0 Fails Weakest: Endpoints can be changed0 Fails Weakest: Who holds funds in transit; Audits and bug bounty5 of 23 hold up15 fall short · 3 no evidence20 of 23 evidenced
0 reviewed
ether.fi CashOP MainnetOPOP MainnetSettles in USDC, USDT, EURC · stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services No evidence Weakest: Contracts verified onchain0 Fails Weakest: Open-source licences; No proprietary dependencies0 Fails Weakest: Tracking and analytics; Endpoints can be changed No evidence Weakest: Secrets and webhook handling5 of 23 hold up15 fall short · 3 no evidence20 of 23 evidenced
0 reviewed
Exa CardOP MainnetOPOP MainnetSettles in USDC, exaUSDC · stablecoin, other token0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services1 Weak Weakest: Contracts verified onchain; Can be self-hosted0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies0 Fails Weakest: Endpoints can be changed0 Fails Weakest: Who holds funds in transit6 of 23 hold up17 fall short23 of 23 evidenced
0 reviewed
Plasma OnePlasmaPPlasmaSettles in USDT0 · stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services0 Fails Weakest: Can be self-hosted0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Endpoints can be changed0 Fails Weakest: Who holds funds in transit; Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty2 of 23 hold up15 fall short · 6 no evidence17 of 23 evidenced
0 reviewed
Fuse CardSolanaSolanaSettles in USDC · stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services0 Fails Weakest: Contracts verified onchain; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Endpoints can be changed0 Fails Weakest: Who holds funds in transit; Secrets and webhook handling3 of 23 hold up17 fall short · 3 no evidence20 of 23 evidenced
0 reviewed
XPlace CardSolanaSolanaSettles in USDC · stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services0 Fails Weakest: Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies0 Fails Weakest: Payments linkable onchain; Third parties in the payment flow; Endpoints can be changed No evidence Weakest: Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty1 of 23 hold up14 fall short · 8 no evidence15 of 23 evidenced
0 reviewed
Protocols for privacy-preserving transfers 16
Aleo (credits.aleo private transfers)AleoAAleo mainnet1 Weak Weakest: Admin pause or freeze powers1 Weak Weakest: Can be self-hosted0 Fails Weakest: Protection against relicensing2 Partial Weakest: Tracking and analytics; Third parties in the payment flow No evidence Weakest: Audits and bug bounty18 of 23 hold up4 fall short · 1 no evidence22 of 23 evidenced
0 reviewed
CurvyArbitrum OneArbitrum One0 Fails Weakest: Admin pause or freeze powers; Reliance on hosted services1 Weak Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; No proprietary dependencies1 Weak Weakest: Tracking and analytics; Data collected beyond payment; Third parties in the payment flow No evidence Weakest: Secrets and webhook handling5 of 23 hold up17 fall short · 1 no evidence22 of 23 evidenced
0 reviewed
Aztec (Alpha mainnet private token transfers)AztecAztec mainnet (Alpha)0 Fails Weakest: Token and chain freeze risks disclosed1 Weak Weakest: Can be self-hosted0 Fails Weakest: Protection against relicensing2 Partial Weakest: Tracking and analytics; Payments linkable onchain; Third parties in the payment flow1 Weak Weakest: Audits and bug bounty19 of 23 hold up4 fall short23 of 23 evidenced
0 reviewed
Blanksquare (Shielder)BaseBase0 Fails Weakest: Token and chain freeze risks disclosed1 Weak Weakest: Can be self-hosted; Interfaces and data export2 Partial Weakest: Protection against relicensing; No proprietary dependencies1 Weak Weakest: Tracking and analytics; Data collected beyond payment1 Weak Weakest: Who holds funds in transit; Who can upgrade the code; Audits and bug bounty13 of 23 hold up10 fall short23 of 23 evidenced
0 reviewed
FluidkeyBaseBase0 Fails Weakest: Reliance on hosted services; Token and chain freeze risks disclosed0 Fails Weakest: Can be self-hosted0 Fails Weakest: Open-source licences; Protection against relicensing No evidence Weakest: Tracking and analytics; Endpoints can be changed No evidence Weakest: Secrets and webhook handling8 of 23 hold up12 fall short · 3 no evidence20 of 23 evidenced
0 reviewed
AnomaPayBNB ChainBNB Chain1 Weak Weakest: Admin pause or freeze powers; Reliance on hosted services; Neutral settlement, disclosed filtering; Token and chain freeze risks disclosed0 Fails Weakest: Can be self-hosted0 Fails Weakest: Open-source licences No evidence Weakest: Tracking and analytics0 Fails Weakest: Who holds funds in transit; Secrets and webhook handling5 of 23 hold up16 fall short · 2 no evidence21 of 23 evidenced
0 reviewed
zERC20 (zBNB on BNB Chain)BNB ChainBNB Chain0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services0 Fails Weakest: Can be self-hosted0 Fails Weakest: Open-source licences; Protection against relicensing1 Weak Weakest: Tracking and analytics; Data collected beyond payment; Third parties in the payment flow; Endpoints can be changed0 Fails Weakest: Funds safe if provider disappears; Audits and bug bounty2 of 23 hold up19 fall short · 2 no evidence21 of 23 evidenced
0 reviewed
HinkalEthereumEthereum1 Weak Weakest: Admin pause or freeze powers; Reliance on hosted services; Neutral settlement, disclosed filtering; Token and chain freeze risks disclosed0 Fails Weakest: Can be self-hosted0 Fails Weakest: Open-source licences; No proprietary dependencies0 Fails Weakest: Endpoints can be changed0 Fails Weakest: Funds safe if provider disappears; Secrets and webhook handling5 of 23 hold up17 fall short · 1 no evidence22 of 23 evidenced
0 reviewed
Privacy Pools (0xbow)EthereumEthereum0 Fails Weakest: Admin pause or freeze powers; Reliance on hosted services No evidence Weakest: Contracts verified onchain0 Fails Weakest: Open-source licences; Protection against relicensing1 Weak Weakest: Tracking and analytics; Data collected beyond payment1 Weak Weakest: Who holds funds in transit; Who can upgrade the code10 of 23 hold up11 fall short · 2 no evidence21 of 23 evidenced
0 reviewed
RailgunEthereumEthereum0 Fails Weakest: Token and chain freeze risks disclosed1 Weak Weakest: Can be self-hosted0 Fails Weakest: Open-source licences0 Fails Weakest: Tracking and analytics0 Fails Weakest: Token approval scope17 of 23 hold up6 fall short23 of 23 evidenced
0 reviewed
Tornado Cash (Classic pools)EthereumEthereum No evidence Weakest: Token and chain freeze risks disclosed1 Weak Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted2 Partial Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies2 Partial Weakest: Tracking and analytics; Third parties in the payment flow; Endpoints can be changed1 Weak Weakest: Token approval scope; Audits and bug bounty17 of 23 hold up5 fall short · 1 no evidence22 of 23 evidenced
0 reviewed
Umbra CashEthereumEthereum0 Fails Weakest: Admin pause or freeze powers; Token and chain freeze risks disclosed1 Weak Weakest: Can be self-hosted2 Partial Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies2 Partial Weakest: Tracking and analytics; Data collected beyond payment; Third parties in the payment flow; Endpoints can be changed0 Fails Weakest: Token approval scope18 of 23 hold up5 fall short23 of 23 evidenced
0 reviewed
WORM (BETH proof-of-burn)EthereumEthereum2 Partial Weakest: Neutral settlement, disclosed filtering; Token and chain freeze risks disclosed1 Weak Weakest: Can be self-hosted0 Fails Weakest: Open-source licences0 Fails Weakest: Endpoints can be changed1 Weak Weakest: Audits and bug bounty17 of 23 hold up6 fall short23 of 23 evidenced
0 reviewed
MoneroMoneroMMonero mainnet2 Partial Weakest: Admin pause or freeze powers; Settle without the provider; Neutral settlement, disclosed filtering; Token and chain freeze risks disclosed No evidence Weakest: Contracts verified onchain2 Partial Weakest: No proprietary dependencies2 Partial Weakest: Tracking and analytics; Third parties in the payment flow1 Weak Weakest: Audits and bug bounty20 of 23 hold up2 fall short · 1 no evidence22 of 23 evidenced
0 reviewed
Tongo (confidential ERC-20 on Starknet)StarknetSStarknet1 Weak Weakest: Token and chain freeze risks disclosed No evidence Weakest: Contracts verified onchain2 Partial Weakest: Protection against relicensing; No proprietary dependencies1 Weak Weakest: Payments linkable onchain1 Weak Weakest: Audits and bug bounty17 of 23 hold up5 fall short · 1 no evidence22 of 23 evidenced
0 reviewed
Zcash (shielded transfers)ZcashZZcash mainnet2 Partial Weakest: Admin pause or freeze powers; Settle without the provider; Neutral settlement, disclosed filtering; Token and chain freeze risks disclosed No evidence Weakest: Contracts verified onchain0 Fails Weakest: Protection against relicensing2 Partial Weakest: Tracking and analytics; Third parties in the payment flow No evidence Weakest: Audits and bug bounty19 of 23 hold up2 fall short · 2 no evidence21 of 23 evidenced
0 reviewed
Incumbent baseline 17 About the baseline
Avalanche CardOff-chainOff-chainSettles in USDC, USDT, AVAX +1 · stablecoin, native token, other token0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Token and chain freeze risks disclosed0 Fails Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Payments linkable onchain; Endpoints can be changed No evidence Weakest: Who holds funds in transit; Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty0 of 23 hold up11 fall short · 12 no evidence11 of 23 evidenced
0 reviewed
Avici CardOff-chainOff-chainSettles in USDC · stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Token and chain freeze risks disclosed0 Fails Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Payments linkable onchain; Endpoints can be changed No evidence Weakest: Who holds funds in transit; Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty0 of 23 hold up11 fall short · 12 no evidence11 of 23 evidenced
0 reviewed
COCA CardOff-chainOff-chainSettles in USDC · stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Token and chain freeze risks disclosed No evidence Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Payments linkable onchain; Endpoints can be changed No evidence Weakest: Who holds funds in transit; Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty0 of 23 hold up10 fall short · 13 no evidence10 of 23 evidenced
0 reviewed
Deblock CardOff-chainOff-chainSettles in USDC, EURC, BTC +2 · stablecoin, native token0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Neutral settlement, disclosed filtering; Token and chain freeze risks disclosed No evidence Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Tracking and analytics; Data collected beyond payment; Payments linkable onchain; Third parties in the payment flow; Endpoints can be changed0 Fails Weakest: Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty0 of 23 hold up5 fall short · 18 no evidence5 of 23 evidenced
0 reviewed
HesabPayOff-chainOff-chain0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Token and chain freeze risks disclosed0 Fails Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies0 Fails Weakest: Data collected beyond payment; Payments linkable onchain; Endpoints can be changed0 Fails Weakest: Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty0 of 23 hold up12 fall short · 11 no evidence12 of 23 evidenced
0 reviewed
Houdini SwapOff-chainOff-chain0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Neutral settlement, disclosed filtering No evidence Weakest: Contracts verified onchain; Can be self-hosted0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Endpoints can be changed0 Fails Weakest: Who can upgrade the code; Funds safe if provider disappears; Audits and bug bounty2 of 23 hold up15 fall short · 6 no evidence17 of 23 evidenced
0 reviewed
Hyperbeat CardOff-chainOff-chainSettles in beatUSD, USDC · platform token, stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Token and chain freeze risks disclosed0 Fails Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies0 Fails Weakest: Tracking and analytics; Payments linkable onchain; Endpoints can be changed0 Fails Weakest: Who can upgrade the code; Funds safe if provider disappears; Secrets and webhook handling0 of 23 hold up18 fall short · 5 no evidence18 of 23 evidenced
0 reviewed
Jupiter CardOff-chainOff-chainSettles in USDC, USDT · stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Token and chain freeze risks disclosed0 Fails Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Tracking and analytics; Payments linkable onchain; Endpoints can be changed0 Fails Weakest: Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty0 of 23 hold up10 fall short · 13 no evidence10 of 23 evidenced
0 reviewed
M-PesaOff-chainOff-chain0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Neutral settlement, disclosed filtering; Token and chain freeze risks disclosed No evidence Weakest: Contracts verified onchain; Can be self-hosted0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies0 Fails Weakest: Tracking and analytics; Data collected beyond payment; Payments linkable onchain; Third parties in the payment flow; Endpoints can be changed0 Fails Weakest: Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty0 of 23 hold up9 fall short · 14 no evidence9 of 23 evidenced
0 reviewed
NullmaskOff-chainOff-chain0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Neutral settlement, disclosed filtering; Token and chain freeze risks disclosed0 Fails Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies0 Fails Weakest: Tracking and analytics; Data collected beyond payment; Payments linkable onchain; Third parties in the payment flow; Endpoints can be changed0 Fails Weakest: Who holds funds in transit; Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty0 of 23 hold up10 fall short · 13 no evidence10 of 23 evidenced
0 reviewed
Oobit CardOff-chainOff-chainSettles in USDT, USDC, USDR +18 · stablecoin, native token, other token0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services0 Fails Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies0 Fails Weakest: Payments linkable onchain; Third parties in the payment flow; Endpoints can be changed No evidence Weakest: Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty0 of 23 hold up12 fall short · 11 no evidence12 of 23 evidenced
0 reviewed
Opera MiniPayOff-chainOff-chain0 Fails Weakest: Admin pause or freeze powers; Reliance on hosted services0 Fails Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies0 Fails Weakest: Data collected beyond payment; Payments linkable onchain; Endpoints can be changed No evidence Weakest: Who can upgrade the code; Token approval scope; Secrets and webhook handling; Audits and bug bounty0 of 23 hold up14 fall short · 9 no evidence14 of 23 evidenced
0 reviewed
Phantom CashOff-chainOff-chainSettles in CASH · platform token0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Token and chain freeze risks disclosed No evidence Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted; Interfaces and data export No evidence Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Payments linkable onchain; Third parties in the payment flow; Endpoints can be changed No evidence Weakest: Who holds funds in transit; Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty0 of 23 hold up5 fall short · 18 no evidence5 of 23 evidenced
0 reviewed
Rizon CardOff-chainOff-chainSettles in USDC, USDT · stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Token and chain freeze risks disclosed No evidence Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Tracking and analytics; Payments linkable onchain; Endpoints can be changed No evidence Weakest: Who holds funds in transit; Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty0 of 23 hold up8 fall short · 15 no evidence8 of 23 evidenced
0 reviewed
Solayer Card (Emerald Card / Solayer Pay)Off-chainOff-chainSettles in USDC · stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services0 Fails Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Tracking and analytics; Payments linkable onchain; Endpoints can be changed0 Fails Weakest: Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty0 of 23 hold up12 fall short · 11 no evidence12 of 23 evidenced
0 reviewed
TriaOff-chainOff-chainSettles in USDC · stablecoin0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services0 Fails Weakest: Contracts verified onchain; Whole stack published; Can be self-hosted; Interfaces and data export0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies No evidence Weakest: Payments linkable onchain; Endpoints can be changed No evidence Weakest: Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Secrets and webhook handling; Audits and bug bounty0 of 23 hold up13 fall short · 10 no evidence13 of 23 evidenced
0 reviewed
WiseOff-chainOff-chain0 Fails Weakest: Admin pause or freeze powers; Settle without the provider; Reliance on hosted services; Neutral settlement, disclosed filtering; Token and chain freeze risks disclosed No evidence Weakest: Contracts verified onchain; Can be self-hosted0 Fails Weakest: Open-source licences; Protection against relicensing; No proprietary dependencies0 Fails Weakest: Data collected beyond payment; Payments linkable onchain; Endpoints can be changed0 Fails Weakest: Who can upgrade the code; Token approval scope; Funds safe if provider disappears; Audits and bug bounty1 of 23 hold up12 fall short · 10 no evidence13 of 23 evidenced
0 reviewed

About the incumbent baseline. Incumbent rails have no public chain settlement and no public code. They are scored with the same rubric as every other row. Their low ratings show the verifiability gap between rails whose behaviour can be inspected and rails whose behaviour must be trusted; that gap is the point of the comparison, not a claim that the incumbent is unsafe.