Agent-safe signing · EVM smart-account permissions

Coldstar vs Safe + Zodiac Roles

If you have run an EVM treasury, you know the pattern: a Safe owned by hardware wallets, with a Zodiac Roles Modifier that lets a bot or agent call specific functions with specific parameters within limits. It is the gold standard for on-chain agent permissions, and it does not exist on Solana. Coldstar is the nearest thing that does.

Last reviewed 2026-09-04 · Facts link to first-party sources below · Corrections welcome

Pick Safe + Zodiac Roles if

  • Your agent is on an EVM chain and you want fully on-chain, audited permission enforcement with cold-wallet owners.
  • You need function- and parameter-level scoping plus rate and threshold limits.
  • You want LGPL-licensed contracts with years of production history.

Pick Coldstar if

  • Your agent is on Solana, where neither Safe nor Zodiac is deployed.
  • You want the cold-owner idea without a smart-account program: the root is a plain keypair on your drive.
  • You want a human escalation step rather than a hard on-chain wall.

Use both when

Safe plus Roles for the EVM side of a multichain treasury; Coldstar (with Squads for on-chain quorum) for the Solana side.

Side by side

ColdstarSafe + Zodiac Roles
Who holds the root keyYou. The cold root lives encrypted on your own USB drive. No vendor holds a key, a share, or an account.The Safe's owners, typically hardware wallets. No provider can sign. Role members hold whatever key they use, usually hot.
Where the key livesOn your machine. The air-gapped root signs a bounded policy envelope; a disposable session key signs routine transactions inside it.On-chain smart account (EVM). The Roles Modifier is a module attached to the Safe.
Policy enginePer-transaction limit, daily cap, program allowlist, recipient allowlist and blocklist, escalate-above threshold. Evaluated locally, first match wins, before any signature exists.Scoped target addresses, functions, and allowed parameter values, plus rate and threshold limits. Fully on-chain.
Out-of-policy transactionsESCALATE to a human over air-gapped QR, or REJECT. No signature is produced for a rejected transaction.Reverted; out-of-role actions need the Safe's normal owner multisig.
Cold / offline rootYes — the root key never touches a networked machine.Yes, structurally. Owners can be hardware wallets. Not a feature, an architecture.
Agent integrationFramework-agnostic: the agent proposes an unsigned transaction, the signer decides. CLI signer today; MCP server in progress.Not documented on the first-party pages we fetched; widely used for bots in practice.
Solana supportSolana mainnet. Core is chain-agnostic; EVM signing exists.No. Safe's supported networks are EVM chain IDs; the Roles Modifier is deployed on 19 EVM networks.
Source & self-hostingOpen source (MIT), self-hosted. No API key, no SaaS dependency, nothing to go down.safe-smart-account LGPL-3.0; zodiac-modifier-roles LGPL-3.0+. Contracts free to use.
PricingFree software plus a ~$10 drive.Gas only for the contracts; Safe's commercial offerings not confirmed.
MaturityBeta — the signing core and policy engine are in scope for the planned independent audit.Production; among the most battle-tested contracts on EVM.

This is the design Coldstar admires most and cannot use: the chain enforces the rule, and the owners are cold. On Solana, Squads provides the quorum and spending limits, and Coldstar provides the cold, policy-gated keys.

Where each one wins

Where Safe + Zodiac Roles wins

  • On-chain enforcement of function- and parameter-level permissions.
  • Cold owners by default in practice.
  • Track record securing very large treasuries.

Where Coldstar wins

  • Exists on Solana.
  • No smart-account program; a plain keypair root.
  • Escalation to a human over QR for over-threshold transactions.

What you are actually trusting

Safe plus Roles puts everything on-chain: the owner set, the role scopes, the limits. A role member's key can be hot because the contract will refuse anything outside scope. Owners approve the exceptional cases with their hardware wallets. It is a complete answer for EVM.

Coldstar is an off-chain answer to the same shape of problem: a cold root that authorises a bounded session key, with the bounds enforced locally before a signature exists. Pair it with Squads for on-chain quorum and spending limits and you get most of the Safe plus Roles pattern on Solana.

Safe and Zodiac are production. Coldstar is beta, pre-audit.

Frequently asked questions

Is there a Safe for Solana?

No. Safe's supported networks are EVM chains. Squads is the Solana multisig standard, and Coldstar is a cold, policy-gated signer you can put in its seats.

Can Coldstar scope function parameters like Zodiac Roles?

No. Coldstar's policy works at the program, recipient, and amount level. Parameter-level scoping is a strength of on-chain modules that Solana tooling has not matched.

Why include an EVM-only tool here?

Because Solana teams coming from EVM search for it. The honest answer is that the pattern does not port directly, and this page says what does.

Try Coldstar in two minutes

Open source, MIT. macOS, Linux, Windows — and on the Solana Seeker dApp Store.

pip install coldstar

Related comparisons

Sources

  1. Safe docs: smart account supported networks
  2. Zodiac Roles Modifier docs
  3. zodiac-modifier-roles source (LGPL-3.0+, deployments)
  4. safe-smart-account source (LGPL-3.0)

Third-party facts were checked against the vendor's own pages on the date above. Pricing and feature sets change; if something here is out of date, tell us and we will fix it.