Skip to main content
Most Web3 “recurring payment” tools rely on a static ERC-20-style approval: the payer grants a contract access to a large or unlimited balance, and an off-chain bot manually calls a transfer function each period. If that contract is compromised, the entire approved balance is exposed. OpenFi’s Allowance State Machine tracks elapsed time, per-epoch maximums, and remaining duration natively on-chain, so a compromised session key can never move more than the ceiling allocated to the current active epoch. Every debit pull is checked against this state before it settles.