Wallet policy
The Dara wallet is the only customer wallet at launch.
Decision, 2026-11-04: customers use the Dara wallet only. See the decision record.
flowchart LR C["Customer"] --> W["Dara wallet: buy, sell, transfer"] W --> K["Dara holds the keys"] K --> S["Stellar"] E["Global wallets and explorers"] -.->|"view and identify only"| S
What this means
| Question | Answer |
|---|---|
| Does the customer manage keys? | No. Dara holds them |
| Does the customer need XLM? | No. Dara pays reserves and fees |
| Can GOLD move to an outside wallet? | No, not at launch. Transfers go only between Dara customers |
| Can someone hold GOLD in a global wallet? | No. A trustline stays at zero until Dara authorizes it |
| What can global wallets do? | Identify GOLD and show its issuer, once the home domain is live |
Why
- The closed holder set is what lets Dara prove where every gram is.
- Support is simpler: no lost-key cases and no XLM to explain.
- Freeze and clawback work the same for every holder.
Not decided yet
Letting customers withdraw GOLD to their own wallet is a later product and legal decision. It would need KYC-linked authorization of outside accounts, changes to reconciliation, withdrawal limits and new customer terms. It also needs a legal opinion on sanctions, because wallet providers may restrict users or assets connected to Iran.