A DAO treasury exists across multiple chains. The primary multisig vault may be on Ethereum, but liquidity sits in Polygon incentive pools, and trading revenue accumulates on Arbitrum. A treasurer needs to verify balances before voting on proposals, confirm fund movements, and ensure that no unauthorized transactions escape notice. Centralizing this visibility into a single exchange or service account defeats the purpose of decentralized governance. The alternative is a tool that tracks addresses without requiring custody of the signing keys.
Rabby Wallet offers a practical architecture for this use case. By combining watch-only address functionality with contact management and multichain support, treasurers can monitor treasury positions across Ethereum, Polygon, Arbitrum, and other networks from a single extension interface. The wallet does not hold the multisig keys, does not broadcast transactions on behalf of the DAO, and does not require treasurers to place custody in a centralized platform. The security model remains clear: addresses are visible, balances are readable, but signing authority stays where it belongs—with the multisig signers themselves.
Why watch-only addresses matter for treasury oversight
A watch-only address is an address imported for balance and transaction history visibility without corresponding private key or signing authority. This separation is the key distinction. When a treasurer imports a multisig vault address as watch-only, they can see every token, NFT, and pending transaction. They cannot approve transfers, change beneficiaries, or execute transactions. If the treasurer’s device is compromised, stolen, or lost, the multisig vault remains untouched because no signing keys exist on that device.
The operational benefit is substantial. Rather than asking signers to repeatedly check on-chain balances via Etherscan or another block explorer, or forcing treasurers to maintain multiple browser tabs across different chains, watch-only addresses consolidate visibility. The wallet can display all holdings in a single list, filter by token type or value, and show pending transactions as they approach finality. A treasurer preparing a governance proposal on fund allocation can verify that the treasury actually holds the funds it proposes to spend without needing signers to perform that verification separately.
The privacy model also improves. Public block explorers log access patterns, and repeated queries from the same IP can be observed. A wallet extension running locally on the treasurer’s device can query blockchain data through custom RPC endpoints or trusted node infrastructure without creating a linkable record of which DAO or address the treasurer is monitoring. If the DAO uses a privacy-conscious RPC aggregator or runs its own node, that additional layer becomes possible. The watch-only setup does not mandate privacy, but it removes barriers to implementing it.
DAOs with volatile membership face a particular problem. If a treasurer leaves or loses access, the next treasurer must re-establish visibility without importing keys that may have been compromised. A watch-only import requires only the public address—information that is already on-chain and typically published in DAO governance documents. Adding a new treasurer becomes a matter of importing the multisig address rather than rotating keys, backing up secrets, or asking departing members to export sensitive material.
Setting up multichain treasury monitoring in Rabby
The basic workflow begins with this page to download and install Rabby. After installation, a treasurer creates a new wallet account or imports an existing seed phrase if they have one for other personal holdings. The watch-only treasury addresses will be added separately, not replacing personal accounts. This layering keeps DAO-related activity distinct from individual token holdings and reduces the chance of accidentally sending personal funds from a DAO address or vice versa.
To add a watch-only address, the treasurer navigates to the account menu, selects “Add Address,” and chooses the watch-only option. Rabby will prompt for the address itself—nothing more. For a Safe multisig vault, this is typically the Safe’s proxy address, which can be found in the governance interface or by searching the Safe address on Etherscan. The treasurer enters the address for each chain where the DAO holds treasury funds. If the multisig vault exists on Ethereum as a Safe contract and the DAO has deployed corresponding vaults on Polygon and Arbitrum for operational efficiency, each address is added separately.
After importing the first watch-only address, the treasurer will see balances and transaction history for that address on its native chain. To view holdings across all three networks simultaneously, Rabby’s interface groups assets by underlying token (for example, USDC holdings on all three chains appear together) while preserving the per-chain balance display. This is particularly useful for stablecoins and major tokens that trade on multiple chains. A treasurer can immediately see that the Ethereum vault holds 100k USDC, the Polygon vault holds 50k USDC, and the Arbitrum vault holds 30k USDC without opening separate tabs or scrolling through separate account views.
The process scales naturally. If a DAO operates five multisig vaults across different chains or jurisdictions, each vault address is added as a separate watch-only import. Rabby does not require a single seed phrase or private key to manage all of them. The wallet simply displays all watched addresses in the account selector, and the treasurer can switch between them to inspect each vault’s activity independently.
Organizing treasury contacts for clarity and accountability
Rabby’s contact management system allows treasurers to label and organize addresses. This becomes critical when a DAO treasury interacts with multiple counterparties—exchange wallets, liquidity pools, grant recipients, or partner DAOs. By creating contacts for known addresses, treasurers reduce the risk of mistyping an address or sending funds to an unintended destination. More importantly, contacts create an audit trail and clarify intentions when reviewing transaction history.
A practical example: if a DAO regularly receives grants or sends treasury funds to a recipient multisig address, the treasurer can create a contact labeled “Community Grants Multisig” and assign the recipient address to it. When viewing the watch-only treasury address’s transaction history, any outgoing transfer to that contact immediately shows the label rather than a bare hex string. If a governance vote approved allocating 10 ETH to that address, the treasurer can verify that the transaction went to the correct contact rather than searching through addresses.
Contacts also serve a security function. If a signer or treasurer receives what appears to be an official-looking instruction to send funds to a new address, comparing it against the DAO’s contact list provides a basic verification step. Is the destination address in the contact list? If not, why not? Has the DAO created a new operational address through governance? Contacts do not prevent deliberate social engineering or sophisticated spoofing, but they make typos and casual misdirection more detectable.
For larger DAOs with multiple treasurers in different roles—operations, finance, risk—contacts can be exported and shared as a backup list without sharing private keys or signing authority. A newly onboarded treasurer can import the contact file, immediately understanding which addresses are known DAO counterparties and which might warrant additional scrutiny. This is particularly important for DAOs that rotate treasure roles or operate through working groups with limited membership.
Multichain tracking and the Safe integration
Many DAOs use Safe multisig contracts for treasury management. Safe’s interface is excellent for executing multisig transactions—proposing, reviewing, and signing transactions across signers—but it can be cumbersome for pure visibility. A treasurer who is not actively signing may find Safe’s full interface overwhelming, and Safe often requires navigating to the specific Safe’s deployment on each chain separately. Rabby simplifies this by treating Safe addresses like any other multisig vault: import as watch-only, see balances and history, check pending transactions.
The integration works because watch-only addresses require no special connection to Safe. The address is standard Ethereum (or Polygon, or Arbitrum) address format, identical to what Safe displays in its user interface. Rabby queries the address’s state on-chain, just as Safe or Etherscan does. The benefit is consolidation: a treasurer can open Rabby, see all watched treasury addresses across all chains in one application, and immediately understand the DAO’s position without switching between Safe interfaces, Etherscan tabs, or separate wallet extensions.
If a Safe transaction is pending—for example, a proposal that has been submitted but not yet signed by a majority of signers—Rabby can display the pending transaction in the watch-only address’s activity log. The treasurer sees that a 50 ETH transfer to an operational address is awaiting one more signature. This creates a natural reminder without requiring a separate monitoring system. When the transaction executes, the balance reflects the change on the next refresh.
For DAOs that operate multiple-signature schemes or rotating multisigs, the watch-only setup scales linearly. If the DAO has a primary treasury multisig, an operational multisig, and a community grants multisig, each can be added as a watch-only address. The treasurer views the complete portfolio from one wallet extension rather than toggling between governance systems, Safe deployments, and block explorers.
Private key separation and the multichain account model
Rabby supports multiple account creation through different import methods: seed phrases, private keys, hardware wallet connections, and MetaMask or other wallet imports. The crucial operational decision is keeping DAO-related monitoring activity separate from the treasurer’s personal account. This is not paranoia; it is compartmentalization. If a treasurer’s personal seed phrase is ever compromised—through phishing, malware, or careless backup handling—the compromise affects only personal holdings, not the DAO’s treasury.
The recommended structure is to create a dedicated Rabby wallet account (or seed phrase) that contains only watch-only addresses. This account has no private keys associated with it, holds no personal funds, and cannot sign any transactions. The treasurer can then safely use that account on shared or less-secured devices (for example, a work laptop) while keeping a separate personal account with private keys on a more carefully protected device. If the work laptop is lost or compromised, the DAO’s watch-only visibility is lost, but the treasury is not affected because no signing keys were present.
For treasurers who also need to sign DAO multisig transactions, the setup is slightly different. Rather than importing the private key or seed phrase associated with the multisig signer role into Rabby, the treasurer can connect a hardware wallet (Ledger, Trezor, GridPlus, or others) to Rabby for signing while keeping the watch-only addresses in a separate account on the same device or a different device. This way, signing authority is compartmentalized to the hardware wallet or carefully managed key material, while monitoring happens through the watch-only account. The treasurer reduces the surface area for key exposure without sacrificing visibility.
Monitoring pending transactions and detecting anomalies
A watch-only address displays its transaction history and, crucially, any pending transactions. A multisig proposal that has been submitted but not yet executed appears in the activity log with its current signature count. If the DAO’s governance interface goes down or a signer is unavailable, a treasurer can still check Rabby to confirm that the transaction is in the mempool or awaiting signatures. This is particularly valuable during fast-moving market conditions where a delayed transaction can mean significant price slippage or missed opportunity windows.
The mempool display also functions as an early warning system for unauthorized activity. If a treasurer opens Rabby and sees a pending transaction that no one authorized, or a transaction to an address not in the contact list, immediate escalation to the DAO’s security team or multisig signers becomes necessary. Because watch-only addresses cannot be signers themselves, any transaction appearing in the address’s pending queue came from outside the wallet extension. This clarity reduces confusion about who initiated what.
For a DAO with positions across three chains, Rabby’s multichain view reveals unusual patterns. If the Ethereum treasury has normally-sized balances, but the Arbitrum vault suddenly shows a 10x increase in transaction frequency, the treasurer can investigate whether this represents a legitimate operational shift or a compromised signer on that chain. Watch-only monitoring does not prevent attacks, but it makes detection faster because the treasurer is actively checking balances rather than waiting for governance participants to notice something wrong.
Institutional integrations and scaled treasury operations
Larger DAOs sometimes work with institutional custodians or employ specialized treasury managers. Rabby integrates with institutional wallet platforms including Safe, Cobo, Fireblocks, and others. While these integrations are primarily relevant for signing and custody, they can also facilitate watch-only monitoring. A DAO might use Fireblocks as the primary custody solution for cold storage but still import the multisig vault addresses into Rabby for real-time monitoring by operations staff who do not have signing authority.
This model separates concerns cleanly. The institutional custodian holds keys and executes transactions following the DAO’s multisig policies. Operations staff monitor the treasury and alert signers to anomalies or transaction deadlines. Governance participants remain informed of the treasury’s status through reports generated from Rabby’s data. No single person holds both signing authority and full operational control. If an operations staffer’s credentials are compromised, they can view balances but cannot initiate transactions.
For DAOs with distributed governance across multiple geographic regions or time zones, watch-only monitoring in Rabby creates a shared information layer. A treasurer in one region can check balances at any time without requiring signers to be online. Governance proposals can reference Rabby-verified balances, reducing disputes about treasury position. The watch-only addresses become the canonical reference for “what the DAO actually holds” rather than relying on individual browser sessions or cached reports.
Testing and ongoing verification of watch-only setups
Before relying on Rabby for critical treasury monitoring, treasurers should verify that the watch-only setup is working correctly. The test is straightforward: import a known multisig address as watch-only, confirm that Rabby displays the correct balances on each chain, and verify that recent transactions appear in the activity log. This verification should happen on a non-production device first if possible. Opening a watch-only address is not dangerous—no keys are at risk—but the treasurer should confirm that Rabby is connecting to reliable RPC endpoints and displaying accurate data.
If Rabby is configured to use a custom RPC endpoint (rather than the default public endpoints), the treasurer should verify that the endpoint is reliable and returning consistent data. A misconfigured or slow RPC endpoint can cause balances to appear stale or transactions to be missed. For critical treasury monitoring, using multiple RPC sources or ensuring that the DAO’s node infrastructure is stable becomes part of operational diligence.
Ongoing verification involves occasionally checking Rabby’s displayed balances against an independent source like Etherscan or the Safe interface. This does not need to be daily; quarterly or after significant transactions is typical. The goal is to catch any systematic error in Rabby’s display or RPC connectivity before that error leads to a bad governance decision. Watch-only monitoring is convenient, but it still requires the treasurer to maintain a skeptical eye and verify data against other sources when stakes are high.
Frequently asked questions
Can I sign transactions using a watch-only address in Rabby?
No. Watch-only addresses have no associated private keys, so they cannot sign any transactions. This is by design—it ensures that a device containing only watch-only addresses cannot initiate transfers, even if the device is compromised. To sign DAO multisig transactions, import a private key, seed phrase, or hardware wallet connection separately.
How do I monitor a multisig vault across Ethereum, Polygon, and Arbitrum simultaneously?
Add each multisig vault address as a separate watch-only import, specifying the network for each one. Rabby will consolidate the addresses in your account list and can display holdings grouped by token across all three chains. You can switch between individual vault addresses to see chain-specific details or view a combined portfolio view depending on which tokens are present on which chains.
If my Rabby device is lost or compromised, is the DAO treasury at risk?
No. Watch-only addresses contain no signing keys, so a compromised device cannot authorize any transactions. The DAO’s treasury remains controlled by the multisig signers, regardless of what happens to a device running Rabby. However, a compromised device could reveal that a specific address is a treasury address and potentially expose sensitive operational information to an attacker.
