A technical inventory of what the ledger allows this account to do. Not a safety judgment — none of these facts, alone or in combination, mean "safe" or "unsafe." The absence of a capability here is also not a reassurance.
Freeze capability
This issuer has permanently disabled the freeze capability. This flag cannot be reversed by the account itself.
A technical commitment about what the account can do, not a safety signal. Tokens run by bad actors can lack freeze too.
Source: XRPL AccountRoot.Flags (via AccountInfo)
Master key
The account's master private key has been disabled. Transactions must be signed by an alternative key (RegularKey or SignerList).
Common on production custody setups; also seen on some compromised accounts. Presence alone is not a signal.
Source: XRPL AccountRoot.Flags (via AccountInfo)
Multi-signature
This account uses multi-signature authentication. Transactions require a quorum of the listed signer keys.
Multi-signature is a standard ledger feature and does not by itself indicate custody type.