The funds are held in an escrow account and the system uses active authorities to trigger contract transfers automatically without exposing keys beyond the necessary dev setup.
The code is not currently open source.