Wells Fargo’s safe-deposit-box contract caps the bank’s liability at $500. Citigroup limits it to 500 times the box’s annual rent , while JPMorgan Chase has a $25,000 ceiling on its liability .