2-of-3 signing
Treasury moves above €10,000 require two of three signers — no individual moves funds alone. Below the threshold, the hot key auto-signs so operations keep flowing, and an HSM key stands by as the third signer. The same custody model Safe applies to individuals.
Confirmation tracking
Every settlement shows its life in real time: submitted, on-chain with a live confirmation count — 3 of 12 in the demo — then settled. Transaction hash, network fee, and reference sit one tap away, with a direct link to the explorer.
Read-only connections
Connecting a wallet shares balances and addresses — nothing else. Every transfer is signed in the customer's own wallet, approved one at a time. The platform can watch; only the customer can move.
Instant SEPA payout
The bridge ends in a bank account, fast. The demo's USDC transfer was submitted at 14:02 and settled to its IBAN at 14:06 over SEPA Instant — euros in the account in four minutes, no manual step in between.
Hot and cold tiers
Custody policy is set per asset, not per account. The demo treasury keeps operational USDC in a hot wallet, bitcoin cold, and everything else behind 2-of-3 — each tier visible on the balance sheet it governs, including internal moves to the cold vault.
Four networks
BTC, ETH, Base, and Solana, with stablecoin settlement where it matters — the demo settles USDC on Base. One console, one policy model, one bridge to IBAN across all of them.
Rate shown before you confirm
No bridge executes on a rate the customer has not seen: the conversion rate is shown before each bridge is confirmed, and the EUR amount locks at payout. The mechanics are the promise — never a number we quote in advance.
Per-network confirmation policy
Each lane pays out after its own confirmation count — 6 on Bitcoin, 12 on Ethereum and Base, 32 on Solana in the demo. Finality is a per-network judgment, not a global constant.
Deposit address rotation
Deposit addresses rotate per invoice and display masked, with the full address available over the API. A payment ties to the invoice that expected it — reconciliation by construction.
Incidents and alerts
Degraded RPC, elevated congestion, node maintenance — the incident log records each with its window and its impact, and status alerts push changes to whoever subscribed. Bad news travels on the same rail as good.
Circuit breakers
Every provider behind the rail runs behind a breaker — closed when healthy, half-open while recovering, idle when out of rotation. Health is a state machine you can read, refreshed every ten seconds.
Stuck top-up recovery
A deposit that confirmed on-chain but stalled at the exchange step is a queue, not a mystery: stuck top-ups surface on the overview, and an operator requeues the exchange in place. The customer's money finishes the trip.
Reverse and refund
When a credit must come back, the reversal posts a compensating debit on the ledger and refunds on-chain — a real accounting entry, not a deletion. The action is role-gated to senior operators and lands in the audit log.
Key rotation
Signer keys rotate as an operation like any other: proposed, quorum-signed, and executed on a delay — the demo's phone-key re-issue executes 24 hours after quorum. Rotation history keeps every past key event on the record.
Time-locked policy changes
Changing signers or the threshold is itself time-locked for 48 hours, and every signer is alerted when it is proposed. The policy that guards the funds guards itself the same way.
Expiring proposals
A pending operation that never collects its second signature expires — 22:41:02 left on the demo's cold-vault transfer. Stale intentions die on their own instead of waiting to be exploited.
Exports
Transfers export straight from the settlements console — hashes, confirmations, payouts, and references, ready for accounting or an auditor. The bridge's history is a file you can hand over.
The family's shared rail
Chain is the rail the rest of the product family settles crypto on — on-ramps, ATM purchases, and wallet balances all cross the same bridge. Run it standalone, or let it do its quiet work underneath the other products.