Dual-signature flow

​

The rule

1. User signature — EIP-712 from the vault owner EOA.
2. Backend signature — EIP-712 from the factory owner (backend key).

​

Sequence

​

Why two signatures

• User signature. Proves user authorised this specific withdrawal.
• Backend signature. Attests the request passed platform compliance (AML, banned-destination, return-to-source).
• Unilateral backend moves are impossible. The backend’s key alone doesn’t unlock the vault.

​

What the on-chain verifies

function withdrawERC20(
    address token,
    address to,
    uint256 amount,
    uint256 salt,
    uint256 deadline,
    bytes calldata ownerSig,
    bytes calldata backendSig
) external {
    require(deadline >= block.timestamp, "expired");
    require(!usedDigests[digest], "replayed");

    bytes32 digest = _hashTypedDataV4(...);
    require(ECDSA.recover(digest, ownerSig) == vaultOwner, "bad owner sig");
    require(ECDSA.recover(digest, backendSig) == factory.owner(), "bad backend sig");

    usedDigests[digest] = true;
    IERC20(token).safeTransfer(to, amount);
}

• Digest-based replay protection — single-use per digest.
• No pre-signed cancellation — if both parties want to abort, they simply don’t submit.
• Emergency withdraw — user can invoke after a 7-day timelock if the backend is gone or refusing legitimate withdrawals.

​

Backend co-signer security