Checked on every phone
Your phone checks each payment against the vault’s own keys: recipients, amounts, change and fee. If anything’s off, it won’t sign.
Now on testnet
The multisig
nobody can see
One private vault for your team. Nothing moves until enough of you approve.
- Shielded on Zcash
- Threshold signatures (FROST)
- Open source
- Tor built in
How it works
Three phones.
One vault.
-
Someone proposes
Anyone in the vault drafts a payment. Nothing moves yet.
-
Everyone checks, then approves
Each phone checks the payment on its own. One tap to approve.
-
It sends itself
Once enough of you approve, it goes. On-chain, it looks like any payment.
Features
Your treasury,
held together
Invisible on-chain
The phones sign together as one. To the chain it’s an ordinary shielded payment, like this real one from our testnet trial.
- tx
- e6ccd6b7…9eef0237
- block
- 4,422,289
- to
- encrypted
- amount
- encrypted
Private all the way
- Optional Tor for every connection
- Encrypted backups
- Viewing keys for auditors
- Unlock your phone to sign
Security
Nothing to take
on trust
Testnet only, for now. Zafe hasn’t been audited yet. Don’t use real funds.
-
No single key
The key is split across your phones and never put together, not even to sign.
-
A blind relay
Phones talk through a relay that sees who and when. Never amounts, addresses or keys.
Compare
Not all multisigs
are equal
| Feature | Zafe | On-chain multisig | Single-key wallet |
|---|---|---|---|
| Several people must approve | Yes | Yes | No |
| Balances and payments stay private | Yes | No | If shielded |
| Looks like an ordinary payment | Yes | No | Yes |
Questions?
Is Zafe safe to use?
It’s on testnet and not yet audited. Everything is open source. Don’t use real funds yet.
Is it really a multisig?
Yes, just not on-chain. Each phone holds a key share (FROST), and enough shares make one ordinary signature.
What can the relay see?
Who messages whom, and when. Never amounts, addresses or keys. It can’t sign or move funds.
What if someone loses their phone?
The vault keeps working while enough members have theirs, and the share comes back from its encrypted backup. Lose too many, and the funds are gone for good.
Can we remove a member?
Not yet. Make a new vault and move the funds.
Which platforms?
Android. iPhone later.
More in the spec.
