Verification and securityOwner controls and exit
Owner controls and exit
Withdraw, change the on-chain limit, rotate the agent or leave Exchain with the owner key alone.
Exchain can refuse to sign, but it cannot block the owner: every action below works with the owner key alone, without Exchain or the agent.
Cardano
| You want to | Redeemer | Signer | Effect |
|---|---|---|---|
| Withdraw everything or retire the wallet | OwnerSpend | Owner | Spends to any address. Does not read the datum |
| Change the on-chain limit, period or minimum balance | UpdatePolicy | Owner | Rewrites the datum. Address and state token stay |
| Rotate the agent | UpdatePolicy | Owner | Sets a new agent in the datum |
| Add funds | Deposit | Owner or agent | Value goes in; datum unchanged |
Sign with the owner key, offline if it is cold, and build the transaction with your Cardano tooling. After any owner transaction, the agent's next request must reference the new wallet UTxO, otherwise utxo_unknown: stale_ref.
Leaving Exchain on Cardano
Exchain's keys are part of the wallet address. To leave, sweep the funds with OwnerSpend to a new wallet. Changing the mandate also means a new wallet: Changing a mandate.
Guarded Safe on EVM chains
All three go through execTransactionFromModule from the owner module, with no Exchain signature.
| You want to | Call |
|---|---|
| Withdraw | transfer on each asset's token contract, from the Safe |
| Rotate the agent | swapOwner |
| Remove Exchain | removeOwner for each quorum member, lowering the threshold |
While Exchain is down
Agent spends get 503 quorum_unavailable and nothing is consumed. Owner actions are unaffected.