Multi-Signature Parameters Explained โ Approvals, Balance Limits, and Fund Withdrawals
Multi-signature parameters manage merchant administrator permissions, fund security, withdrawal destinations, balance limits, and operation frequency.
Each parameter has its own scope. The governance voting ratio only affects administrator proposals, while withdrawal intervals apply to their respective fund withdrawal paths independently.
1. Multi-Signature Governance Contract Addressโ
The multi-signature governance contract is deployed after the merchant is approved. Administrator wallets configured during registration become the initial governance administrators. Multiple governance administrators are supported.
Governance multi-signature proposals can:
- Add or remove administrators.
- Change the governance voting ratio and proposal parameters.
- Change finance hot contract parameters.
- Change hot wallet parameters.
- Change emergency withdrawal parameters.
The approval ratio must be at least 50%. For example, with three administrators and a requirement for more than 50% approval, at least two must approve. This ratio applies to governance proposals only; it does not control transfers from the finance hot contract.
2. Cold Vault Addressโ
The cold vault stores normal business funds swept from sub-contracts. It is the main storage location after fund sweeping.
Payment path: User payment โ Sub-Contract โ Cold Vault.
Funds can subsequently be withdrawn to either:
- Finance hot contract: For funds managed through finance multi-signature.
- Hot Wallet: For daily funds managed and used directly by the merchant.
3. Multi-Signature Finance Contract Addressโ
The multi-signature finance contract controls outgoing transfers from the finance hot contract. After funds move from the cold vault into the finance hot contract, further transfers and withdrawals require a finance multi-signature proposal approved by finance administrators.
The finance hot contract requires 100% approval from finance administrators: both administrators must approve if there are two, and all three must approve if there are three.
Fund flow: Cold Vault โ Finance hot contract โ Finance multi-signature approval โ External transfer.
4. Parameter Detailsโ
1. Voting Ratioโ
Sets the minimum administrator approval ratio for governance multi-signature proposals. With three governance administrators and a requirement for more than 50% approval, at least two must approve.
This applies only to governance proposals, such as adding or removing administrators and changing addresses, limits, or time parameters. It does not apply to finance hot contract transfers.
2. Required Proposal Votesโ
The actual number of administrator approvals needed for a governance proposal. It is normally calculated automatically from the administrator count and voting ratio.
For example, three administrators with a requirement for more than 50% approval need two votes. This value is normally displayed in Multi-Signature Parameter Details and does not need to be changed separately.
3. Proposal Validity Periodโ
Limits how long a governance multi-signature proposal can receive approvals. If the required approvals are not completed before expiry, a new proposal must be submitted.
- Minimum: 3,600 seconds (1 hour).
- Default: 86,400 seconds (24 hours).
4. Finance Hot Contract Addressโ
Receives funds withdrawn from the cold vault.
Fund flow: Cold Vault โ Finance hot contract.
Subsequent outgoing transfers require finance multi-signature approval.
5. Finance Hot Contract Maximum Balanceโ
Controls the target maximum balance held in the finance hot contract. This is a balance limit, rather than a maximum amount per transfer.
For example, with a limit of 10,000 USDT and a current balance of 6,000 USDT, up to 4,000 USDT can be replenished from the cold vault. If the balance already meets or exceeds 10,000 USDT, the amount available for this withdrawal is zero.
Applies only to Cold Vault โ Finance hot contract.
6. Withdrawal Intervalโ
The minimum interval between consecutive withdrawals along Cold Vault โ Finance hot contract.
The default is 86,400 seconds (24 hours). With this setting, after a successful withdrawal, another withdrawal along this path must wait 24 hours.
7. Required Transfer Votesโ
The number of finance administrator approvals needed to transfer funds out of the finance hot contract. This is independent of the governance voting ratio.
The finance hot contract requires 100% finance administrator approval. With three finance administrators, three approvals are required.
8. Transfer Validity Periodโ
Controls the validity period of an outgoing transfer proposal for the finance hot contract. After finance administrators approve, the on-chain transfer must be executed within the specified period. If it expires before execution, a new proposal is required.
Applies only to Finance hot contract โ External address.
- Minimum: 3,600 seconds (1 hour).
- Default: 86,400 seconds (24 hours).
9. Finance Hot Contract Fund Ratioโ
Primarily used by merchants on older versions to control the proportion of funds held in the finance hot contract. Merchants on newer versions primarily control funds through the Finance Hot Contract Maximum Balance parameter and should focus on that limit.
5. Hot Wallet Parametersโ
10. Hot Wallet Addressโ
For standard merchants, after configuring this address, funds can be withdrawn directly from the cold vault to the merchant's own hot wallet.
Fund flow: Cold Vault โ Hot Wallet.
The merchant manages these funds directly for daily transfers and withdrawals.
11. Hot Wallet Maximum Balanceโ
Controls the target maximum balance of the hot wallet. For example, with a limit of 10,000 USDT and a current balance of 7,000 USDT, up to 3,000 USDT can be replenished. If the current balance meets or exceeds the limit, the amount available for this withdrawal is zero.
Before using hot wallet withdrawals, configure both the Hot Wallet Address and Hot Wallet Maximum Balance.
12. Hot Wallet Withdrawal Intervalโ
The minimum interval between consecutive withdrawals along Cold Vault โ Hot Wallet.
Default: 86,400 seconds (24 hours).
6. Risk Fund Parametersโ
13. Emergency Sweeping Addressโ
When KYT detects risk in a sub-contract, that sub-contract is blacklisted and excluded from normal sweeping into the cold vault.
Risk fund path: Blacklisted sub-contract โ Emergency Sweeping Cold Vault.
This isolates risk funds from normal business funds.
14. Emergency Withdrawal Addressโ
The merchant configures this address through governance multi-signature. After risk funds are swept, they can be withdrawn to this address.
Fund flow: Blacklisted sub-contract โ Emergency Sweeping Cold Vault โ Emergency withdrawal address.
This can support risk fund isolation, freezing, manual review, or refund handling.
15. Emergency Withdrawal Address Maximum Balanceโ
Controls the target maximum balance for Emergency Sweeping Cold Vault โ Emergency withdrawal address.
If the destination balance meets or exceeds the configured limit, the amount available for this withdrawal is zero.
Before using emergency withdrawals, configure both the Emergency Withdrawal Address and Emergency Withdrawal Address Maximum Balance.
16. Emergency Withdrawal Intervalโ
The minimum interval between consecutive withdrawals along Emergency Sweeping Cold Vault โ Emergency withdrawal address.
Default: 86,400 seconds (24 hours).
7. Parameter Scope Summaryโ
| Parameter | Main Scope | Default or Rule |
|---|---|---|
| Voting ratio | Governance administrator proposals | At least 50% |
| Required proposal votes | Governance administrator proposals | Calculated from administrator count and ratio |
| Proposal validity period | Governance administrator proposals | Default 86,400 seconds; minimum 3,600 seconds |
| Finance hot contract maximum balance | Cold Vault โ Finance hot contract | Configured by the merchant |
| Withdrawal interval | Cold Vault โ Finance hot contract | Default 86,400 seconds |
| Required transfer votes | Finance hot contract โ External address | 100% finance administrator approval |
| Transfer validity period | Finance hot contract โ External address | Default 86,400 seconds; minimum 3,600 seconds |
| Hot Wallet maximum balance | Cold Vault โ Hot Wallet | Must be configured before use |
| Hot Wallet withdrawal interval | Cold Vault โ Hot Wallet | Default 86,400 seconds |
| Emergency withdrawal address maximum balance | Emergency Sweeping Cold Vault โ Emergency withdrawal address | Must be configured before use |
| Emergency withdrawal interval | Emergency Sweeping Cold Vault โ Emergency withdrawal address | Default 86,400 seconds |