Approvals no single key can override
Connect your wallet and sign once — your approval key is derived from that signature and never stored. Reconnect the same wallet on any device to get the same identity. The signature is free and off-chain; it moves no funds.
On mobile, open this page inside your wallet app's browser. Smart-contract wallets (Safe, Argent) can't derive a key — connect with an owner account. WalletConnect (QR) is coming soon.
A local key lives only in this browser — you must back up its seed yourself.
A vault is an owner set plus a threshold. Pick a saved one or create a new one below.
Tick who controls this vault. It's just you to start — add a colleague below, then choose how many owners must approve each transfer.
The digest binds vault, recipient, token, amount and nonce — so an approval can never be replayed onto a different transfer. Nothing moves until the threshold of owners signs.
Before signing, this console recomputes the digest locally from the fields shown and refuses to sign if it doesn't match the coordinator — the anti-blind-sign check.
Every operation on this vault — transfers and owner-set changes — newest first, with its status and time. A tamper-evident on-chain checkpoint of this log is a settlement-tier feature.
This is your unique identity across Lion Signet. Share it so colleagues can add you as a vault owner or start a chat — your name is derived from your key and can't be taken by anyone else.
People you collaborate with. Paste the contact link a colleague sends you (or open their link directly).
One room per vault, plus any rooms you create or join by invite. Messages are live (from when you open the room) and not private yet — don't share secrets here.
A shared-treasury approval console. Money moves only when a set number of owners approve it — no single person, and not even this service, can move it alone. It's the safe way for a team, DAO or fund to hold crypto together.
Non-custodial: your keys and funds never touch the server. It only coordinates and verifies approvals — it cannot move funds on its own.