Hot / Warm / Cold Custody

HD-derived deposits, tiered wallets, and a quorum-gated withdrawal path

Hot / Warm / Cold Custody HD-derived deposits, tiered wallets, and a quorum-gated withdrawal path Secure signing boundary Deposit Addr · HD-derived · Architecture component Deposit Addr HD-derived Hot Wallet · online, capped float · Architecture component · auto-sign Hot Wallet online, capped float auto-sign Warm Wallet · HSM, refill · Secure signing boundary · 2-of-3 Warm Wallet HSM, refill 2-of-3 Cold Storage · air-gapped, deep · Secure signing boundary · m-of-n Cold Storage air-gapped, deep m-of-n Policy Engine · limits, allowlist · Architecture component Policy Engine limits, allowlist Signing Quorum · HSM / MPC · Secure signing boundary · threshold Signing Quorum HSM / MPC threshold Blockchain · broadcast + confirm · Architecture component Blockchain broadcast + confirm Customer · withdraw request · Architecture component Customer withdraw request credit sweep sweep down request approved signed tx keys Legend External Backend Security Database Cloud

Value flow

  • • Deposits sweep down toward cold
  • • Refills pull up only under quorum

No single point

  • • HSM/MPC threshold signing
  • • Requester != approver

Withdrawal path

  • • Policy gate before any signature
  • • Broadcast then confirm to depth

Architecture diagram • Built with Archify • Create yours ↗ • Hover to trace • R route • Click to focus • +/− zoom • M radar • T theme • E export