Approvals no single key can override
Connect your wallet and sign once — your approval key is derived from that signature and never stored. Reconnect the same wallet on any device to get the same identity. The signature is free and off-chain; it moves no funds.
On mobile, open this page inside your wallet app's browser. Smart-contract wallets (Safe, Argent) can't derive a key — connect with an owner account. WalletConnect (QR) is coming soon.
A local key lives only in this browser — you must back up its seed yourself.
A policy governs one vault: its signing set, their roles and the quorum rules. It does not hold the tokens — the vault does. Pick a saved one or create a new one below.
Tick who is in the signing set. It's just you to start — add a colleague below, then choose how many owners must approve each transfer.
The digest binds vault, recipient, token, amount and nonce — so an approval can never be replayed onto a different transfer. Nothing moves until the threshold of owners signs.
Before signing, this console recomputes the digest locally from the fields shown and refuses to sign if it doesn't match the coordinator — the anti-blind-sign check.
Every operation on this policy — transfers and signing-set changes — newest first, with its status and time. A tamper-evident on-chain checkpoint of this log is a settlement-tier feature.
This is your unique identity across Lion Signet. Share it so colleagues can add you as a signing set member or start a chat — your name is derived from your key and can't be taken by anyone else.
People you collaborate with. Paste the contact link a colleague sends you (or open their link directly).
One room per policy, plus rooms you create or are invited to. Messages are end-to-end encrypted to the room and kept by the network, so history is there when you open a room on a new device. Rooms are invite-only: share your public id from Contacts and a member can invite you.
A shared-treasury approval console. Money moves only when a set number of owners approve it — no single person, and not even this service, can move it alone. It's the safe way for a team, DAO or fund to hold crypto together.
Non-custodial: your keys and funds never touch the server. It only coordinates and verifies approvals — it cannot move funds on its own.