You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/explanations/system/wallet-stake-permission.mdx
+8-22Lines changed: 8 additions & 22 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,31 +13,17 @@ import {
13
13
This version is based on the Torus v0.69 and is expected to change with the Torus v1.
14
14
</Aside>
15
15
16
-
The Wallet scope enables cold-hot wallet behavior, where high-value accounts can delegate specific
17
-
operations to more accessible accounts without exposing private keys.
18
-
This significantly improves security by allowing cold storage accounts to remain offline while still participating in network staking activities.
16
+
The Wallet Permission Scope will enable granular delegation of all wallet operations through the Torus Permission System. Currently, only Stake operations are implemented as low-hanging fruit for wallet security improvements.
19
17
20
-
### Core Functions
18
+
The Wallet Stake Permission enables cold-hot wallet behavior, where high-value secured keys can delegate stake operations to less secure keys utilized only for active protocol participation.
21
19
22
-
***Cold-Hot Wallet Architecture:** High-value accounts can delegate operational permissions while keeping primary keys in cold storage, eliminating the security-convenience tradeoff.
23
-
***Granular Operation Control:** Specific wallet operations can be delegated independently, allowing precise control over what delegated accounts can perform.
24
-
***Non-Transferable Delegation:** Delegated operations cannot access or transfer the principal funds, maintaining asset security even if hot wallets are compromised.
20
+
This feature also enables to create a highly secure offline cold-key that never interacts with any webapp and delegate Stake Permission as exclusive (delegator loses permission) & irrevocable to the new key. If your main key gets compromised the tokens cannot be unstaked and hence not transferred. However, an attacker could attempt to immediately transfer as soon as you choose to unstake. But as long as staked, tokens are untouchable.
25
21
26
-
#### Rules
22
+
It's not a perfect security feature and as standard practice it will eventually be replaced by Transfer Permissions, but it is a meaningful improvement and we recommend high-value keys to apply it.
27
23
28
-
***Operation Scoping:** Each delegation specifies exactly which wallet operations are permitted, preventing scope creep.
29
-
***Principal Protection:** Delegated accounts cannot perform operations that would reduce the principal balance or transfer core assets.
30
-
***Revocation Terms:** Can be configured as revocable or irrevocable.
31
-
***Constraint Inheritance:** Security constraints from the cold wallet apply to all delegated operations, ensuring consistent security policies.
32
-
***Time-bound Delegation:** Delegations can include expiration times for automatic security cleanup.
33
-
34
-
#### Active Delegation Behavior
35
-
36
-
When a wallet permission delegation is active, the delegator can choose the level of operational control:
37
-
38
-
***Optional Exclusive Access:** The delegator can choose whether to retain direct control alongside the recipient through the exclusive access parameter
39
-
***Recipient Authority:** The designated recipient can perform the specific wallet operations covered by the permission
40
-
***Asset Constraints:** All operations are constrained to existing assets, meaning no new staking from available balance
24
+
### Core Functions of Stake Permission
25
+
***Exclusive Delegation** The delegator key loses the wallet permission.
0 commit comments