Governance

Multi-Tier Threshold Signatures

Implementation of a hierarchical MPC architecture. Combining client-side authorization with institutional key distribution to eliminate single points of failure.

Client Layer (Authorization)

Fragment A CEO

Fragment B CFO

Fragment C Founder

2 / 3

Auth Threshold

south

Bank / Provider Layer (MPC Nodes)

Fragment A1 Bank App

Fragment B1 Bank CMP

Fragment C1 Provider

Fragment D1 SEC

Fragment E1 Provider

3 / 5

Final MPC

south

Blockchain Layer (Finality)

Signed Transaction Confirmed

0x71C7656EC7ab88b098defB751B7401B5f6d8976F...SIGNED_WITH_MPC_SHA256

Client Layer (Authorization)

fingerprint

Fragment A

CEO

description

Fragment B

CFO

User Authentication Fragments

Backup

passkey

Fragment C

FOUNDER

verified_user

2 / 3 Auth Threshold

Bank / Provider Layer (MPC Nodes)

Internal Bank Nodes

account_balance

Fragment A1

BANK APP

shield

Fragment B1

BANK CMP

security

Fragment C1

PROVIDER

Backup

cloud

Fragment D1

SEC

hub

Fragment E1

PROVIDER

key_visualizer

3 / 5 Final MPC

Blockchain Layer (Finality)

verified Signed Transaction

Confirmed

0x71C7656EC7ab88b098defB751B7401B5f6d8976F...SIGNED_WITH_MPC_SHA256

Redundancy

2-of-3

Signing remains available while any two participant nodes can complete the protocol.

Governance

Separated

Bank and provider operate independent nodes and authorization domains.

Validation

Pre-broadcast

Addresses, signatures, and transaction data are verified before broadcast.

Architecture Addendum

Note: The architecture above describes the most secure corporate operational mode, featuring two layers of threshold signatures. For retail clients, this level of complexity is redundant; the first layer is replaced by standard secure access via the bank's mobile application.