Problem right now
Current escrow is single-sig — one contract holds the funds and one arbiter resolves disputes. For deals over like $5k that's risky. If the arbiter's key gets compromised or they go rogue, someone loses a lot of money.
What I want
For deals above a configurable threshold (say $5000), require multi-sig authorization:
- Instead of a single arbiter, use a 2-of-3 or 3-of-5 multisig setup
- The signers could be: the platform, a trusted third-party arbitrator, and maybe a community DAO rep
- Dispute resolution requires majority approval, not just one person
- For small deals, keep the current single-arbiter flow (faster, cheaper)
On the backend:
- Add a
deal_tier field that determines which escrow flow to use
- Route high-value deals to the multisig contract
- Keep a list of approved signers per tier
Why this matters
Nobody's going to lock $10k+ into an escrow controlled by one key. For SendXpress to handle real B2B trade volumes we need escrow that scales in security with deal size.
Notes
- Stellar has native multisig support — accounts can have multiple signers with different weights
- We could also look at Soroban-based multisig patterns
Problem right now
Current escrow is single-sig — one contract holds the funds and one arbiter resolves disputes. For deals over like $5k that's risky. If the arbiter's key gets compromised or they go rogue, someone loses a lot of money.
What I want
For deals above a configurable threshold (say $5000), require multi-sig authorization:
On the backend:
deal_tierfield that determines which escrow flow to useWhy this matters
Nobody's going to lock $10k+ into an escrow controlled by one key. For SendXpress to handle real B2B trade volumes we need escrow that scales in security with deal size.
Notes