Forge the vault
Pick a quorum, enter the cosigners' keys, and the page derives the vault's
Taproot address — a single CHECKSIGADD script leaf under a NUMS internal key.
Nobody knows the internal key's discrete log, so coins can only move through the
multisig leaf. There is no keypath backdoor.
Quorum
To forge you only need the cosigners' public x-only keys. Mnemonics / WIFs are accepted for convenience only if you hold the key — they never leave this page.
Cosigner keys
Each row: 64-hex x-only pubkey · 64-hex private key (local) · WIF · 12/24-word mnemonic. Bare 64-hex is treated as a public key; tick “this is my private key” to sign with it later.
Vault descriptor
- Descriptor
- SHA-256
- Quorum
- Internal key
Fund the vault
The deposit address. Coins are safe the moment they confirm — spending needs the quorum, not you.
No vault loaded. Forge one in step 1, or paste a descriptor below.
Deposit
On-chain state
- Balance
- —
- Total received
- —
- Transactions
- —
UTXOs
Refresh to list spendable coins.
Plan a spend
Choose coins, recipients and a fee rate. The page builds an unsigned bundle — every cosigner re-derives the fee, the vBytes and every per-input digest from it before signing anything.
No vault loaded. Forge one in step 1 or load it in step 2 first.
Coins
Recipients
Unsigned bundle
- Inputs
- Outputs
- Size
- Fee
- Change
- Fingerprint
Sign & finalize
Two roles, one page. Cosigners import the bundle, check the plan, and export a partial signature with their key. The coordinator collects partials — every signature is re-verified against the claimed key and the exact input digest — and finalizes once the quorum is met.
Cosigner — sign the bundle
The key must belong to cosigner i in the descriptor — a mismatch is refused loudly.
Coordinator — collect & finalize
- txid
- Fee
Or broadcast with your own node:
pearld sendrawtransaction <hex>
Track a spend
Follow any vault transaction's confirmations with GET-only Blockbook reads.
Verify a descriptor
Anyone can re-derive the vault address from the descriptor's canonical JSON. Before you fund a vault someone else forged, verify it here — tampering rules NOT PROVEN.
Honest limits
- The NUMS internal key has no known private key — spending is possible only through the multisig script leaf. There is no keypath escape hatch, by design.
- The quorum is enforced by the Bitcoin-script CHECKSIGADD leaf on Pearl's Taproot — it is a chain rule, not an app convention.
- Partial signatures are verified against the claimed cosigner key and the exact per-input BIP-341 digest before acceptance. A bad signature never reaches the chain.
- Fees are computed from the exact script-path witness weight. Change below 333 grains is added to the fee and disclosed — never stranded.
- Keys you enter stay in this page's memory; use the wipe button when done. The page never uploads keys anywhere.
- Blockbook reads are third-party data; an unreachable Blockbook means no balances, no broadcast — the page says so loudly instead of guessing.