Program-derived vault authority
Deposited tokens are held in token accounts controlled by program-derived authorities. Those PDAs do not have an exportable private key. The operator’s transaction-signing wallets are separate from those vault authorities.
A balance can cross execution layers
Delegated trading records make fast execution possible. Releasing funds back to Solana requires the corresponding commit/undelegation and custody steps. The app abstracts these balances while retaining their different availability states.
Recovery still depends on the infrastructure
The current canonical release path requires the participating rollup validator. A validator outage can delay release and settlement. Do not assume an immediate, permissionless base-layer withdrawal while delegated state is unavailable.
By the SoltoshiDICE project · Reviewed October 18, 2026 · Original FIFO design: Papertrade