CX
CoinExchange.Cash

How CoinExchange Works

This page describes how wallet connection, escrow eligibility, settlement, and disputes are implemented in the CoinExchange.Cash product. Details vary by asset, chain, and live route — verify the in-app state before funding.

General information only, not financial advice; consider your circumstances and seek independent advice.

End-to-end flow

  1. Step 1

    Connect a wallet or sign in

    Browse many public pages without signing in. To trade or use account features, connect a supported wallet (for example via WalletConnect-compatible flows) or use email/password sign-in. Wallet sign-in uses a one-time nonce from GET /auth/wallet-nonce and a signature verified server-side; signup, login, wallet-connect, password reset, and related auth routes require Cloudflare Turnstile and Redis-backed rate limits.

  2. Step 2

    Register escrow public keys (party keys stay client-side)

    For eligible 2-of-3 escrow routes, each trading party generates escrow key material in the browser and registers only the public key with POST /escrow/register-key. The API server does not receive or store party private keys for normal trades, loans, or user-to-user flows.

  3. Step 3

    Create or join a listing

    P2P trades, P2P loans, CryptoMart orders, and CryptoGigs can attach escrow when the selected cryptocurrency’s chain is marked escrowSupported in platform configuration (derived from engine capability reports, not a static marketing list). Prediction markets use a platform escrow user as counterparty where configured; that party’s key may be generated server-side because the platform is a named counterparty, not because user wallet keys are held.

  4. Step 4

    Fund the escrow address shown in the app

    When escrow is active for your route, deposit to the multisig address or contract shown in the trade UI. For Bitcoin, Litecoin, and Dogecoin, native P2WSH-style 2-of-3 engines are implemented in @coinexchange/escrow. EVM token escrow requires a configured Escrow2of3Factory and productionVerified custody approval in code; a factory address alone does not enable advertising or capability flags.

  5. Step 5

    Complete off-platform payment or delivery steps

    Fiat and other off-chain payments happen between users outside blockchain escrow. Confirm payment or delivery using your own checks; chat and uploaded proofs may be used if a dispute is opened.

  6. Step 6

    Release or dispute

    Happy-path release combines signatures from two of the three escrow roles (buyer, seller, platform arbitrator). If parties disagree, either side can open a dispute; an arbitrator may be assigned from the arbitrator pool to review in-platform evidence and choose buyer, seller, or split release. The arbitrator co-signs releases but cannot move funds alone — two of three signatures are still required on supported engines.

What the platform offers

CoinExchange.Cash groups several wallet-oriented products: P2P crypto trading, P2P lending, CryptoMart goods auctions, CryptoGigs freelance orders, prediction markets, optional chance/slots experiences, token swap/send flows, and CXCASH-related tools. Each product has its own UI route; escrow, verification, fees, and availability depend on the live configuration for that route.

Where 2-of-3 multisig escrow applies

Escrow is not universal. The API exposes escrowSupported per approved cryptocurrency by calling describeDefaultEscrowCapabilities() / isEscrowCapableChain(). As of the current codebase, native on-chain 2-of-3 creation and release is advertised only for Bitcoin, Litecoin, and Dogecoin without extra deploy flags. Chains such as Monero, Solana, TRON, XRP, Cardano, and Aztec have placeholder or client-side-only engines and are not advertised as escrow-capable. EVM chains stay disabled until a factory is configured and productionVerified is true in engine configuration.

Always confirm escrowSupported, the funded state, and the displayed address in the app before sending funds. Marketing labels or chain lists alone do not prove escrow is active for your trade.

  • Three roles: buyer (party A), seller (party B), platform arbitrator — any two signatures required to spend.
  • User party private keys: generated client-side; only public keys are registered server-side.
  • Arbitrator private key: generated and stored server-side under software custody (AES-256-GCM in PostgreSQL, decrypted in process memory for signing). This is custodial for the arbitrator key only, not for user wallet seed phrases.

Custody and non-custody caveats

The product is wallet-based: you connect your own wallet for many flows and authorize actions with your keys. Depending on configuration, eligible escrow may lock crypto in a multisig address or contract according to the engine for that chain; the platform does not pool user funds in a single hot wallet for those routes.

Server-side custody does apply to the arbitrator signing key, encrypted payment proofs and dispute evidence storage, session/JWT handling, and any flow where the platform is an explicit counterparty (for example prediction-market escrow user). Third-party on-ramps, identity providers, and wallet apps have their own custody and privacy models.

Disputes and appeals

Disputes are created via the API with structured reason codes (payment not received, fraud suspected, gift-card-specific codes, and others). SLA timestamps (for example 48-hour response and 120-hour decision windows) are informational and do not auto-resolve cases. Arbitrators review timelines, chat, and uploaded evidence; resolution triggers escrow release logic when applicable. Appeals (L2) may require elevated admin roles per disputes.service rules.

Verification and limits

Wallet-based browsing does not guarantee reduced verification. Identity, volume, payment-method, risk, and eligibility checks may apply depending on activity and configuration; see the Verification Policy and in-app prompts for the route you use.

Product and feature guides

Deeper, product-specific pages for search and onboarding. Each links to the live app route and help articles.

General information only, not financial advice; consider your circumstances and seek independent advice.

How CoinExchange.cash Works