Owner rotation
The owners who sign are replaced in the same transaction.
Contrapay pays your vendors in USDC and EURC from your own Safe and writes the journal entry in the same step. Turn on bunker mode, and every key that signs retires in that same transaction.
| Account | Debit | Credit |
|---|---|---|
| R03JE-1041 · INV-104 settled on Arc | ||
| Accounts payable · USD | 12,000.00 | |
| Holdings · USDC · Arc | 12,000.00 | |
| R04JE-1042 · 2026-88, EUR 4,500.00 | ||
| Accounts payable · EUR | 4,878.00 | |
| Realized FX gain/loss | 18.90 | |
| Holdings · EURC · Arc | 4,896.90 | |
| R06JE-1043 · G-17 burned on Arc | ||
| Transfers in transit | 3,000.00 | |
| Holdings · USDC · Arc | 3,000.00 | |
| R07JE-1044 · G-17 minted on Base | ||
| Accounts payable · USD | 3,000.00 | |
| Transfers in transit | 3,000.00 | |
| Total | 22,896.90 | 22,896.90 |
Every signature reveals a public key. In bunker mode, that key loses control in the same transaction.
The owners who sign are replaced in the same transaction.
Your funds always sit on an address that has never signed.
Status: optional, per treasury, after the pilot. Mode A comes first. It protects your keys. It does not change how USDC or CCTP sign.
PDF SHA-2562 approvals above 5,000 USDMultiSend → pay()EIP-712 · safeTxHashArc <1 s · CCTPJE → XeroFinal on Arc in under a second. Paid out to five chains with CCTP. Vendors get the full amount.
Your Safe, your signers. We never hold funds.
InvoicePaid carries the invoice and PDF hash.
Holdings = chain, to 18 decimals.
ECB rates. Realized FX posts with the payment.
Bills, payments and files. The bill shows as paid.
New payout address: second approver and 24 h wait.
Signers see every payment in plain terms, and the same hash on their hardware wallet.
0x8f3a 91c2 … 7d04 c21eFor protocols, DAOs, Web3 studios and crypto-native companies.
No. Payments leave your own Safe, signed by your own signers. Our relayer only submits them and holds only gas.
Your funds stay in your Safe, and Safe{Wallet} still works. When Contrapay returns, it reads the chain from where it stopped.
Arc, plus Base, Arbitrum, OP Mainnet, Polygon PoS and Ethereum through CCTP. Vendors get the full invoice amount.
Yes. The auditor recomputes the invoice hash and compares it with the InvoicePaid event on Arc.
It adds steps. In Mode A, each signer registers a next key and the Safe Transaction Service mirror is off. Mode B uses a single key. A good multisig is enough for most teams today.