How 2 of 3 multisig works
Three keys, two release. The shop alone cannot move your coins.
The three keys
- Buyer key, held by you, generated at order time.
- Vendor key, held by the vendor.
- Platform key, held by the market operator.
Any two signatures release the coin from escrow. The third is not needed.
The happy path
- You place an order. The market generates a 2 of 3 multisig address for the coin.
- You deposit into the multisig address.
- The vendor ships.
- You mark the order received.
- Buyer and vendor sign the release. Coin moves to the vendor. Platform key never moves.
The dispute path
- Either buyer or vendor opens a dispute.
- A moderator reads both sides of the message thread, checks vendor history, judges.
- Moderator cosigns with whichever side they judge correct.
- Coin releases based on the two signatures.
What multisig fixes
The classic exit-scam pattern. The market cannot walk with your deposit alone because it holds only one of three keys per order.
What multisig does not fix
Seller fraud (a vendor can still ship you a rock). Bad arbitration (a moderator can side wrongly). Both of those are people problems, not protocol problems.
note
The platform key never moves in a healthy order. If you see it move without a dispute, something is wrong. That is why the on-chain multisig ledger is worth reading occasionally for the paranoid.