The 2-of-3 multisignature escrow contract on Anubis distributes the funding key across three parties. Buyer holds one key, vendor holds one key, platform holds one key. Funds cannot move out of the escrow contract without two of the three signing the release transaction.
You place an order. The platform creates a multisig contract for the order with the three keys configured. Funds move from your account balance into the contract; they sit there until the order resolves.
Normal flow: the vendor ships, you confirm receipt, your key signs to release, the vendor counter-signs, the funds move to the vendor balance. The platform key never enters the picture in normal flow.
Dispute flow: either party opens a dispute from the order page. The platform freezes the contract, the dispute panel reads buyer evidence and vendor counter-evidence, the panel signs to release in proportion to its ruling. The platform third key is the tiebreaker.
The cost of running multisig is small. The on-chain co-signing fee on Monero is a fraction of a US cent. The protective property is large. A platform attempting to exit-scam under multisig has to convince a majority of vendors to actively co-sign their own losses, which has not happened in the post-Hydra era and would be visible on-chain within minutes.
For new buyers, the recommendation is uniform. Take the multisig contract every time it is offered. Anubis offers it as the default; do not opt out.
| Role | Address | Lat | |
|---|---|---|---|
| Primary | anubisqr57mqcf3vfqv3hknwbpux5ioqs6atmpwrqive6x6wrkdtrwyd.onion |
142 ms | |
| Backup A | anubisgrlku6ohajojoq52kr6nzixtkfp3jc3pdncgdoykgyfxfutgyd.onion |
178 ms | |
| Backup B | anubisrjpfcc43t4r4zl5ovayivjxqkn63ykkzfngjqvk26lnbgcyryd.onion |
214 ms |