Understanding Bound in One Article: The "Multi-signature + Timelock" Escape Mechanism and the Off-Chain Matching Black Box

marsbitPublicado em 2026-05-25Última atualização em 2026-05-25

Resumo

**Title**: Understanding Bound: The Escape Mechanism of "Multi-Sig + Time Lock" and the Off-Chain Matching Black Box **Summary**: Bound Exchange, evolved from the earlier radFi platform, introduces a novel approach to Bitcoin trading by combining self-custody security with exchange-like speed. Its core mechanism relies on a 2-of-2 multi-signature (multi-sig) address for user deposits. One private key is held by the user via a passkey, and the other is held by Bound. This setup requires both keys to sign any transaction, preventing Bound from unilaterally accessing user funds (non-custodial). To address the risk of Bound becoming unavailable, a 3-month timelock is integrated into the Bitcoin script. After this period, users can withdraw their assets with just their single signature, ensuring an escape hatch. For trading, Bound operates a concentrated liquidity AMM. However, as Bitcoin L1 lacks smart contracts, the AMM curve, liquidity management, and trade price calculations occur off-chain in Bound's backend database. On-chain Bitcoin transactions serve only as final settlement receipts for pre-determined amounts. This creates a centralization point: the critical sequence of trade execution—which determines the exact price along the curve for each order—is managed off-chain by Bound in a non-transparent "black box." While the 2-of-2 setup protects user本金 (principal), the pricing and ordering of trades introduce potential operational MEV risks, as the order processing is inv...

Author: 798.eth

The Bound platform, currently popular in the Bitcoin ecosystem, was formerly known as Radfi. It started as a platform I began using at the end of 2025, associated with the NodeStrategy monkey strategy token, and has now upgraded and rebranded as Bound Exchange. This platform features a unique asset, essentially the monkey strategy—a flywheel for Node Monkeys with underlying asset support. The key is whether the underlying assets can sustain it.

Today, I'll mainly discuss its asset deposit/withdrawal and trading logic. But before diving into the mechanisms, let me first explain the differences between the upgraded Bound and the original Radfi.

1. Past and Present: From Radfi to Bound

Bound didn't emerge out of thin air; it's a complete rewrite and evolution of Radfi. The Radfi website now displays a line stating, "Radfi has evolved into bound.exchange." It's the same team, with the tech stack migrated from Create-React-App to Next.js—a full rewrite.

Bound's key additions are a passkey-built-in multi-chain wallet, fixed-term loans collateralized by Bitcoin for bUSD, and SODAX cross-chain. The trading engine remains Radfi's concentrated liquidity AMM; the Runes swap functionality is unchanged.

This product line features two sets of 2-of-2 plus timelock. The account layer set protects you, allowing you to bypass Bound after three months; the lending set protects lenders, allowing them to directly take your collateral after the grace period expires. (See chart for a side-by-side comparison of Radfi → Bound)

2. Core Mechanism: Asset Deposit/Withdrawal and 2-of-2 Multi-Signature Custody

Understanding its positioning, let's examine its asset management logic. There are two main points: 2-of-2 multi-signature custody, and timelock countdown protection in the event of platform abandonment or downtime.

First, set up the scenario. You have BTC and want to trade on a platform. The traditional method is to send coins to the platform's wallet, where they are held for you. The problem is the coins are no longer in your possession; if the platform runs away or is hacked, your coins are gone—FTX and Celsius failed this way. Bound aims to solve this contradiction: achieving CEX-like transaction speed without relinquishing control of your coins.

Step 1: What is a deposit?

After registering, Bound provides you with a Bitcoin address, starting with "bc1p." To trade, you first transfer BTC from your wallet to this address. This is a standard Bitcoin transfer, taking about half an hour with 3 confirmations. Up to this point, it's no different from using a regular wallet. The real design lies in the next question.

Step 2: Who holds the private key for this address?

This is the core of the entire system. There are only two naive approaches: if the private key is solely with the platform, it's custodial, reverting to the FTX problem; if it's solely with you, the platform cannot facilitate fast trades, requiring manual signing for every transaction—slow.

Bound's solution is that this address doesn't have just one key; it has two. To move coins from it, both keys must sign. This is 2-of-2 multi-signature.

Step 3: Whose keys are these?

One is yours, stored on your device, invoked via passkey, with the private key never leaving the device. The other is in Bound's backend. During daily trading, you sign with your passkey, Bound's backend automatically adds the other signature, and with both combined, settlement is near-instantaneous.

Pause here to consider this. Bound holds only one key; it cannot move your coins unilaterally, so it's not custodial and cannot lend out or misappropriate your coins. But together, you can achieve instant settlement, recovering the speed. This is the intended effect of 2-of-2—achieving both security and speed.

Step 4: What problem does the timelock solve?

2-of-2 introduces a new issue. Since two keys are required, what if Bound runs away, goes down, or is shut down? The backend key might be lost forever, leaving you with only one key. Would your coins be locked in the address forever?

Timelock plugs this hole. The rule is simple: Bound's co-signing key has a 3-month validity period. Within 3 months, moving coins requires both keys. After 3 months, you can withdraw all coins with just your single key, no longer needing Bound.

Crucially, this isn't just a promise from Bound; it's encoded into the Bitcoin script and enforced by the Bitcoin network. Bound's consent is irrelevant; when the time comes, you can single-sign and leave. This is the foundation of its claim to be self-custodial.

Step 5: Withdrawals now make sense.

For normal withdrawals, your passkey signs plus Bound's backend co-signs—both keys ready, instant arrival. For emergency withdrawals, if Bound disappears, you wait out the 3-month timelock, then use your single key to sweep the coins to any address.

Linking these five steps together, the initial four terms form a chain: you deposit coins into a 2-of-2 address (deposit); daily, you and Bound spend together (fast-path withdrawal); Bound's key expires in 3 months (timelock); after expiry, you can leave with just one key (escape-hatch withdrawal).

3. Underlying Logic: Bound Exchange's Transaction Sequencing

Having understood how assets are deposited, let's discuss Bound Exchange's transaction sequencing.

There are no smart contracts on Bitcoin. So, for a native Bitcoin DEX's AMM, where is matching done, and who decides the order of your trades? Essentially, it's a CEX-like matching backend, with the Bitcoin blockchain serving as the settlement layer. Let's break it down:

  • First, the AMM curve is not on-chain. BTC L1 lacks contracts; states like reserves, ticks, and liquidity ranges have nowhere to be stored and must reside in Bound's backend database. The UTXOs on-chain only represent the settlement outcome of LPs' funds under custody.

  • Second, on-chain transactions are merely settlement receipts. I pulled the trade history of that pool; each inflow/outflow is a fixed, predetermined amount, containing no curve calculation itself. The multiplication along the curve is completed off-chain in the backend before anything goes on-chain. The dozens of trades in a block, each spending separate UTXOs, unconnected to each other, precisely because the price was fixed off-chain; going on-chain is just about recording a set of pre-calculated numbers.

  • Third, how is a single trade priced? When you want to buy/sell on the frontend, the frontend requests a quote from the backend. The backend calculates using its maintained concentrated liquidity curve, your order consumes liquidity along the tick, fees are deducted, and it gives you a number. You sign a PSBT locking in this number, the backend verifies and co-signs/broadcasts it, simultaneously advancing its off-chain curve by one step. The curve lives only in the backend.

  • Fourth, sequencing is mathematically forced by this curve and unavoidable. The curve has state; at any moment, there's only one current position. Each incoming order consumes a segment of liquidity, pushing the curve to a new position; the next order can only execute at the new position. This means all orders inherently cannot settle simultaneously; they must be arranged in a strict sequential order. The first trade executes at the original position, pushing the curve one step; the second executes at the new position, pushing it again, and so on.

  • Fifth, but who decides this order and based on what is another matter. Distinguish between two sequences: one is the real-time timestamp when you click confirm, the other is the processing order the backend actually uses to advance the curve. Nothing on-chain or in the protocol guarantees these two match. Your order enters Bound's backend queue. Whether it declares the order, processes by arrival time, or bumps someone ahead/behind, is entirely its internal affair—you cannot see it.

  • Sixth, this is the entry point for operator MEV, even sharper than typical on-chain MEV. In general DEXes, the transaction order is at least visible in the block; front-running, sandwiching can be analyzed afterward. Bound's sequencing occurs off-chain; after results are settled in a block, even sequential traces are absent—dozens of unrelated transactions show no order on-chain. However, at the moment you click confirm, the price is already calculated based on a point on the curve. You just don't know its position within the block's sequence.

Therefore, Bound does have order; order is mathematically mandatory. It simply centralizes the power to define this order entirely within a black box. At the principal level, it is indeed self-custodial—2-of-2 plus timelock, the platform cannot move your coins. But the price and sequence at which your trade executes are accounted for off-chain by it alone. Ultimately, this is a CEX-like matching backend, interfacing with the world's largest blockchain for settlement, finalizing roughly every ten minutes with an immutable block.

4. Practical Tips and Experience Feedback

Finally, two practical details to avoid pitfalls. This 2-of-2 address only accepts BTC and Runes. Sending BRC-20, Alkanes, or coins from other chains will result in permanent loss. Alternatively, you can bypass Bound's system and directly connect your own Unisat or Xverse wallet. That means no 2-of-2 or timelock; coins remain in your single-signature wallet, but the trade-off is requiring manual signing for every transaction.

Based on current experience, there are still minor issues. I tested; a previous transaction already had two block confirmations, but the Bound frontend still showed "pending," preventing me from placing the next order. Hopefully, @Bound_Exchange official can look into this problem.

Perguntas relacionadas

QWhat is the core security mechanism of Bound exchange for user assets, and how does it work?

ABound's core security mechanism for user assets is a combination of a 2-of-2 multisignature scheme and a timelock. Users deposit assets into a bitcoin address (starting with bc1p). This address requires two private keys to sign any transaction moving funds: one is held by the user (secured by passkey on their device), and the other is held by Bound's backend. For everyday transactions, both keys sign, enabling fast execution. Crucially, Bound's key has a 3-month timelock. After this period, the user's key alone is sufficient to withdraw all funds, providing a self-custody escape hatch even if Bound becomes non-operational.

QHow does Bound's trading and price determination work, given that Bitcoin lacks smart contracts?

ABound operates as a centralized exchange (CEX) backend with Bitcoin as a settlement layer. The AMM's concentrated liquidity curve, tick states, and LP reserves are not stored on-chain but are maintained in Bound's private database. When a user initiates a trade, the frontend requests a quote from this backend. The backend calculates the execution price based on its internal liquidity curve, deducts fees, and provides a fixed amount. The user signs a Partially Signed Bitcoin Transaction (PSBT) with this amount, which Bound co-signs and broadcasts. The on-chain transaction is merely a settlement receipt of the pre-calculated result.

QWhat is a key difference between using Bound's built-in passkey wallet versus connecting an external wallet like Unisat or Xverse?

AThe key difference lies in security, convenience, and custody. Using Bound's built-in passkey wallet enables the 2-of-2 multisig and timelock mechanism, providing a balance of fast transaction execution and a self-custody safety net. If you connect an external wallet (like Unisat or Xverse), your assets remain in your single-signature (single-sig) wallet at all times. This means you have full and immediate control (no timelock), but the trade-off is that you must manually sign every single transaction yourself, which is slower.

QAccording to the article, what is the main source of potential Miner Extractable Value (MEV) in Bound's system?

AThe primary source of potential MEV (or more precisely, operator extractable value) in Bound's system is the opaque, off-chain transaction sequencing. While the mathematical AMM curve necessitates a strict sequential order for processing trades, this ordering is entirely managed within Bound's private backend. Unlike on-chain DEXs where transaction order is publicly visible in a block, Bound's internal queue is a black box. The operator could potentially reorder trades, front-run, or sandwich user transactions for profit without leaving a discernible trace on the blockchain, as the final on-chain settlements appear as unrelated, fixed-amount transactions.

QWhat is the evolution of Bound exchange, and what key features were added in the upgrade from Radfi?

ABound exchange is a complete rewrite and evolution of the previous platform Radfi. The core technology stack was switched from Create-React-App to Next.js. Key features added in the Bound upgrade include: 1) A built-in, passkey-secured multi-chain wallet. 2) A time-locked loan product allowing Bitcoin抵押 to borrow bUSD. 3) SODAX for cross-chain functionality. The original Radfi concentrated liquidity AMM engine for Runes swapping remained unchanged. The system also implements two separate 2-of-2 + timelock setups: one at the account layer to protect users and another for the lending product to protect lenders.

Leituras Relacionadas

AI PC Battle: Bet on the Toll Booth, Not the Camp

**Title:** The AI PC Battle: Don't Bet on Sides, Bet on the Tollbooth **Summary:** The AI PC competition is moving beyond simple "x86 vs. Arm" narratives. The core investment thesis should focus on identifying which players can sustain margins, cash flow, and pricing power throughout the upgrade cycle, rather than backing a particular architecture. The opportunity is analyzed in three layers: 1. **The Advanced Foundry Tollbooth:** TSMC is positioned to collect "tolls" regardless of which chip designer wins, due to its dominant ~70% share in advanced semiconductor manufacturing, which is essential for high-end AI PC chips. 2. **Compute & Platform Spillover:** AMD represents an offensive in the x86 CPU+GPU space, while NVIDIA leverages its GPU and CUDA software stack dominance. Both benefit from the demand for increased local AI compute. 3. **Architecture Diffusion & Turnaround Plays:** ARM and Intel offer potential for significant upside (elasticity), but investments here require stricter discipline due to higher execution risks and competitive challenges. The industry is transitioning from concept to shipment validation. While short-term forecasts for AI PC adoption have been revised down slightly due to tariffs and procurement delays, the long-term trend towards AI becoming a standard PC feature remains intact. The key driver for upgrade cycles will be whether compelling enterprise applications (e.g., privacy-sensitive computing, low-latency inference) emerge beyond consumer-focused features like meeting summarization. Investment strategy should prioritize companies with platform-level advantages and recurring revenue streams. TSMC offers high certainty as the foundational tollbooth. AMD presents a strong offensive play within the established ecosystem. ARM and Intel are higher-risk, higher-potential-reward turnaround bets. The report cautions against chasing short-term hype and emphasizes a disciplined, long-term approach focused on buying ecosystem strength and cash-flow certainty after market enthusiasm subsides. **Key Risks:** Underwhelming AI PC applications slowing upgrade cycles; slow improvement in Windows on Arm compatibility; macro/tariff impacts on PC demand; potential advanced node supply-demand mismatches affecting TSMC; high overall AI sector valuations making stocks vulnerable to a risk-off shift in markets.

marsbitHá 3m

AI PC Battle: Bet on the Toll Booth, Not the Camp

marsbitHá 3m

Ten-Thousand-Word Analysis: From $10 to $290, MRVL Wins the Entire AI Era by 'Not Making GPUs'

Marvell Technology's stock price surged from under $10 in 2016 to a record $290 in June 2026, fueled not by making GPUs, but by dominating AI infrastructure connectivity. This analysis argues the market misvalues MRVL as merely a smaller Broadcom in custom AI chips, overlooking its true, unique position. Marvell's core strength lies in enabling high-speed data flow for AI clusters through three interconnected businesses. First, it holds a commanding ~70% market share in high-speed optical DSPs (essential for data center light modules), a deep-moat business with accelerating growth. Second, its custom AI chip design business serves hyperscalers like AWS, Microsoft, and Google, with a significant revenue pipeline despite lower margins. Third, stable cash flows come from Ethernet switch chips and enterprise storage controllers. Together, they form a full-stack "AI data movement" platform. CEO Matt Murphy's transformative leadership since 2016, involving strategic divestments, key acquisitions (like Inphi for optical DSPs), and securing long-term agreements with major cloud providers, repositioned the company. A pivotal $2 billion strategic investment from NVIDIA in 2026 underscored Marvell's critical role in the AI ecosystem, particularly through collaborations like NVLink Fusion. While Marvell faces risks—including client concentration (losing the Amazon Trainium3 design), lower-margin business mix, competitive threats, insider selling, and complex supply chains—its fundamentals remain strong. The optical interconnect moat is widening with the acquisition of Celestial AI (photonics fabric), and financial metrics show accelerating revenue growth and operating leverage. With a PEG ratio suggesting undervaluation relative to its growth, the thesis is that the market undervalues Marvell's monopolistic position in AI "plumbing" while overemphasizing its competitive custom chip segment. The story transcends investing, symbolizing how in any complex system—from the internet to AI—the value of "connection" ultimately surpasses that of individual "nodes."

marsbitHá 33m

Ten-Thousand-Word Analysis: From $10 to $290, MRVL Wins the Entire AI Era by 'Not Making GPUs'

marsbitHá 33m

AI Relay Stations Spark Heated Debate on Zhihu: Behind Cheap Tokens, What Are Users Really Worried About?

A discussion on Zhihu about "AI relay stations" shifted the niche developer topic of "cheap tokens" into broader user awareness. Users moved beyond simply questioning the legitimacy of these services to focus on practical concerns: Where do cheap tokens truly come from? Is the model being accessed the real one? Can relay stations see prompts, code, and API keys? For occasional users, are the risks worth it? The core debate centered less on price and more on trust. A primary worry is model authenticity—the risk of "model swapping," where users paying for a premium model might be routed to a cheaper one, creating an information asymmetry. Others argued that cost comparisons matter; while cheaper than official pay-as-you-go APIs, relay stations may not be the lowest-cost option versus subscriptions, domestic models, or free tiers, making user needs assessment crucial. Speculation about token sources ranged from legitimate bulk discounts to gray-area methods like account sharing or exploiting regional pricing. This opacity makes risk assessment difficult for users. Data security emerged as a critical concern, especially for enterprise use. When processing sensitive information like code, contracts, or client data, the inability to verify a relay station's data handling, retention, or access policies poses significant compliance and confidentiality risks. The evolving consensus suggests relay stations can be used cautiously for low-sensitivity, disposable tasks (e.g., summarizing public info, simple translation). However, they should not be the default for sensitive, professional, or production workflows involving proprietary data, Agents, or automated systems. Recommendations include avoiding large prepayments, not relying on a single service, using test prompts to monitor quality, anonymizing data where possible, and keeping official channels as backups. Ultimately, the discussion framed tokens not just as a billing unit but as a measure of real cost encompassing price, model integrity, data security, and service stability. The popularity of relay stations highlights user demand for affordable access, but the debate underscores a key trade-off: the savings from cheap tokens may come at the price of trust, transparency, and control over one's data and AI experience.

marsbitHá 1h

AI Relay Stations Spark Heated Debate on Zhihu: Behind Cheap Tokens, What Are Users Really Worried About?

marsbitHá 1h

In-Depth Research Report on TradFi: The Convergence Wave of Crypto and Traditional Finance

In 2026, the crypto industry is undergoing a profound infrastructure-level transformation—TradFi assets are migrating on-chain at an unprecedented pace. According to CoinGecko's Q1 2026 report, the total value locked (TVL) of tokenized real-world assets (RWA) has surpassed $31 billion, a nearly 4x increase from $7.8 billion at the beginning of 2025, with the sector’s aggregate market capitalization reaching $19.3 billion. Among these, the market cap of tokenized stocks surged from $2 million to $486 million, with Q1 spot trading volume reaching $15.1 billion—a single quarter already surpassing the entire second half of 2025. RWA perpetual contract Q1 trading volume reached a staggering $524.8 billion, far exceeding the $313 billion for all of 2025. Meanwhile, BlackRock's BUIDL fund has reached $2.3 billion in scale and has filed for two new tokenized funds, signaling that the world's largest asset manager's tokenization strategy is evolving from pilot to product suite expansion. HTX, as a core participant in the crypto exchange sector, officially launched TradFi perpetual futures products including NVDA, AAPL, MSFT, META, and SPY in 2026, enabling crypto users to gain 24/7 trading access to core U.S. equities. Boston Consulting Group predicts that global tokenized asset scale could reach $16 trillion by 2030, while McKinsey offers a conservative estimate of approximately $2 trillion. The on-chain migration of TradFi assets is no longer a "future narrative" but a structural transformation unfolding in real time, as crypto exchanges evolve from single crypto asset trading platforms toward "multi-asset-class trading infrastructure."

HTX LearnHá 1h

In-Depth Research Report on TradFi: The Convergence Wave of Crypto and Traditional Finance

HTX LearnHá 1h

Trading

Spot
Futuros

Artigos em Destaque

Como comprar ONE

Bem-vindo à HTX.com!Tornámos a compra de Harmony (ONE) simples e conveniente.Segue o nosso guia passo a passo para iniciar a tua jornada no mundo das criptos.Passo 1: cria a tua conta HTXUtiliza o teu e-mail ou número de telefone para te inscreveres numa conta gratuita na HTX.Desfruta de um processo de inscrição sem complicações e desbloqueia todas as funcionalidades.Obter a minha contaPasso 2: vai para Comprar Cripto e escolhe o teu método de pagamentoCartão de crédito/débito: usa o teu visa ou mastercard para comprar Harmony (ONE) instantaneamente.Saldo: usa os fundos da tua conta HTX para transacionar sem problemas.Terceiros: adicionamos métodos de pagamento populares, como Google Pay e Apple Pay, para aumentar a conveniência.P2P: transaciona diretamente com outros utilizadores na HTX.Mercado de balcão (OTC): oferecemos serviços personalizados e taxas de câmbio competitivas para os traders.Passo 3: armazena teu Harmony (ONE)Depois de comprar o teu Harmony (ONE), armazena-o na tua conta HTX.Alternativamente, podes enviá-lo para outro lugar através de transferência blockchain ou usá-lo para transacionar outras criptomoedas.Passo 4: transaciona Harmony (ONE)Transaciona facilmente Harmony (ONE) no mercado à vista da HTX.Acede simplesmente à tua conta, seleciona o teu par de trading, executa as tuas transações e monitoriza em tempo real.Oferecemos uma experiência de fácil utilização tanto para principiantes como para traders experientes.

295 Visualizações TotaisPublicado em {updateTime}Atualizado em 2026.06.02

Como comprar ONE

Discussões

Bem-vindo à Comunidade HTX. Aqui, pode manter-se informado sobre os mais recentes desenvolvimentos da plataforma e obter acesso a análises profissionais de mercado. As opiniões dos utilizadores sobre o preço de ONE (ONE) são apresentadas abaixo.

活动图片