Locked Vaults

• One-time vault per link. Each claim link gets its own ephemeral secp256k1 keypair that briefly holds the USDG. Its private key never leaves the server unencrypted.
• Encrypted with your code. The vault key is sealed with AES-GCM using a key derived from your secret — funds only move when the correct code decrypts it.
• No double-claims. An atomic on-chain-state lock guarantees a link can be swept exactly once, even under concurrent attempts.
• Brute-force resistant. Repeated wrong codes trigger temporary lockouts, and PayLink never custodies your keys.