Wallet is where a Branch's settled funds live — the destination that receives funds when the Branch Vault settles.This page covers the Branch Wallet — the one every Branch has from the moment it's created — and how a Signer Wallet controls it. Signer Wallet itself is covered in full separately.
Branch Wallet#
A Branch Wallet is a smart contract account (account abstraction), deployed automatically when the Branch is created.It's controlled by a Signer Wallet — an EOA generated through Privy's embedded wallet infrastructure, using threshold key-splitting: no single party, including Woldy or Privy, ever holds the complete private key.A Signer Wallet can export a standard seed phrase at any time. Once exported, it behaves like any wallet held in MetaMask or another wallet app — fully outside Woldy and Privy's infrastructure.Today, a Branch Wallet has exactly one Signer Wallet, created automatically and holding the Owner role. Support for granting the Admin role to additional Signer Wallets is coming later.A Signer Wallet can do anything with its Branch Wallet:no whitelist on destinations
no timelock on transactions
no built-in limit on what it can authorize
Woldy holds no override on the contract either — no pause, no freeze, no upgrade key. Custody sits with the merchant from the moment the Branch Wallet is deployed. This isn't a policy Woldy promises to follow — it's a property of the contract itself.
How it fits together#
The Vault is where incoming payments are held and evaluated for settlement. When settlement runs — manually or automatically — funds move from the Vault to the Branch Wallet.From there, the Branch Wallet is controlled entirely by its Signer Wallet — today the Owner, with the Admin role coming later. Modified at 2026-08-23 11:31:51