Bind the details.
A recipient-signed request fixes the destination, token mint, amount, expiry and unique nonce. A substituted address should fail the intent checks.
A new step in transfer security
Before funds move,
confidence
connects.
A proposed confirmation layer for crypto transfers. Align the intent. Verify both sides. Give every important transfer a deliberate beginning.
Protocol concept · Interactive simulation · No wallet required
01 / SENDER INTENT02 / RECIPIENT CONSENT
TWO-SIDED CONFIRMATIONEXACT TRANSFER DETAILSTIME TO RECONSIDERMULTICHAIN VISION
Experience the idea
One transfer.
Two sides. One intent.
Walk through a successful handshake, test an address mismatch, or cancel before release. Every interaction is a local simulation.
TACTO / HANDSHAKE SIMULATORSIMULATION — NO REAL FUNDS
SenderWallet A · Demo
RecipientWallet B · Demo
Sender · Waiting
Recipient · Waiting
Ready for a handshake?
A payment request binds the recipient, asset and amount to one specific intention.
NO FUNDS MOVED · DEMO ONLY
The displayed phrase and wallet labels are illustrative. This demo does not create signatures, escrow accounts or blockchain transactions.
Security begins with intention
Make confirmation
part of the transfer.
The proposed design brings context and recipient consent into the process before funds reach their final destination.
Compare both sides.
A short phrase derived from the transfer details helps two people compare the same intent through an independently trusted channel.
Keep a pause.
Funds wait in a proposed escrow stage. Recipient approval and a pre-enrolled second-device confirmation precede a brief cancellation window.
Inside the handshake
Human-readable intent.
Program-enforced rules.
The phrase makes the transfer easier to compare. Signatures and on-chain checks would enforce the actual rules. A matching phrase alone never authorizes a payment.
The proposed program would bind approvals to the same unique transfer, lock its terms, enforce the release deadline and make expired transfers reclaimable.
See every stage ↗01 · Payment requestRecipient-signed terms
02 · Intent comparisonIndependent channel
03 · Escrow fundingFixed destination + asset
04 · Dual approvalRecipient + second device
05 · Pause, then releaseBounded cancellation window
Expiry would permit a refund transaction; the blockchain does not automatically initiate it.
One idea. A wider ecosystem.
Solana first.
A multichain ambition.
The long-term goal is a consistent confirmation experience across blockchains. Each network requires its own implementation, wallet integration and security review.
SolanaProposed first implementation
Ethereum / EVMFuture adapter research
Layer 2 networksFuture integration direction
Other ecosystemsFeasibility to be evaluated
No live network integrations are available. Multichain support does not imply cross-chain transfers or compatibility with every blockchain today.
01 / CONCEPT
Explore the interaction.
Define the transfer intent and show the confirmation flow through this interactive prototype.
02 / VALIDATION
Build and challenge.
Implement a Solana testnet prototype, test adversarial scenarios and obtain independent security review.
03 / EXPANSION
Adapt, chain by chain.
Research additional networks and wallet integrations after the core design has been validated.
What the design aims to reduce
Address substitution, accidental recipient changes, reused approvals and single-device blind confirmation. Intended for high-value transfers and first-time recipients.
Where protection ends
It cannot identify a scammer you intentionally approve, guarantee delivery of goods or undo a released transfer. Compromised devices and program defects remain risks. Extra steps and network fees are expected.
Clear answers
Confidence needs clarity.
Is Tacto live?
No. Tacto is currently a protocol concept and interactive presentation. No audited smart contract, token, working wallet integration or live escrow service is provided here.
Can a transfer be cancelled?
In the proposed design, a funded transfer can be cancelled before release during the permitted window. After final release it is irreversible. Expired funds require someone to submit a refund transaction.
Why a second device?
A separately enrolled key could approve the exact transfer details from an independent screen. This reduces reliance on one compromised interface, but only if enrollment and the second device remain trustworthy.
Is this a completely new cryptographic primitive?
No. Escrow, timelocks and signed payment requests are established ideas. Tacto proposes combining them into a clearer two-sided confirmation flow. Market-wide novelty has not been established.
Will it work with every token and blockchain?
That is an ambition, not current compatibility. Token extensions, chain execution rules and wallet capabilities would require explicit support and validation. Initial development would focus on selected Solana assets.
A deliberate step forward
Confirm together.
Transfer with confidence.
Explore what a clearer beginning for crypto transfers could look like.
Experience the handshake ↗