You sign. Floor co-signs.
Everything that moves your coins or your SOL is signed in your own Phantom. Floor works with exactly two kinds of keys, each with one narrow job, and neither can touch what is in your wallet.
Who signs what
Every action on Floor, and the key that approves it.
| Action | Signed by | What that means |
|---|---|---|
| Connect | Your Phantom | One message signature, checked by Floor's server. No transaction, no fee. |
| Launch the coin and collection | Your Phantom | Two approvals: the coin, then the collection. |
| Buy and sell | Your Phantom | Trades are yours alone. Floor never signs them. |
| Mint an NFT | Your Phantom + collection minting key | You approve the mint. Floor co-signs only if it pays the listed price inside the supply cap. |
| Claim fees and pay out | Floor, from your fee wallet | The fee wallet lives in Privy's secure enclave. Floor signs fee claims and payouts from it. |
The co-signed mint
You own your collection. Claim it on Magic Eden and Tensor with your wallet: your Phantom is its update authority, so its details and royalties are yours to change. Floor's minting key is only a delegate, held encrypted on Floor's servers. A mint cannot happen without it, and it only signs a mint that follows the collection's rules. If you remove it, minting closes for good.
It never holds anyone's coins or SOL. Its only power is to say yes to a valid mint.
- The price is enforcedA mint that pays less than the listed price is not co-signed.
- The cap is enforcedOnce the collection reaches its supply cap, the minting key will not sign another one.
- Burn and mint are one transactionNo burn without a mint, no mint without a burn. If either half fails, both do.
- Tamper-proofThe co-signature covers the whole transaction. Change anything after Floor signs (the price, the amount, the recipient) and the signature no longer matches, so the network rejects it.
Fee wallets in Privy's enclave
Every account gets one fee wallet, created automatically. Its key is held in Privy's secure enclave, not in Floor's database. Floor asks the enclave to sign fee claims and payouts from it.
The same goes for every other wallet Floor spends from: each collection's rewards pool and sweep wallet, the platform buyback wallet and the storage payer are Privy wallets too. Floor signs through its Privy authorization key; the keys never reach Floor's database.
Your 90% of the coin's creator fees, the collection's royalties and any unburned share of a mint all land in this wallet. Claiming is automatic.
On the development site, until Privy's authorization key is configured, fee wallets are encrypted server wallets instead.
The fee split is locked
At launch, the coin's creator fees are split on chain, 90% straight to your fee wallet, 5% to buy and burn the Floor token and 5% to the Floor treasury. That split is locked at launch: it cannot be changed afterwards, by you or by Floor.
Because it is enforced on chain, you can check it yourself on the coin at any time rather than taking our word for it.
What Floor can never do
The first two need keys only you hold. The last two are enforced by the minting key's rules and by the chain.
- Move the coins or SOL in your Phantom
- Sign a trade for you
- Co-sign a mint below the price or over the cap
- Change a coin's fee split after launch