Sign in
banking.v1.BalanceService

Admin (DepositAddressMigrate): retire a user's HEALTHY, KEK-sealed deposit address in favour of one minted inside the key custodian's enclave (phase 4 of docs/MIGRATION-turnkey.md), and refresh the hub's address cache.

Changed on

NOT the rotation path. Rotation recovers a key that is already dead; this retires a live one, so the hub must first prove the address has nothing left on it — refused while the user has any credited deposit on this rail that no sweep has observed drained. The signer independently refuses a dead key, an already-migrated row, and an address other than the one this hub cleared.

post/banking.v1.BalanceService/MigrateDepositAddressToCustodian

Request

  • The document declares no server URL.
  • Auth: none required

Headers

Connect-Protocol-Version1 required

Define the version of the Connect protocol

Connect-Timeout-Msnumber

Define the timeout, in ms

Request body

user_idstring

the affected user (UUID)

networkstring

bep20 | polygon | trc20 | ton

Response

Success

old_addressstring

the retired address — kept so the operator can watch it

new_addressstring

the NEW fundable, custody-held deposit address

Changes