> For the complete documentation index, see [llms.txt](https://references.everstrike.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://references.everstrike.io/technical-architecture/trustless-withdrawal.md).

# Trustless Withdrawal

Trustless Withdrawal lets you withdraw without operator cooperation. It is permissionless and censorship-resistant.

It is an emergency escape hatch. Use it if the operator censors a withdrawal or acts maliciously.

{% hint style="warning" %}
Trustless Withdrawal has a 24-hour challenge period and significant fees. Do not use it for routine withdrawals.
{% endhint %}

### How it works

Trustless Withdrawal uses an innocent-until-proven-guilty model:

1. Submit your latest state receipt and withdrawal amount to `Everstrike.sol`.
2. The operator has 24 hours to challenge the request.
3. A newer receipt, with a higher nonce, invalidates the request.
4. Without a valid challenge, `Everstrike.sol` completes the withdrawal.

An invalid request forfeits the Dishonesty Fee. A successful request returns it.

### State receipts

A state receipt is a rolling agreement between you and the operator. It records your current balance and positions.

Each receipt contains:

* Nonce.
* User signature.
* Operator signature.
* User balance.
* User positions.

You receive a new receipt after an operation changes your balance or positions. This includes:

* Submitting or cancelling an order.
* Trades and funding transactions.
* Deposits and withdrawals.

Use the receipt with the highest nonce. Older receipts are invalid for Trustless Withdrawal.

### Before you submit

Complete these checks before initiating a withdrawal:

* Stop trading until the operator approves the request or 24 hours pass.
* Disable Cross Margin. Use Isolated Margin if you have open positions.
* Confirm that you hold your latest state receipt.

Trading after you submit lets the operator invalidate the withdrawal and claim the Dishonesty Fee.

### Fees

| Fee            | Amount                                                         | Outcome                                                                                    |
| -------------- | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------ |
| Dishonesty Fee | 10% of the withdrawal amount, or 100 USDT, whichever is higher | Returned after a successful withdrawal. Claimed by the operator if the request is invalid. |
| Withdrawal Fee | 20 USDT                                                        | Non-refundable.                                                                            |

The fees make Trustless Withdrawal unsuitable for small amounts. Use it only for amounts above 100 USDT when necessary.

### Receipt lifecycle

Before the operator accepts a new order, you sign its presented state receipt. The operator then signs the receipt and sends you a copy.

The signed receipt is stored:

* On your device.
* With the operator.
* In `Everstrike.sol`.

If you lose a receipt, request it from the operator. If the operator refuses, retrieve it from `Everstrike.sol` directly.

### FAQ

#### Why does Trustless Withdrawal work?

The latest receipt proves your agreed balance and positions. The Dishonesty Fee discourages claims above that balance.

#### Can the operator create a receipt for me?

No. The operator cannot access your private key. It uses your public key to verify your signature.

#### Can someone else start a withdrawal for me?

No. Initiation requires your private key.

#### Do I need to sign every order?

You can grant the operator access to a session key. A session key is short-lived and revocable. You can limit its permissions and duration.

This improves the order flow, but slightly reduces security. Revoke the session key immediately if you suspect malicious behavior.

#### What if the operator does not issue a receipt?

Stop trading immediately. Start a Trustless Withdrawal using your latest receipt as soon as possible.

#### Can Trustless Withdrawal support other operations?

Yes. Everstrike V2 will include Trustless Unstaking, also called redemption. The same model can support operations requiring operator cooperation.