Skip to content

Public beta on the Base Sepolia test network. Payments use test USDC with no real value: do not send real funds. The escrow contract has not had its external security audit yet, and the terms are drafts pending legal review. What the beta means

OpenVPT

01 · How it works

Five steps. Two keys.

From the moment you order to the moment money moves, your USDC sits in a smart contract, not in our account. It only leaves when two of the three keys (buyer, seller, platform) sign the same payout.

The rules at a glance

platform fee by default, taken from the seller's share
5%
lifetime of each platform-signed payment request
15 min
to pay once the order is placed
24 h
default inspection period after delivery
3 days
signatures needed to release the funds
2 of 3

02 · The lifecycle of an order

One order, five chapters.

Scroll through an order from start to finish. The vault shows which part of the escrow each step touches.

  1. Chapter 01

    Place the order

    Pick a listing and place an order. The platform signs its payment details (seller, token, amount and fee) so nobody can alter them on the way to the contract.

    • Seller, amount and fee are locked in by an EIP-712 signature from the platform.
    • Each signature is valid for 15 minutes. The contract rejects expired or edited details.
    • The order page fetches a fresh signature right before you pay, so a slow checkout is not a problem.
    Layer 01 · Payment details15:00Signed by the platform, valid for 15 minutes
    Layer 02 · Delivery recordSHA-256Fingerprint of each delivered file
    Layer 03 · Multisig vaultAwaiting paymentUSDC held by the VPTEscrow contract
    • BuyerNot yet
    • SellerNot yet
    • PlatformNot yet

    Illustration · not a real order

  2. Chapter 02

    Fund the escrow

    You approve and send the USDC to the VPTEscrow contract. It is locked there under the order's ID, and no single party, including us, can move it.

    • The funds sit in the VPTEscrow smart contract, never in a platform wallet.
    • You have 24 hours to pay. Unpaid orders are cancelled automatically.
    • Cancelling an unpaid order takes effect only after every payment signature you still hold has expired. If your payment is mined first, it counts; if it arrives after the cancellation, it is refunded in full.
    Layer 01 · Payment details15:00Signed by the platform, valid for 15 minutes
    Layer 02 · Delivery recordSHA-256Fingerprint of each delivered file
    Layer 03 · Multisig vaultLockedUSDC held by the VPTEscrow contract
    • BuyerNot yet
    • SellerNot yet
    • PlatformNot yet

    Illustration · not a real order

  3. Chapter 03

    Deliver

    The seller delivers through the order page within the listing's delivery period (3 days unless the listing says otherwise).

    • If the seller misses the deadline, the order moves to a full refund.
    • Each delivered file gets a SHA-256 fingerprint on record, so it is clear exactly what was handed over.
    • Licence keys are stored encrypted, and downloads use short-lived links that only the buyer receives.
    Layer 01 · Payment details15:00Signed by the platform, valid for 15 minutes
    Layer 02 · Delivery recordSHA-256Fingerprint of each delivered file
    Layer 03 · Multisig vaultLockedUSDC held by the VPTEscrow contract
    • BuyerNot yet
    • SellerNot yet
    • PlatformNot yet

    Illustration · not a real order

  4. Chapter 04

    Inspect

    You check the delivery during the inspection period: 3 days by default, or whatever the listing sets.

    • The clock starts when the seller delivers.
    • Happy with it? Confirm, and the release starts straight away.
    • Something wrong? Open a dispute within the period. Both sides then have 72 hours to add evidence and agree on a split themselves. Without an agreement, an arbitrator reviews the evidence from both sides; if one side never responded, the platform proposes the outcome instead (see the table below). If you do nothing at all, the period ends and the funds go to the seller.
    Layer 01 · Payment details15:00Signed by the platform, valid for 15 minutes
    Layer 02 · Delivery recordSHA-256Fingerprint of each delivered file
    Layer 03 · Multisig vaultLockedUSDC held by the VPTEscrow contract
    • BuyerNot yet
    • SellerNot yet
    • PlatformNot yet

    Illustration · not a real order

  5. Chapter 05

    Release

    Money moves only when two of the three parties sign the same payout. The platform relays the transaction, but it can never release, refund or keep funds on its own.

    • The contract needs two valid signatures from two different parties among buyer, seller and platform.
    • The payout to the seller, the buyer and the platform must add up exactly to the locked amount.
    • The platform's share must cover its fee, pro-rated to what the seller receives, so the fee always comes out of the seller's side. On a full refund it is zero.
    • Each order can be settled only once.
    Layer 01 · Payment details15:00Signed by the platform, valid for 15 minutes
    Layer 02 · Delivery recordSHA-256Fingerprint of each delivered file
    Layer 03 · Multisig vaultReleasedUSDC held by the VPTEscrow contract
    • BuyerSigned
    • SellerOptional
    • PlatformSigned

    Illustration · not a real order

03 · Who signs

Who signs, when.

Every payout needs two signatures. The platform signs system-triggered outcomes automatically; the second key always comes from someone else.

  • Buyer confirms the delivery

    Buyer
    Signs
    Seller
    Optional
    Platform
    Signs automatically
    Result
    Seller is paid, minus the fee
  • Inspection period ends with no dispute

    Buyer
    Not needed
    Seller
    Signs
    Platform
    Signs automatically
    Result
    Seller is paid, minus the fee
  • Seller misses the delivery deadline

    Buyer
    Signs
    Seller
    Not needed
    Platform
    Signs automatically
    Result
    Full refund to the buyer
  • An arbitrator rules on a dispute

    Buyer
    One of the two signs
    Seller
    One of the two signs
    Platform
    Signs automatically
    Result
    Split as ruled; fee pro-rated to the seller's share
  • A dispute's {negotiationHours}-hour negotiation ends and one side never responded

    Buyer
    One of the two signs
    Seller
    One of the two signs
    Platform
    Signs automatically
    Result
    Seller silent: full refund to the buyer. Buyer silent: release to the seller, minus the fee
  • Payment lands after the order was cancelled

    Buyer
    Signs
    Seller
    Not needed
    Platform
    Signs automatically
    Result
    Full refund to the buyer
  • The platform tries to act alone

    Buyer
    Not needed
    Seller
    Not needed
    Platform
    Signs alone
    Result
    Rejected by the contract

After a ruling, the platform signs the decided split and either the buyer or the seller adds the second signature, usually the party receiving the money. After an automatic dispute outcome, the party it favours signs. When the inspection period ends, the automatic release waits until the seller's payout wallet has been linked for 24 hours; a buyer's confirmation is not affected.

04 · Honest limits

What it does not do yet.

No system is finished. These are the gaps we know about today.

  • Public beta on a test network

    OpenVPT runs on the Base Sepolia test network for now: orders are paid with test USDC that has no real value, so no real money is at stake. Moving to Base mainnet waits for the escrow contract's external security audit and the legal review of the terms.

  • No appeal yet

    An arbitrator's ruling is final on the platform for now. An appeal process is planned.

  • If the platform stops operating

    Funds stay locked in the contract until two of the three parties sign a payout. Nobody can take them alone, but without the site there is no easy way to collect those signatures. A simpler exit path is planned.

  • Signatures cannot be withdrawn

    A payout signature does not expire. To keep that safe, the platform signs at most one payout per order. A future contract version will add deadlines.

  • A fingerprint is not a quality check

    The SHA-256 record proves which file was delivered, not that it works as described. That is what the inspection period is for.

Legal questions?Contact us

05 · Next

Keep going.