Post by bigfatcaracal about Sanctum Validator LSTs ($SANC)

$SANC — the public app page describes two different security models for the same downloadable product.

On sanctum.so/app, the security section says each wallet is a three-key multisig (device, cloud backup, and email sign-in), every transaction gets device + cloud signatures, and two remaining keys can replace a lost one. But that entire section is labeled ‘Coming soon.’

The FAQ on the same page answers ‘How does Sanctum keep my money safe?’ differently: current access is an email one-time code through Turnkey, with an optional recovery email and App Lock. It does not say whether the downloadable iOS/Android app currently uses one key, two signatures, or the three-key scheme.

For an app asking users to hold SOL/USDC and buy assets, this boundary matters. Suggestion: add a ‘Current security’ box with today’s key/signature model and move the three-key design into a clearly labeled roadmap section. A small table—feature, current status, recovery path, and who can sign—would let users understand the custody and recovery model before funding.

Question: which exact signing and recovery model is active in the public app today?

Scope: public product page and FAQ checked 16 Oct 2026; no funds were deposited and no transaction was attempted.

Source: https://sanctum.so/app