Tech

System Architecture

The backend of zCloak.Money consists of two core components: Root Contract and Institutional Contracts. The Root serves as the management and orchestration center for the entire ecosystem, responsible for wallet lifecycles, version upgrades, permission systems, and resource governance. It functions like a decentralized cloud control panel, maintaining the operational order of all wallet instances. Institutional Contracts, on the other hand, are independent smart contracts created for users, embedding execution engines to handle specific approval, signing, account, organization, and cross-chain operation logic.The significance of this dual-layer architecture lies in decoupling. The Root handles coordination and security assurance, while the Wallet layer remains fully autonomous, allowing each organization and enterprise to evolve at its own pace. The Root holds no user assets and cannot interfere with wallet execution logic—it is merely a coordinator for managers and resources. This layering enables the system to maintain unified governance while achieving highly distributed autonomy and security.

Technology and Implementation

The entire system is written in Rust and built on ICP. Data storage leverages stable-structures to ensure state integrity and permanent data retention across upgrades. Serialization uses the Candid protocol, and identity authentication is based on Passkey and WebAuthn standards, fundamentally eliminating the security risks of traditional private key management.The cross-chain interaction layer utilizes ICP's native Threshold ECDSA and Schnorr signing technologies, supporting secure operations across ICP, Ethereum, Solana, Base, BSC, and more. All signature requests are completed internally within Canisters, with no intermediary nodes or external key exposure. The system's data layer is meticulously designed, with StableCell and StableBTreeMap providing high-performance, traceable data indexing capabilities, ensuring every call executes within the state machine.

Root Contract

The Root is the "central nervous system" of the entire system. It coordinates the creation, upgrading, and state monitoring of all wallets while handling quota control and resource scheduling. Every wallet creation requires authorization or invitation code verification through the Root to prevent abuse and resource exhaustion. The Root includes a built-in Gas Manager that monitors the operational status of each institutional contract's sub-wallets, automatically replenishing Gas when it falls below safe thresholds.For version management, the Root maintains a repository of Wallet Wasm modules, performing hash consistency checks before every upgrade. All code updates are traceable and verifiable, preventing potential code tampering.

Institutional Contract

The Institutional Contract is the soul of each multi-signature wallet. It defines organizational structures, role hierarchies, approval thresholds, and cross-chain signing logic. Each organization can define multi-layered roles within it: administrators, approvers, operators, and observers, each with distinct permissions. The system supports two signing mechanisms—simple threshold and weighted threshold models. Enterprises can set different signing rules based on amounts, risk levels, or transaction types, striking the optimal balance between efficiency and security.All operation requests execute through a standardized Request state machine. Whether it's a transfer, administrator change, or contract call, requests go through a complete lifecycle: creation, verification, approval, execution, and recording. All state changes are on-chain, traceable, and exportable, inherently compliant and auditable. The Vault module manages multi-chain assets with dynamic rule strategies, making enterprise asset management more intelligent and flexible.

The Root + Institutional Contract dual-layer design of zCloak.Money defines a new paradigm for Web3 infrastructure. It unifies security, governance, identity, and execution on a single chain, achieving true enterprise-grade decentralization. Every operation is transparent, every signature verifiable, and every organization autonomously governed. This transforms zCloak.Money from merely a wallet into a sustainably evolving financial operating system. As more modules are integrated, it will become the security core for on-chain organizations, bridging enterprise-grade assets, compliance, and automated execution with trust.In the future landscape of encrypted finance, zCloak.Money is more than a wallet—it is a governance layer, a trust framework, and the "foundational trust engine" of the digital asset era. It enables organizations to operate securely in a trustless world, where code becomes the rule and multi-sig becomes the atomic unit of trust.