Skip to the article
Onchain Brief

News from across crypto

Why Chainflip signing retries can delay a swap

Chainflip swaps can pause after trading while validators retry a failed threshold-signing ceremony; the delay protects funds, but the protocol does not promise a fixed wait.

The Onchain Brief Editors3 min read
Why Chainflip signing retries can delay a swap

A Chainflip swap can be delayed after its trade is processed because validators must sign the payout transaction together, and a failed signing attempt is restarted. This shared signing process helps keep any one validator from controlling the funds. It also means a slow or failed ceremony can hold up delivery to the destination wallet. For a broader explanation of how Chainflip handles native cross-chain swaps, see our beginner’s guide. The signing step comes after the network has witnessed the deposit and processed the trade.

What does threshold signing do in Chainflip?

Threshold signing lets a group of validators approve a transaction without any one of them holding the complete private key. Chainflip uses a signing ceremony: validators coordinate to produce a valid signature for the payout, which the network can then send to the destination chain.

The ceremony is separate from the swap’s trade. Chainflip’s State Chain records the swap and prepares its output, then the network creates and signs an external transaction to pay that output to the user. Until the signed transaction can be broadcast, the trade may be processed but the destination wallet has not received its funds.

Why do signing retries add time?

A signing ceremony can fail to finish. Chainflip’s documentation says that if it times out, the State Chain records the timeout and the ceremony restarts automatically. Each failed attempt therefore adds another wait before the network can move on to broadcasting the payout.

Signing is not the only possible source of delay. After a signature is ready, a validator is selected to broadcast it. If that validator cannot send the transaction, for example because of a connection problem or insufficient gas, the network selects another. The destination chain must also receive and confirm the broadcast.

The public documentation describes automatic signing restarts, but does not give a fixed total wait or a maximum number of retries. So a retry is a reason for a delay, not a reliable estimate of when a particular payout will arrive.

What should you check when a Chainflip swap is late?

First, check the swap’s status and transaction details. The delay may be at a different stage, and each stage points to a different next step:

  • If the deposit is not yet witnessed, the source chain may still be confirming it.
  • If the trade is processed but payout is pending, signing or broadcasting may still be underway.
  • If the payout transaction is broadcast, check its status on the destination chain.

Do not confuse a signing retry with the swap’s retry duration. That duration is the window for meeting the user’s price protection, measured in State Chain blocks. If the swap cannot meet that condition in time, the protocol can refund the deposit to the specified refund address. A signing timeout, by itself, describes a failed ceremony being restarted; it does not tell you that the price-protection window has expired.

The practical takeaway is simple: signing retries can delay the final transfer even after the trade has been processed. Check which stage is pending before deciding what to do, and use the swap’s status details for updates rather than assuming that a slow payout means the trade failed.