Security

One-call containment: suspend, revoke every credential, return all unwind calldata

POST/v1/panic

Suspends the account (reads, cancels, and revocations stay available), revokes every API key AND every session, flips all delegations to revoked with their owner-submittable uninstall/invalidate calldata, zeroes every venue credential, removes the auto-topup rule, and returns CancelAuthorization instructions for outstanding arrows. Requires a session or admin-scoped key — a leaked read/write key cannot call this. The calling credential dies with the rest: read this response, then sign in again (SIWE) for anything further. Re-enable via the operator.

Request body

  • reason string

Responses

200Contained; finish on-chain with the returned calldata

  • suspended true (required)
  • api_keys_revoked integer (required)
  • sessions_revoked integer (required)
  • credentials_revoked integer (required)
  • delegations_revoked object[] (required)
  • auto_topup_removed integer (required)
  • cancellation object

Example

curl -X POST https://api.cofferline.com/v1/panic \
  -H "authorization: Bearer $TOKEN" \
  -H "content-type: application/json" \
  -d '{}'

Deprecated alias of POST /v1/panic (#238) — identical behaviour

POST/v1/panic/panic

Suspends the account (reads, cancels, and revocations stay available), revokes every API key AND every session, flips all delegations to revoked with their owner-submittable uninstall/invalidate calldata, zeroes every venue credential, removes the auto-topup rule, and returns CancelAuthorization instructions for outstanding arrows. Requires a session or admin-scoped key — a leaked read/write key cannot call this. The calling credential dies with the rest: read this response, then sign in again (SIWE) for anything further. Re-enable via the operator.

Request body

  • reason string

Responses

200Contained; finish on-chain with the returned calldata

  • suspended true (required)
  • api_keys_revoked integer (required)
  • sessions_revoked integer (required)
  • credentials_revoked integer (required)
  • delegations_revoked object[] (required)
  • auto_topup_removed integer (required)
  • cancellation object

Example

curl -X POST https://api.cofferline.com/v1/panic/panic \
  -H "authorization: Bearer $TOKEN" \
  -H "content-type: application/json" \
  -d '{}'