This content applies to WaaS 1.0 only. We highly recommend that you upgrade to WaaS 2.0.
Hard Key Recovery
for disaster recovery. The tool named cobo-mpc-recovery-tool
in this repository can reconstruct the MPC private key that corresponds to the Cobo MPC wallet.
Binary archives are published at https://github.com/CoboGlobal/cobo-mpc-recovery-kits/releases
Building the source
Building binary from the source in local environment, instead of using published binary archives- Go 1.18 is required. Manually install Go, please click here
- Clone the repository:
- Enter the directory
- Build
cobo-mpc-recovery-tool
build
directory
Commands
Recovery command
Reconstruct all MPC key shares in TSS group recovery files, and derive the child private keys of all wallet addresses under the Cobo MPC walletflags | Description |
---|---|
csv-file | address csv file, contains HD derivation paths |
csv-output-dir | address csv output dir, derive keys file output in this directory (default โrecoveryโ) |
group-id | recovery group id |
group-recovery-files | TSS group recovery files, such as recovery/tss-group-id-node-1-time1,recovery/tss-group-id-node-2-time2 |
paths | key HD derivation paths |
show-root-private-key | show TSS root private key |
Verify command
Verify all TSS group recovery files are validflags | Description |
---|---|
group-id | recovery group id |
group-recovery-files | TSS group recovery files, such as recovery/tss-group-id-node-1-time1,recovery/tss-group-id-node-2-time2 |
Running
-
Prerequisites
- Acquire TSS group recovery files (JSON format) that contain exported MPC key shares.
- Passphrase of each TSS group recovery file
-
Create a new recovery folder in the same directory level as
cobo-mpc-recovery-tool
, and paste the TSS group recovery files under the recovery folder
- Execute the verify command
- (Optional) Locate the address.csv file after manually exporting the address information from Cobo Custody Web. Please paste address.csv under the recovery folder
- Execute the recovery command
--csv-file recovery/address.csv
or --paths
are optional and alternative to recovery command
- Once the execution completed, if flag
--csv-file recovery/address.csv
added, all child private keys will be saved under therecovery/address-recovery-<TIME>.csv
file in plain text. Please make sure that all data stored securely.
Feel free to share your feedback to improve our documentation!