You never have to trust us.
Salvage gets depositors out of illiquid vaults ahead of the queue. The design is boring on purpose: your user signs a standard 1inch limit order, and every other moving part is ours to get wrong, not theirs.
- 01
Your user signs a limit order
A standard 1inch limit order: their vault shares for an exact amount of the underlying asset. They see that number before they sign it. The order is restricted so that only the Salvage executor can fill it — no rival bot can take it, and it is never broadcast to a public order book.
- 02
Nothing moves until we pay
The shares stay in their wallet. The order is a signature, not a transfer, and it costs nothing to make. If we never fill it, nothing ever happened. They can revoke the allowance at any time without asking us.
- 03
We flash-borrow the payout
When the vault has liquidity, we borrow the payout amount, fill the order — which pays your user, in full, the exact figure they signed — redeem the shares we just received, and repay the loan from the proceeds. One atomic transaction.
- 04
The spread is the fee
Whatever is left after repaying the loan is what we keep. There is no separate fee transfer, no invoice, and no step where we hold your user's money. If the numbers do not work, the transaction reverts and nobody is worse off.
What your users are actually trusting
The honest answer is: the 1inch limit order contract, which they are already trusting if they have ever used a DEX aggregator. Not us.
- We cannot take their shares. The order pays them first, in the same transaction, or it does not execute at all.
- We cannot change the amount. It is inside the signature. Changing a single digit invalidates it.
- We cannot leave them half-done. The borrow, the fill, and the redemption are one transaction — it all happens or none of it does.
- We cannot sit on their position. They revoke the allowance whenever they like, with no involvement from us.
Point your stuck users at us
If your protocol has depositors who cannot withdraw — a paused vault, an illiquid market, a wind-down — we will build the integration for you.
- Building the integration is free. We do the work, on our side, at our cost.
- We only get paid when a user actually gets their money out. No retainer, no listing fee, no minimum.
- Your users are never asked to trust a Salvage contract with custody, because the mechanism above never gives us any.