custody.signer-changed.final
A signer was added to or removed from a System smart account's validator, a signer's weight or the validator's threshold changed, or its owner was replaced; sent once the chain finality watermark reaches its source block. Identifies signers only by the keccak-256 hash of their signer bytes, never by key material.
Delivery contract
| Field | Value |
|---|---|
| Event type | custody.signer-changed.final |
| Version | 1 |
| Lifecycle state | final |
| Counter-signed receipts | No event-specific advice |
| SDK type | Webhook.CustodySignerChangedFinalV1 |
The receipt recommendation does not change delivery behavior. DALP waits for a counter-signed receipt only if the webhook endpoint's counterSignedReceipts value is true when DALP queues the delivery. When the value is false, a normal 2xx response completes the delivery.
Related references:
idxr_smart_wallet
Payload schema
The schema and examples describe the full payload. Thin delivery omits personal data fields. Use the payload-shape guidance to choose the endpoint configuration.
{
"type": "object",
"properties": {
"chainId": {
"type": "integer",
"exclusiveMinimum": 0
},
"accountAddress": {
"type": "string",
"minLength": 42,
"maxLength": 42,
"pattern": "^0x[a-fA-F0-9]{40}$",
"description": "A valid Ethereum address (42 characters, starting with 0x)",
"examples": ["0x71C7656EC7ab88b098defB751B7401B5f6d8976F"]
},
"validatorAddress": {
"type": "string",
"minLength": 42,
"maxLength": 42,
"pattern": "^0x[a-fA-F0-9]{40}$",
"description": "A valid Ethereum address (42 characters, starting with 0x)",
"examples": ["0x71C7656EC7ab88b098defB751B7401B5f6d8976F"]
},
"change": {
"type": "string",
"enum": ["signer-added", "signer-removed", "signer-weight-changed", "threshold-changed", "owner-changed"]
},
"signerHash": {
"anyOf": [
{
"type": "string",
"pattern": "^0x[a-fA-F0-9]{64}$"
},
{
"type": "null"
}
]
},
"previousSignerHash": {
"anyOf": [
{
"type": "string",
"pattern": "^0x[a-fA-F0-9]{64}$"
},
{
"type": "null"
}
]
},
"weight": {
"anyOf": [
{
"type": "string",
"pattern": "^(?:0|[1-9]\\d{0,77})$"
},
{
"type": "null"
}
]
},
"threshold": {
"anyOf": [
{
"type": "string",
"pattern": "^(?:0|[1-9]\\d{0,77})$"
},
{
"type": "null"
}
]
},
"previousThreshold": {
"anyOf": [
{
"type": "string",
"pattern": "^(?:0|[1-9]\\d{0,77})$"
},
{
"type": "null"
}
]
},
"occurredAt": {
"type": "string"
},
"transactionHash": {
"type": "string",
"pattern": "^0x[a-fA-F0-9]{64}$"
},
"blockNumber": {
"type": "integer",
"minimum": 0
},
"logIndex": {
"type": "integer",
"minimum": 0
}
},
"required": [
"chainId",
"accountAddress",
"validatorAddress",
"change",
"signerHash",
"previousSignerHash",
"weight",
"threshold",
"previousThreshold",
"occurredAt",
"transactionHash",
"blockNumber",
"logIndex"
],
"additionalProperties": true
}TypeScript SDK example
Use the request's raw body and headers with your endpoint's webhook secret. This handler illustrates verification and event selection. Before writing downstream state, deduplicate deliveries by evt_id and recognize replayed outcomes by their domain identifiers.
const result = await verifyWebhook({
rawBody,
headers,
secret: process.env.DALP_WEBHOOK_SECRET!,
});
if (!result.ok) {
throw new Error(`Webhook verification failed: ${result.code}`);
}
if (result.event.type === "custody.signer-changed.final") {
const event: Webhook.Event<"custody.signer-changed.final"> = result.event;
console.log(event.payload);
}HTTP delivery example
This illustrative request shows the delivery shape. Its timestamp and signature are placeholders; a verifier rejects them. Use a signed platform delivery to verify your endpoint.
curl -X POST https://consumer.example.com/dalp/webhooks \
-H "content-type: application/json" \
-H "webhook-id: evt_b7edbf1253888db843a0ed3d05f8e34d" \
-H "webhook-timestamp: 1778112000" \
-H "webhook-signature: v1,docs-example-signature" \
--data '{"evt_id":"evt_b7edbf1253888db843a0ed3d05f8e34d","source_id":"example:custody.signer-changed.final@1:0","lifecycle_state":"final","payload":{"chainId":537001,"accountAddress":"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","validatorAddress":"0x9999999999999999999999999999999999999999","change":"signer-added","signerHash":"0x3333333333333333333333333333333333333333333333333333333333333333","previousSignerHash":null,"weight":null,"threshold":null,"previousThreshold":null,"occurredAt":"2026-09-28T09:15:00.000Z","transactionHash":"0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee","blockNumber":18445201,"logIndex":3},"related":{"idxr_smart_wallet":"idxr_smart_wallet_example"},"type":"custody.signer-changed.final","version":1,"request":{"idempotency_key":"idem_01JZP7R5W8M9N0P1Q2R3S4T5"}}'Version and manifest
This page documents version 1 of custody.signer-changed.final. This event type is not deprecated. The DALP events manifest contains the machine-readable AsyncAPI entry.
custody.account-created.final
A System's account factory created a smart account; sent once the chain finality watermark reaches its source block. Carries the account, its first owner, the factory and the identity bound at creation, if any.
funding.requirement.expired
A funding requirement expired unpaid: its deadline passed before the wallet held the amount asked, and the executions parked on it are released to fail after this event.