What is already running vs what your action does
The MPC Network node operators are already up. The key is already split. Nobody boots a signer because you asked for an address.
A relayer carries proofs and broadcasts signed transactions. MPC Network node operators are the group that can sign. Do not merge them: a missing relayer is replaceable; a missing operator group cannot sign a withdraw.
On the way in, the relayer shows the bridge a proof of Bitcoin history (transaction inclusion). On the way out, the relayer’s job is closer to what you may already assume: take a signed Bitcoin transaction and put it on chain.
1. Your bitcoin gets an address of its own
You never send bitcoin to one shared bridge wallet. You tell the bridge who you are on NEAR, plus anything you want done with the tokens when they arrive, and it turns that request into an address that belongs to that request and nothing else. The address is not looked up or handed out from a list. It is calculated, which means anyone can recalculate it and confirm those coins were always meant for you. Ask twice with the same details, get the same address twice. Change one character of the request and you get a completely different address. Nothing secret is involved in producing it. The master key ingredient is a public key. The private half does not exist in one piece anywhere (see section 4). Getting this address does not call the operators and does not create a signature.2. Why there is no vault
Most bridges work like a bank branch: you deposit into an address, the bridge sweeps it into one large vault wallet, and withdrawals are paid out of that vault. Omni Bridge skips that middle step on Bitcoin. Your coins stay exactly where you sent them until someone withdraws. When someone withdraws, the bridge builds a Bitcoin payment that spends a handful of deposit addresses directly as its funding. Each of those addresses is signed for separately, with its own key. A withdrawal drawing on three deposit addresses needs three independent signatures, not one master signature over everything.What that buys you
- No honeypot. There is no single address that ever holds everyone’s coins, so there is no single address worth attacking. An attacker who somehow compromised one deposit address would reach exactly one deposit.
- No extra hop. A sweep is a real Bitcoin transaction: it costs a fee, takes confirmations, and creates a window where your coins are in motion between two places the bridge controls. Skipping it removes all three.
- Nothing to drain. Because each address needs its own signature from the MPC Network node operators, there is no single approval that moves the whole pot.
- Auditable by anyone. Since deposit addresses are calculated rather than assigned, you can verify independently which deposit any coin belongs to. You do not have to take the bridge’s word for it.
The one exception: change
Bitcoin payments cannot spend part of an address. They spend it whole and send the remainder back as change, the way handing over a note gets you coins back. Withdrawal amounts rarely match deposit amounts exactly, so leftovers do accumulate at a single bridge-controlled change address (itself calculated from the bridge’s own account name, by the same recipe as section 1). Later withdrawals reuse that change as funding. So the bridge does end up with a working balance in one place, but it arrives as change from spending, never as a sweep of your deposit. Your coins are never moved just to be stored somewhere else, and the change address is protected by exactly the same signing rules as everything else.3. One direction is proved. The other is signed.
Bitcoin coming in and bitcoin going out are not mirror images, and this is the single most important thing to know about the bridge. Coming in, the bridge is shown a Merkle proof from Bitcoin’s own history and checks it. Either the proof holds up or nothing happens. There is no one to take your word for it, and no one whose word you have to take. Anyone can submit that proof. In practice a relayer does that for you after you send BTC — they are proving a transaction was included in a block, not executing a pre-signed Bitcoin payment. You only have to care if nBTC never appears — then the coins are still at your derived address, and you can request a refund. If one relayer disappears, another can submit the same proof. Going out, someone has to actually sign a Bitcoin payment on your behalf. That is a decision, not a check, and it is where trust enters the picture. That is the only step that needs the MPC Network node operators. After they sign, a relayer broadcasts that transaction on Bitcoin.4. The key does not exist in one piece
There is no server with the bridge’s private key on it, and no person who could be persuaded to hand it over. The key is split across independent MPC Network node operators, and each one holds a fragment that is useless on its own. The diagram below uses eight nodes as a picture of a group — not a promise that there are exactly eight. This signing is NEAR Chain Signatures: a threshold scheme where fragments combine into one ordinary signature. Bitcoin cannot tell it apart from a signature made by a lone wallet. Each operator computes its own piece of the answer and the pieces combine. No operator ever sees the whole key, not even while signing. Take away any single operator and the signature still forms. Take away the group and no one, including the bridge’s own developers, can move the coins. This round of signing happens per withdrawal, not when you ask for a deposit address, and not when nBTC is minted.In short: what you are actually trusting
And in both directions: your coins sit at an address derived from your own deposit request, never pooled into a vault, until the moment they are spent.