The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
You can trade Bitcoin peer to peer without first giving an exchange control of your coins by locking payment behind a rule: multiple signatures, a Lightning preimage, or a smart-contract condition. The rule governs when funds can move, but it does not eliminate every trust or timing risk. A mediator may still decide which signatures to provide, a coordinator may control when a Lightning payment settles, and an oracle may need to attest that an off-chain event happened.
The practical question is not just whether an escrow is called “non-custodial.” It is who can satisfy its release condition, what happens if the trade stalls or goes wrong, and how long recovery takes.
As an Amazon Associate I earn from qualifying purchases.
What does non-custodial P2P escrow actually do?
Escrow temporarily makes funds unavailable for ordinary spending and ties their release to a specified condition. In a peer-to-peer trade, that condition is meant to connect the crypto payment to an event outside the payment system—for example, the seller confirming that fiat has arrived. The escrow mechanism can enforce the crypto-side rule; it cannot by itself prove that the off-chain event occurred.
“Non-custodial” describes control under the mechanism, not a guarantee that no other person or service matters. A coordinator might match traders without having unilateral power to spend funds, yet still influence a dispute outcome or the timing of a Lightning settlement. A mediator may hold one key in a multisig arrangement. A smart contract may depend on an oracle to report an external event. To assess control, trace who can sign, reveal a required secret, provide a fulfillment, or trigger a timeout—not just who operates the interface.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
The three designs below enforce different kinds of rules. Bitcoin multisig puts a spending rule on-chain; a Lightning HTLC or hold invoice makes a payment conditional while it is in flight; and a smart-contract condition locks ledger funds until a matching fulfillment is presented.
How does Bitcoin multisig escrow work?
Multisig requires more than one key to authorize a spend. In a 2-of-3 arrangement, the buyer, seller and mediator each have a key, and any two must sign to spend the escrowed output. That splits authority: no single participant can release the funds alone, but a pair can complete the transaction.
What happens during a normal trade?
- The buyer funds the escrow. The Bitcoin transaction creates an on-chain output controlled by the multisig spending rule. The funds are not available under the trade’s normal spending path until the required signatures are provided.
- The trade’s off-chain event occurs. For example, the buyer sends fiat and the seller checks whether it arrived. The Bitcoin script does not independently verify that bank or cash transfer.
- Two keyholders authorize release. If the buyer and seller agree, they can sign a payout. If they disagree, the mediator can join one party to form a signing pair, depending on the arrangement and the dispute decision.
The mediator is therefore not automatically a custodian: a single mediator key in a 2-of-3 scheme cannot spend by itself. But the mediator is still an important trust and dispute point. If the mediator signs with the buyer, for instance, the seller’s signature is not needed for that spend. The key split limits unilateral control; it does not make the human decision about a disputed trade disappear.
How does timeout recovery work?
A script can include a delayed recovery branch. BIP112 describes using CHECKSEQUENCEVERIFY (CSV) so that two parties can spend immediately while one party can recover after a relative delay. In this example, the delay begins only after the funding payment confirms. The timeout is therefore not simply a countdown from the moment someone clicks “create trade.”
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
This design offers an explicit fallback if cooperation fails, but recovery is still an on-chain transaction. The funding transaction must confirm before the relative delay can run, and the recovery spend must also be confirmed. Confirmation and fee conditions affect when the funds are actually usable. A timeout branch is a rule for becoming eligible to spend, not a promise of an instant refund at the moment the timer appears to end.
How do Lightning HTLCs and hold invoices lock a payment?
A Lightning HTLC makes a payment conditional on a secret preimage. The receiver can settle by revealing the matching preimage; if it is not revealed before the timelock, the sender can recover. In a routed payment, each hop uses a shorter expiry than the next, so the route has time to resolve without every hop sharing the same deadline.
A normal Lightning payment settles when it reaches the recipient. A hold, or HODL, invoice changes that behavior: the receiver keeps the payment unresolved after the sender has committed it. The receiver can release the preimage to settle the invoice, or the payment can expire or be cancelled so the sender can regain control. RoboSats describes hold invoices as locking wallet funds and unlocking them according to the invoice status determined by the receiver.
What does the escrow sequence look like?
- The seller or escrow service creates a hold invoice. The invoice encodes a Lightning payment that will remain unresolved rather than settling as soon as it arrives.
- The buyer pays the invoice. The payment is committed to the Lightning process, but the recipient has not yet settled it by revealing the preimage. It is held in-flight rather than behaving like a completed payment.
- The off-chain trade proceeds. The parties exchange the agreed fiat or other consideration. The Lightning mechanism does not itself inspect that exchange.
- The recipient releases the preimage or lets the payment cancel. A preimage settles the payment; cancellation or expiry unlocks the sender’s funds. A dispute process may determine which outcome the service initiates.
RoboSats documents a default escrow timer of three hours, configurable from one to ten hours. It says escrow is released after the seller confirms receipt of fiat, and that disputes can release sats to the winner. Those are RoboSats-specific settings and behavior, not a universal Lightning standard. Mostro describes a different process: a hold invoice can settle after the seller reports fiat receipt, or cancel and unlock on cooperative cancellation, administrator cancellation, or expiry. Its documentation gives an approximate two-day validity period for active mainnet hold invoices; that figure is deployment-specific and may change.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
What can still go wrong with a hold invoice?
The preimage controls settlement, but the surrounding process controls who is expected to release it and what happens during a dispute. If a service’s coordinator can decide when to settle or cancel, the buyer and seller depend on that process even though the coordinator does not simply hold a conventional balance in an exchange account. Wallet support also matters: a wallet must handle the invoice’s unresolved state appropriately. Do not assume that “payment sent” means “recipient paid” when the invoice is still pending.
Hold invoices are also used for purposes other than P2P trades. Amboss Magma documents using a HODL invoice to bind payment to a channel opening: if the seller never opens the channel or opens the wrong one, the invoice is automatically refunded; successful confirmation settles it. This illustrates the general pattern: the invoice’s secret can connect payment release to a specified action, but the protocol or service must still define how that action is checked.
How does smart-contract conditional escrow work?
A smart-contract escrow locks funds behind a condition, then releases them when a valid fulfillment satisfies that condition. On the XRP Ledger (XRPL), an EscrowCreate transaction locks funds; an EscrowFinish transaction supplies the matching fulfillment to release them. The condition is the lock and the fulfillment is its key.
A condition can be tied to information about an event outside the ledger. An oracle may verify that event and provide the fulfillment needed to finish the escrow. The ledger enforces the final transfer once the matching fulfillment is supplied, but it does not thereby prove that the oracle’s real-world report was correct. The oracle introduces both a trust dependency—whether its attestation is reliable—and an availability dependency—whether it is able to provide the fulfillment when needed.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Mercury Layer’s Lightning Latch applies the preimage concept to a statecoin transfer. The Lightning invoice settles only after both sides complete the required unlock operations. If those operations are not completed, a timeout cancels the invoice and the sender can recover control. This is not the same settlement layer as an XRPL escrow: it combines a Lightning invoice with a protocol-specific statecoin transfer, so its behavior depends on that implementation’s rules.
What is the difference between multisig, hold invoices and smart contracts?
All three approaches lock funds behind a spending condition, but they differ in what enforces the condition, who participates in release, and what the fallback looks like.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →| Design | Release trigger | Settlement layer | Failure path | Key dependency |
|---|---|---|---|---|
| Bitcoin multisig escrow | Required signatures; may include a delayed timeout branch | Bitcoin on-chain transaction | Timeout recovery, subject to script rules and transaction confirmation | Keyholders, including any mediator needed to resolve a dispute |
| Lightning HTLC or hold invoice | Preimage release, or expiry/cancellation | Lightning channel HTLC | Invoice cancellation or expiry can unlock the sender’s funds | Wallet support and the receiver or coordinator’s settlement behavior |
| Smart-contract condition | Fulfillment that satisfies the condition | Ledger transaction or protocol state | Condition remains unmet; a protocol or oracle timeout may apply | Contract implementation and, where used, an oracle’s attestation and availability |
The practical trade-off is not “trustless versus trusted.” Multisig makes key authority explicit, but requires an on-chain funding and payout path and can be fee- and confirmation-sensitive. A hold invoice can keep a Lightning payment reversible while it is unresolved, but the wallet and the service’s release process matter. A smart-contract condition can express a ledger-enforced rule, but an external event may still depend on an oracle or implementation assumptions.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How should you evaluate an escrow before trading?
Read the release and recovery rules as carefully as the advertised security model. The same label—“escrow,” “non-custodial” or “hold”—can conceal different authorities, timers and failure procedures.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
- Identify the release authority. For multisig, establish which pairs can sign and what the mediator’s role is. For a hold invoice, identify who controls settlement or cancellation and whether a dispute process can trigger either. For a smart contract, identify who supplies the fulfillment and whether an oracle is involved.
- Trace the refund path. Ask what precisely allows recovery: a CSV delay after a confirmed on-chain funding transaction, an HTLC or invoice expiry, a cancellation process, or a protocol timeout. Find out whether recovery requires another person’s cooperation.
- Check the relevant clock. Distinguish a service’s configured escrow timer from an underlying protocol timelock. For on-chain CSV, the delay starts after funding confirms in the BIP112 example. For service-specific hold invoices, read the current terms rather than assuming another platform uses the same duration.
- Account for settlement mechanics. On-chain funding and payout require transactions and confirmation; Lightning payments rely on channel HTLCs and invoice behavior; a smart-contract escrow needs a valid transaction satisfying its ledger rules. None of these descriptions alone establishes an exact completion or recovery time.
- Separate matching from control. An order-matching coordinator is not necessarily able to move funds. Determine whether it can sign, reveal a preimage, supply a fulfillment, or control a payout before deciding how much trust the trade requires.
- Understand the dispute procedure before funding. Know what evidence the service accepts, who decides the outcome, and what release or cancellation action follows. A technically valid escrow can still leave the parties waiting on a human decision.
A useful way to compare two offers is to write down, in plain language, the answer to three questions: “Who can release the payment?”, “What happens if no one cooperates?”, and “What must happen before I can spend recovered funds?” If those answers are vague, a “non-custodial” label is not enough to establish that the trade’s failure path is suitable for you.
What does “non-custodial” not guarantee?
It does not mean that funds cannot be delayed, that a refund is immediate, or that every dispute is resolved automatically. A script can enforce signatures and a delay; a hold invoice can enforce preimage-or-expiry behavior; a ledger can enforce a condition and fulfillment. None can independently decide whether a bank transfer really arrived unless the design connects that fact to a human decision, oracle, or other protocol rule.
Recommended Free Tools
It also does not mean that the service has no meaningful role. The decisive question is what the service can do under the actual rules. If it cannot move funds alone but can provide one of the signatures needed for release, its role matters. If it cannot settle a payment alone but controls the preimage release or dispute decision, its role matters. Name the authority precisely instead of treating every coordinator as a custodian—or assuming that the label makes the coordinator irrelevant.
Frequently Asked Questions
Why does my Lightning escrow payment say pending or in flight?
A hold invoice can remain unresolved after the sender commits the payment, so a wallet may show it as queued, frozen, in flight or pending rather than completed. Check the invoice state and the escrow service’s stated release or cancellation action before treating the trade as settled.
Can I use any Lightning wallet for a P2P hold-invoice trade?
Not necessarily. RoboSats notes that direct buyer-to-seller hold-invoice escrow has limited support in conventional wallets, so compatibility depends on the wallet and the service’s flow. Confirm support before committing a payment.
Does an escrow coordinator automatically have custody of my coins?
No: matching orders does not by itself establish the ability to spend or settle funds. The meaningful test is whether the coordinator can provide a required signature, release a preimage, decide a payout, or supply a fulfillment under the specific escrow rules.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
