Recover a failed deposit with an owner signature

curl --request POST \
  --url https://v1.orchestrator.rhinestone.dev/deposit-processor/deposits/recover \
  --header 'Content-Type: application/json' \
  --data '
{
  "depositId": "2551",
  "destination": "0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91",
  "signature": "0x1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111"
}
'

import requests

url = "https://v1.orchestrator.rhinestone.dev/deposit-processor/deposits/recover"

payload = {
    "depositId": "2551",
    "destination": "0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91",
    "signature": "0x1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111"
}
headers = {"Content-Type": "application/json"}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: JSON.stringify({
    depositId: '2551',
    destination: '0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91',
    signature: '0x1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111'
  })
};

fetch('https://v1.orchestrator.rhinestone.dev/deposit-processor/deposits/recover', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://v1.orchestrator.rhinestone.dev/deposit-processor/deposits/recover",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'depositId' => '2551',
    'destination' => '0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91',
    'signature' => '0x1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://v1.orchestrator.rhinestone.dev/deposit-processor/deposits/recover"

	payload := strings.NewReader("{\n  \"depositId\": \"2551\",\n  \"destination\": \"0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91\",\n  \"signature\": \"0x1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://v1.orchestrator.rhinestone.dev/deposit-processor/deposits/recover")
  .header("Content-Type", "application/json")
  .body("{\n  \"depositId\": \"2551\",\n  \"destination\": \"0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91\",\n  \"signature\": \"0x1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://v1.orchestrator.rhinestone.dev/deposit-processor/deposits/recover")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n  \"depositId\": \"2551\",\n  \"destination\": \"0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91\",\n  \"signature\": \"0x1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\"\n}"

response = http.request(request)
puts response.read_body

{
  "message": "<string>",
  "transactionHash": "<string>",
  "amount": "<string>"
}

{
  "error": "<string>",
  "code": "DEPOSIT_NOT_RECOVERABLE"
}

{
  "error": "<string>",
  "details": [
    {
      "message": "<string>",
      "path": [
        "<string>"
      ],
      "code": "<string>"
    }
  ]
}

{
  "error": "<string>",
  "details": [
    {
      "message": "<string>",
      "path": [
        "<string>"
      ],
      "code": "<string>"
    }
  ]
}

{
  "error": "<string>",
  "code": "DEPOSIT_NOT_RECOVERABLE"
}

{
  "error": "<string>",
  "code": "DEPOSIT_NOT_RECOVERABLE"
}

{
  "error": "<string>",
  "code": "DEPOSIT_NOT_RECOVERABLE"
}

{
  "error": "<string>",
  "code": "DEPOSIT_NOT_RECOVERABLE"
}

Processing

Recover a failed deposit with an owner signature

Return a failed or rejected deposit’s source-chain funds to a destination the user signed for, authorized by the deposit RECIPIENT’s EIP-712 signature rather than by the API key. The server reconstructs the RecoverDeposit typed data from the stored deposit row and verifies the signature against that row’s recipient — on the deposit’s TARGET chain, where the recipient wallet lives — accepting a raw ECDSA signature (embedded EOA), an ERC-1271 signature (deployed smart account) or an ERC-6492 wrapper (counterfactual account). It then runs the same claim + transfer path as the refund endpoint. Because the signature is the authorization boundary, this route is safe to expose to a browser and a read-scoped x-api-key is sufficient. EVM on both source and target chains.

POST

deposits

recover

curl --request POST \
  --url https://v1.orchestrator.rhinestone.dev/deposit-processor/deposits/recover \
  --header 'Content-Type: application/json' \
  --data '
{
  "depositId": "2551",
  "destination": "0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91",
  "signature": "0x1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111"
}
'

import requests

url = "https://v1.orchestrator.rhinestone.dev/deposit-processor/deposits/recover"

payload = {
    "depositId": "2551",
    "destination": "0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91",
    "signature": "0x1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111"
}
headers = {"Content-Type": "application/json"}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: JSON.stringify({
    depositId: '2551',
    destination: '0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91',
    signature: '0x1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111'
  })
};

fetch('https://v1.orchestrator.rhinestone.dev/deposit-processor/deposits/recover', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://v1.orchestrator.rhinestone.dev/deposit-processor/deposits/recover",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'depositId' => '2551',
    'destination' => '0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91',
    'signature' => '0x1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://v1.orchestrator.rhinestone.dev/deposit-processor/deposits/recover"

	payload := strings.NewReader("{\n  \"depositId\": \"2551\",\n  \"destination\": \"0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91\",\n  \"signature\": \"0x1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://v1.orchestrator.rhinestone.dev/deposit-processor/deposits/recover")
  .header("Content-Type", "application/json")
  .body("{\n  \"depositId\": \"2551\",\n  \"destination\": \"0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91\",\n  \"signature\": \"0x1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://v1.orchestrator.rhinestone.dev/deposit-processor/deposits/recover")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n  \"depositId\": \"2551\",\n  \"destination\": \"0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91\",\n  \"signature\": \"0x1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\"\n}"

response = http.request(request)
puts response.read_body

{
  "message": "<string>",
  "transactionHash": "<string>",
  "amount": "<string>"
}

{
  "error": "<string>",
  "code": "DEPOSIT_NOT_RECOVERABLE"
}

{
  "error": "<string>",
  "details": [
    {
      "message": "<string>",
      "path": [
        "<string>"
      ],
      "code": "<string>"
    }
  ]
}

{
  "error": "<string>",
  "details": [
    {
      "message": "<string>",
      "path": [
        "<string>"
      ],
      "code": "<string>"
    }
  ]
}

{
  "error": "<string>",
  "code": "DEPOSIT_NOT_RECOVERABLE"
}

{
  "error": "<string>",
  "code": "DEPOSIT_NOT_RECOVERABLE"
}

{
  "error": "<string>",
  "code": "DEPOSIT_NOT_RECOVERABLE"
}

{
  "error": "<string>",
  "code": "DEPOSIT_NOT_RECOVERABLE"
}

Headers

x-api-key

string

API key for authentication (omit when sending Authorization)

Example:

"your-api-key"

authorization

string

Bearer platform token (e.g. forwarded by user-service). Takes precedence over x-api-key when both are present.

Example:

"Bearer eyJhbGciOi..."

Body

application/json

depositId

string

required

Deposit id, as returned by GET /deposits. Identifies the row directly: one transaction can produce several deposits, so a {chain, txHash, account, token} tuple does not.

Pattern: ^\d+$

Example:

"2551"

destination

string

required

Address to receive the recovered tokens on the deposit's source chain. Covered by the signature, so the caller cannot redirect an authorized recovery.

Pattern: ^0x[a-fA-F0-9]{40}$

Example:

"0x742d35Cc6634C0532925a3b844Bc9e7595f5bE91"

signature

string

required

Signature by the deposit recipient over the RecoverDeposit typed data, in whatever form that account verifies: raw ECDSA (EOA), ERC-1271 (deployed smart account), or ERC-6492-wrapped (undeployed).

Required string length: 132 - 8194

Pattern: ^0x([a-fA-F0-9]{2})+$

Example:

"0x1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111"

Response

Deposit recovered; funds returned on the source chain

message

string

required

transactionHash

string

required

amount

string

required

Get started

Intents

Deposits

Recover a failed deposit with an owner signature

Headers

Body

Response