Dispute & Recovery Flows for CAT Transfers

7 min read

Chia vault recovery system with dual-key architecture protecting CAT tokens

Key Takeaways:

  • Chia Cloud Wallet vaults protect CATs with dual-key recovery systems featuring spend keys and 24-word recovery keys
  • Clawback mechanisms let you reverse mistakenly sent CAT transactions during customizable time windows before finality
  • CAT1 tokens lost after block 2,311,760 are unrecoverable, but pre-snapshot balances can be claimed through issuer airdrops
  • Missing CATs often appear after updating your wallet’s derivation index to scan additional addresses
  • Recovery flows prioritize user control over immediate speed, giving you time to respond before irreversible changes occur

Chia’s vault-based custody system treats CAT recovery as part of a unified asset protection framework1. Unlike single-key wallets where lost keys mean permanent asset loss, Chia vaults use multiple cryptographic keys and time-delayed recovery mechanisms to protect your CAT holdings alongside XCH, NFTs, and other on-chain assets2.

Understanding Chia Vault Recovery for CATs

The Chia Cloud Wallet introduced vault-based custody in June 2025 as its primary security model1. Rather than storing CATs with a single vulnerable key, vaults separate custody from coins and add recovery options that work identically across all asset types2.

How Vault Keys Protect Your CATs

Each vault uses two distinct keys serving different purposes3. The spend key authorizes transactions and manages daily operations through either a passkey or the Chia Signer app’s hardware key stored in your device’s Secure Enclave3. The 24-word recovery key exists solely to restore vault access if your spend key is lost, stolen, or compromised3.

This two-key architecture means CAT holders can recover from key loss scenarios that would permanently destroy assets in traditional wallets2. The recovery key cannot spend funds directly—it only initiates a recovery process that updates the vault’s custody configuration4.

The Recovery Clawback Delay

When you create a vault, you set a recovery clawback period—typically 48 to 72 hours on mainnet3. This timer protects against attackers who steal your recovery key but not your spend key3. The Chia watchtower service monitors the blockchain for recovery attempts and emails you immediately when someone initiates recovery on your vault3.

During the clawback window, you can use your spend key to cancel the recovery and move all assets to a freshly created vault with new keys4. The attacker must wait out the full delay, giving you substantial time to protect your CATs before any custody changes take effect4.

CAT Recovery Decision Matrix

Recovery ScenarioRequired ComponentsTime FrameSuccess Requirements
Lost Spend Key (Have Recovery Key)24-word recovery phrase, vault clawback delay48-72 hours typicalWait for clawback period, set new keys
Mistakenly Sent CATs (Clawback Enabled)Sender wallet access, transaction before timeout10 mins – 2 weeksClaw back before recipient claims or timer expires
Missing CATs After SyncWallet access, correct derivation indexImmediateUpdate derivation index to scan more addresses
CAT1 Legacy TokensPre-July 26, 2022 balance, issuer cooperationVaries by issuerIssuer must have performed CAT2 airdrop

Recovering CATs from Mistaken Transfers

Chia’s clawback primitive addresses a problem every blockchain faces—the finality of mistaken transactions5. Traditional blockchains make every transfer immediately permanent, but Chia lets senders add reversibility windows to XCH and CAT transfers6.

How Clawback Transactions Work

When you send CATs with clawback enabled, the tokens don’t go directly to the recipient’s wallet5. Instead, they enter an intermediate coin with time-lock rules: before the timeout expires, only the sender can spend the coin, and after the timeout, the recipient can claim it5. The blockchain never reverses history—clawback uses coin-set mechanics where the intermediary coin gets spent back to the sender or forward to the recipient5.

The default clawback period is two weeks, though you can customize this to any duration from minutes to months7. Recipients see pending clawback transactions in their wallets and can enable auto-claiming with preset fees to immediately claim incoming clawbacks once timeouts expire6.

When Clawback Saves Your CATs

Clawback protection applies to several common error scenarios. Typos in recipient addresses get caught if you notice within the clawback window and reverse the transaction before the recipient can claim5. Wrong token amounts can be clawed back and corrected with a new transaction. Social engineering attacks where scammers pressure you into sending CATs can be reversed once you realize the fraud5.

However, clawback has limitations. Once a recipient claims the CATs after the timeout expires, the transfer becomes final and permanent5. Savvy recipients monitoring the blockchain can claim immediately when timeouts expire, leaving you no additional recovery window5.

Recovering CAT1 Legacy Tokens

The CAT1 standard reached end-of-life on July 26, 2022 at block height 2,311,760 due to a critical security vulnerability that allowed unlimited token minting8. Trail of Bits discovered the exploit during a security audit, prompting Chia Network to sunset the entire CAT1 standard and upgrade to CAT28.

The CAT1 Snapshot and Airdrop Process

Chia Network took a complete blockchain snapshot at block 2,311,760 recording every CAT1 balance and the puzzle hash where tokens were held9. The snapshot became a permanent historical record that token issuers could use to airdrop equivalent CAT2 tokens to the same addresses9.

Recovery of CAT1 tokens depends entirely on individual token issuers honoring the snapshot and completing CAT2 airdrops9. Chia Network provided tools including the CAT Admin Tool and CAT-addresses snapshot generator, but each project maintained control over whether and when to reissue their tokens10,11.

What Happened to Post-Snapshot CAT1 Transactions

Any CAT1 transactions executed after block 2,311,760 are permanently unrecoverable8. The snapshot froze balances at that specific moment, and subsequent transactions involving CAT1 tokens carry no weight in the CAT2 ecosystem9. This includes offers that were accepted after the cutoff, trades completed post-snapshot, and any CAT1 transfers that occurred when people didn’t realize the standard had been deprecated8.

If you held CAT1 tokens during the transition, your recovery path requires verifying your snapshot balance at cat1.chia.net using your public key, then contacting the specific token’s issuer through their website, Discord, or GitHub to determine if they completed a CAT2 airdrop9.

Wallet Synchronization and Derivation Index Recovery

Sometimes CATs aren’t actually lost—they’re just invisible to your wallet because it hasn’t scanned enough addresses to find them9. Chia wallets use hierarchical deterministic key generation where one seed phrase mathematically derives an infinite sequence of addresses12.

Understanding the Derivation Index

The derivation index tells your wallet how many addresses to scan when searching the blockchain for coins9. If your CATs were sent to an address beyond your current index, the wallet simply won’t see them even though they exist on-chain9.

This commonly occurs when CAT2 airdrops land on addresses with higher derivation indices than your wallet expects9. The cat1.chia.net snapshot website displays both your CAT1 balance and the derivation index where those tokens were held9. If your wallet’s derivation index is lower than the snapshot shows, updating the index immediately reveals your missing CATs9.

Fixing Derivation Index Issues

In the Chia reference wallet, navigate to Settings, then Derivation Index, and enter the number from the cat1.chia.net website9. The wallet rescans the blockchain looking for coins at the extended address range12. This process can take several minutes depending on blockchain height and your derivation distance12.

You can also update the derivation index via CLI using the update_derivation_index RPC command12. The index only moves forward—you cannot decrease it because the wallet already knows about addresses below the current index12.

Comparing CAT Recovery Across Wallet Types

Wallet TypeRecovery MechanismKey ManagementCAT Support
Chia Cloud Wallet VaultDual-key with time-delayed recovery, watchtower alertsSpend key (passkey/hardware) + 24-word recovery keyFull CAT2, clawback, automatic sync
Chia Reference Wallet24-word mnemonic seed phrase onlySingle BLS key from seed, manual derivation indexCAT2 via manual Asset ID import
Sage Wallet12/24-word seed phrase restorationSingle key, local storageCAT2 support with manual addition
Legacy CAT1 WalletsNo recovery—tokens deprecatedVaries by implementationNone (CAT1 sunset July 2022)

Advanced CAT Recovery Tools and Scenarios

Beyond standard wallet recovery flows, developers and token issuers have access to specialized tools for handling edge cases and bulk operations10,11.

CAT Admin Tool for Token Issuers

The CAT Admin Tool on GitHub provides functionality for token creators to perform advanced recovery operations10. The secure_the_bag command creates efficient coin trees for large-scale CAT2 airdrops, while unwind_the_bag distributes tokens to puzzle hashes from CSV snapshots11. These tools were essential for the CAT1-to-CAT2 migration where projects like Stably USD and Spacebucks needed to airdrop tokens to thousands of addresses11.

Database-Level Recovery Methods

In severe cases where wallet databases become corrupted, you can force a complete resync by shutting down the Chia wallet and deleting the wallet database files at ~/.chia/mainnet/wallet/db9. The wallet rebuilds its database from the blockchain, recalculating all CAT balances from scratch9. This nuclear option resolves issues like negative balances or missing transactions that persist despite normal recovery attempts9.

Multisig Vault Recovery Coming Soon

The upcoming Chia Cloud Wallet Pro tier will introduce multisignature vaults requiring multiple parties to approve both spends and recoveries1. These M-of-N configurations provide additional protection for high-value CAT holdings by distributing custody across multiple keyholders4. A 3-of-5 multisig vault means an attacker would need to compromise three separate keys to execute unauthorized CAT transfers4.

Expert Perspectives on CAT Recovery Design

Brandon Haggstrom, a Software Engineer at Chia Network and ecosystem developer, explained the vault recovery philosophy: “With vaults, you can create a special ‘recovery key’ that can be used to change the custody configuration of the vault if all else fails. However, you don’t want to give full control over the vault to this recovery key, especially if you’re using a multisig. To solve this, we use what’s known as ‘delayed recovery’. When you initiate a recovery of a vault, you can’t authorize spends for any of the coins. A time lock period for recovery (which is configurable beforehand) is kicked off”4.

This design principle—prioritizing security over speed—distinguishes Chia’s approach from traditional crypto wallets where immediate access correlates with immediate vulnerability4.

Conclusion

Recovering lost or mistakenly transferred CATs on Chia requires understanding which recovery mechanism applies to your specific situation. Vault-based systems offer the strongest protection through dual-key architecture and time-delayed recovery, while clawback primitives provide safety nets for transaction errors. The CAT1 migration taught the ecosystem valuable lessons about snapshot preservation and issuer cooperation in recovery scenarios. By maintaining proper key backups, understanding your wallet’s derivation index, and leveraging Chia’s unique custody primitives, you maintain control over your CAT assets even when things go wrong.

Chia CAT Recovery FAQs

What is chia cat recovery in Cloud Wallet vaults?

Chia CAT recovery in Cloud Wallet vaults uses a 24-word recovery key to restore access to lost CATs after a configurable time delay, typically 48-72 hours, protecting against both key loss and theft3.

Can I recover CATs sent to the wrong address?

You can recover wrongly sent CATs if the transaction used Chia’s clawback feature and you initiate the clawback before the timeout expires and before the recipient claims the tokens5.

How do I find missing CATs after wallet restoration?

Missing CATs often appear after increasing your wallet’s derivation index in Settings, which forces the wallet to scan additional addresses where CAT2 airdrops may have been sent9.

Are CAT1 tokens from 2022 still recoverable?

CAT1 balances from before block 2,311,760 are recoverable only if the token issuer performed a CAT2 airdrop using the snapshot; any CAT1 transactions after that block are permanently unrecoverable8.

What happens during the chia cat recovery clawback period?

During the Chia CAT recovery clawback period, your spend key can cancel unauthorized recovery attempts and move all CATs to a new vault with fresh keys, preventing attackers from taking control4.

Chia CAT Recovery Citations

  1. Chia Cloud Wallet: Now in General Release – Chia Network
  2. Chia Vaults: A Secure and Flexible Way to Manage Your Digital Assets – Chia Network
  3. Cloud Wallet FAQ – Chia Documentation
  4. Advanced Custody on Chia with Vaults – Brandon Haggstrom
  5. Clawback User Guide – Chia Documentation
  6. Version 1.8.2 Release – Chia Network
  7. Chia Clawback Primitive – GitHub
  8. Upgrading the CAT Standard – Chia Network
  9. CAT2 Intro and FAQ – Chia Documentation
  10. CAT Admin Tool – GitHub
  11. CAT2 Token Reissuance – Chia Documentation
  12. Wallet CLI – Chia Documentation