Social Recovery Waiting Period: Can It Be Canceled? Who Can Block It?

 / 
1

Yes, you can cancel, but only the wallet's primary key holder (Owner) has this permission. Guardians do not have the authority to block or cancel a recovery process that has already been initiated.

Social recovery is essentially about "changing the wallet's primary key." The person who initiates the recovery request is simply telling the on-chain contract, "I want to switch keys." Canceling the recovery is a unilateral veto of that request, done while the original primary key is still in your possession.

Who Can Cancel and How to Cancel

  • Scenario A: You can still log into the wallet with the primary key. This is the most straightforward situation. As long as you still hold the primary key (mnemonic phrase, Passkey, or hardware wallet), go to the wallet's security settings, find the "Recovery Status" or "Pending Recovery" option, and click "Cancel" or "Revoke." After signing and paying a gas fee, the pending recovery request will be cleared from the chain. How to confirm it worked: Check a block explorer for a cancelRecovery (or similarly named) transaction. The recovery status should change from "pending" to "none."

  • Scenario B: You have completely lost the primary key, but you do not want this recovery to take effect. In this situation, you cannot cancel, because you no longer have any permission to operate the wallet. If a guardian initiated a malicious recovery, the only thing you can do during the waiting period (e.g., 48 hours) is to contact the remaining guardians through other channels and ask them not to sign. If the recovery threshold has already been met, the whole process will run automatically and no one can stop it.

    High risk: Guardians becoming unreachable or colluding is the bigger problem. Vitalik Buterin has stressed, when promoting social recovery, that a wallet should have a security delay (timelock), giving you a reaction window to cancel a malicious recovery. As long as the timelock is in effect, initiating a recovery does not equal a successful recovery; you have a chance to intercept.

Do Guardians Have Permission to Block?

No. A guardian's job is simply to "agree or refuse to help you recover." They are not administrators of the wallet.

  • Canceling a recovery request does not require consent from any guardian. In the wallet's permission structure, the cancelRecovery function can only be called by the owner role. The guardian list has no access to this function at all.

  • The only exception: If the wallet uses a multisig model — meaning the owner authority itself is controlled by multiple guardians — then canceling a recovery also requires signatures from those guardians. But this is not a case of "guardians blocking a recovery"; it is "the owner authorizing a cancellation." The fundamental role has not changed.

Common Reasons for Failure

  • Can't find the cancel option: Some wallets hide the "cancel recovery" option deep in their interface, or only show it under specific conditions (for example, when a timelock is active). Try checking the wallet's "Settings – Security – Recovery" path. If you still can't find it, search your address on a block explorer for any pending recovery-related events.

  • Thinking "cancel recovery" equals "remove guardian": These are two completely different operations. Canceling a recovery only stops this single application process; the guardian list stays exactly the same. If you also want to remove an unreliable guardian, you must do that separately under "Guardian Management."

After Completing the Operation

  • Verification: Go back to the wallet's security settings page and confirm the recovery status is cleared. Then search for a RecoveryCancelled event log on a block explorer to make sure this on-chain action was actually confirmed.

  • Next steps: If this recovery request was accidental or you suspect it was maliciously initiated, while you're still online, immediately adjust the wallet's recovery threshold (for example, raise it from 2/3 to 3/5), or replace any guardians you consider risky. Canceling only fixes this one incident; the real hidden danger is the set of rules that allowed this request in the first place.