Blockshard operates validator and signing infrastructure without holding customer wallet keys. In direct validator configurations, customers control the withdrawal address. In StakeWise vaults, the vault contract is the withdrawal address and customers use their own wallets to manage their vault positions. Blockshard has the administrative rights described in our Terms, not discretion to redirect customer withdrawal claims. Protocol restrictions and operational risks remain.