How Damla works
A Damla link carries a fresh, single-use key. The money is locked to that key's address on-chain, and the key itself travels only inside the link. Here is the whole path.
1
A one-time key is born in your browser. Its address becomes the link id; its secret goes into the part of the URL after the #, the fragment, which browsers never send to any server.
2
You lock the MON. One deposit call escrows your amount against that link address, with an expiry so nothing can ever be stuck.
3
They open the link. The page reads the secret from the fragment and signs a message: "pay this drop to my address." A throwaway wallet is created for them right there.
4
A relayer submits it and pays the gas. The relayer holds a small funded key. It calls claim so the recipient never needs a gas token.
5
The contract pays only the signed address. It recovers the signer from the message and releases the money to the address that signature named, and no other.
Why the relayer cannot steal
The relayer chooses when a claim happens, never where the money goes. The payout address is fixed inside a signature made by the link key, which the relayer never holds. Change the payout by one character and the signature no longer recovers to the link address, so the contract reverts. Even a fully compromised relayer key cannot redirect a single wei, it can only waste its own gas.
Why nothing gets stuck
Every drop has an expiry. If no one claims in time, the original sender calls reclaim and the money returns to them. You can do this from My links.