Instead of cooloff time, it can show a warning to user or it should confirm from user whenever he tries to send money.
Yes, actually now that I come to think of it there's no real need for the cool off time: whenever the key is about to make a database synchronized transaction it can also confirm any older transaction with the database before signing a new transaction.....
Thanks....