Your crypto goes to your family —
on-chain.
Smart-contract vaults with dead-man's switch, multisig heirs, trusted guardians, and legal-document drafts your advisors can review across Ethereum, Base, Arbitrum, Polygon, BSC, Avalanche, Bitcoin, Tron, and Solana.
Non-custodialOpen-source contractsIndependent security checks
0
Live vault networks
EVM, Bitcoin, Tron, and Solana vault deployment surfaces
$0
HeirVault custody
Self-custody by design; users keep control of assets
0d
Upgrade delay
V3 beacon upgrades are queued behind a timelock
0d
Guardian lifetime cap
Extensions are bounded across the life of a claim
Protocol facts · Usage counters require public verification
Engineered for capital you can't afford to lose
Non-custodial
We never hold your keys
Security-reviewed
Slither · Halmos · Foundry
Open-source
MIT · verifiable on-chain
Formally verified
51 Halmos proofs
AML / OFAC
Sanctions screening
How it works
Three decisions today. Zero work tomorrow.
01 · Setup
You set the clock.
Decide how often you want to check in — 90 or 180 days. The dashboard helps you submit an on-chain check-in transaction; email and Telegram can remind you, but messages do not reset the timer. Forget for too long? Your vault starts preparing to hand off.
- Check-in
- 90 / 180 d
- Reset
- Confirmed on-chain activity
- Auto-unpause
- 7 days
02 · Family
You choose who inherits — and how much.
Name up to 10 heirs with exact shares in basis points (they sum to 100 %). To unlock, your heirs sign M-of-N together. No single heir can move funds alone. Legal and probate questions still need local review.
- Heirs
- up to 10
- Claim
- M-of-N multisig
- Anti-frontrun
- 20-min commit-reveal
03 · Safety net
Guardians watch over it — without ever touching it.
Pick up to 10 trusted people. They can only do one thing: push your deadline forward if life got in the way. They can't withdraw, redirect, or change heirs. If you suspect collusion, your heirs can reset it all.
- Extension cap
- 90 d / session · 180 d / lifetime
- Cooldown
- 24 h per guardian
- Emergency
- Heir reset after 90 d
30 seconds · No card · Mainnet when you're ready
Guardians
Three people who love you — not three people who can steal from you.
Pick your family's best friend. Your old business partner. Your lawyer. They get exactly one power: push your deadline forward when life gets in the way. Nothing else. Ever.
Vault
0x74f2…a9bC
Session budget
22 / 90 days
Resets when the owner checks in
Lifetime budget
58 / 180 days
Never resets — permanent cap
Guardian A
vitalik.eth
14 d used
Guardian B
mom.lens
8 d used
Guardian C
0xA3…e2
0 d used
They buy time. They do not take custody.
Guardians can extend deadlines and cancel a scheduled emergency recovery during its timelock. Withdraw, transfer, change-heirs, rotate-guardians — none of those powers are available to them.
Two caps. One cooldown. Zero loopholes.
Max 90 days per check-in cycle. Max 180 days across the vault's entire lifetime. A single guardian can add at most once per 24 h — no rapid-fire extensions.
They don't need to be on your chain.
Guardians on one EVM chain can extend linked EVM vaults through CCIP relay. Bitcoin, Tron, and Solana guardian actions stay native to those networks, so chain differences stay explicit.
If they collude — your heirs can reset active extensions.
Once cumulative accepted guardian extensions reach the 90-day emergency threshold during an active claim, any heir can reset active extensions. Not in theory — in the contract and covered by the documented CRIT-02 remediation tests.
One vault · three views
Same contract. Different job.
Portfolio
$842,156
+ 2.14 % today · AAVE yield $318
Next check-in
In 142 days
Reminders via Telegram
Heirs
3 of 3 verified
2-of-3 multisig
Guardians
2 active
22 / 90 d session budget
USDC · Base
$412,008 · earning 4.12 % APY on AAVE
78%
BTC · Taproot
2.41 BTC · P2TR multisig
22%
Mock data · Your real dashboard updates live over websocket
Security
Five layers before your keys. Zero trust in us.
Vault contracts are open, tested, and reviewed as production DeFi code. Because HeirVault is non-custodial, the company cannot sign asset movements from your vault even if the hosted app disappears tomorrow.
Security review
OpenZeppelin libraries · public reports
Contracts use OpenZeppelin libraries where appropriate, with project review reports covering InheritanceVault, Factory, PremiumManager, MultiSig, CCIP relay, and documented CRIT-02 remediation tests.
Review reports in /docs/reviews
Formal verification
Halmos — 51 symbolic proofs
Mathematical proofs across 4 test files: invariants on heir shares, guardian caps, claim state machine, and pull-based withdrawal accounting.
halmos.toml · reproducible in 60 s
Static analysis
Slither · Aderyn · Mythril
Static-analysis output is part of release review alongside Foundry, fuzz, invariant, and Halmos checks. Findings are triaged in the repo instead of presented as a blanket clean-audit claim.
Analyzer output · human triage
Open source
MIT · GitHub · Verifiable bytecode
Every contract address links to Etherscan-verified source. You can fork the vault, audit it yourself, or run it from your own factory.
github.com/heirvault
Fuzz + invariant
10 000 runs · depth 64
Echidna-style invariant tests run 512 times at depth 64 before every mainnet deploy. Fuzz tests run 10 000 iterations per function.
forge test -vvv on every commit
Contract guarantees
Commit-reveal · pull-only · auto-unpause
EVM claim execution uses a 20-minute contract delay, and the app guides heirs through a 21-minute operational wait. Pull-based withdrawals reduce payout risk. EVM/TRON pauses auto-expire after 7 days; Solana pause is global and manual.
See InheritanceVault.sol
0
Funds custodied by HeirVault
100%
Non-custodial
51
Formal proofs passing
9
Live vault networks
Who uses HeirVault
Built for families who need legal truth and operational clarity.
Three planning scenarios for tax review, cross-border coordination, and families protecting capital through uncertainty.
United States · Family Office
Reduce key-person risk before estate planning gets urgent.
A family office with BTC, ETH, and staked positions can map heirs, guardians, shares, and review-ready documents before counsel finalizes the estate plan.
- Documents
- Drafts
- Rollout
- Testnet first
- Yield
- Optional
Read the full case“Use the vault record as technical evidence your advisors can review.”
French Expat · UAE resident
Model cross-border inheritance without hiding legal review.
A globally mobile owner can document intent, jurisdiction assumptions, and heir instructions while treating forced-heirship and probate questions as counsel-reviewed risks.
- Jurisdictions
- Reviewed
- Forced-heirship
- Warnings
- Probate
- Counsel-led
Read the full case“On-chain rules help with execution, but local law still matters.”
Russian Family · Multi-country heirs
Separate operational wallets from inheritance planning.
A family with assets across multiple chains can keep spending wallets small while using vault rules, guardian oversight, and recovery packets for continuity planning.
- Guardians
- Limited
- Chains
- Readiness varies
- Check-in
- Configurable
Read the full case“The plan works best when heirs understand both the wallet flow and the legal documents.”
Illustrative scenarios · Not customer testimonials · Not legal or tax advice
HeirVault · Planning Series
Crypto Inheritance Planning Guide
Practical checklists for families protecting on-chain assets without handing custody to a third party.
7-part email guide
Free email guide · Zero sales pitch
Get the crypto inheritance guide before your family needs it.
A practical email series on multisig choices, guardian readiness, legal handoff documents, and recovery drills. It points to public HeirVault guides and separates education from legal or tax advice.
- How to inventory wallets, chains, and recovery instructions
- Where a dead man's switch and multisig fit in a family plan
- Questions to take to an estate or tax professional
- The guardian readiness checklist every family should run
- Recovery drills for heirs if HeirVault is unavailable
If HeirVault disappears tomorrow,
your vault still has on-chain paths.
We're not a gateway, a custodian, or a middleman. Core vault logic lives on-chain. Hosted UI, notifications, legal document generation, and support may go away, so the recovery packet tells your family what still works without our servers.
- 01
Your vault is yours.
The deployed vault contract controls the assets, not a HeirVault custody account. Chain explorers and wallets remain the reference path for supported direct contract actions.
Contract address · ABI · chain explorer
- 02
Keep an offline recovery packet.
Download the vault configuration, contract addresses, ABI references, and legal handoff documents while the account is active. Store copies somewhere your heirs can access.
Offline packet · No server promise
- 03
EVM claims can run through raw tx.
For EVM vaults, heirs can use a block explorer or wallet to call commitExecuteClaim(claimId), wait through the commit-reveal buffer, and then call executeClaim(claimId). Bitcoin, Tron, and Solana use their chain-specific recovery instructions.
ABI in /help · 20-min commit-reveal
“The test for any inheritance tool is not how it works when the company is healthy. It's how it works when the company is gone.”
HeirVault design principle · Day one
Hard questions, direct answers
No marketing fluff. Just the answers.
Is HeirVault really non-custodial? What does that mean?
Yes. The smart contract holding your assets is deployed from your wallet flow, and HeirVault does not hold custody keys or sign transfers from your vault. Protocol controls still exist: EVM/TRON pauses are bounded, V3 upgrades use a 7-day timelock, and VaultMultiSig proposals wait 3 days before execution.What happens if HeirVault the company disappears tomorrow?
Your vault keeps working on-chain. The recovery page provides an offline packet and raw transaction guidance so heirs can use wallets and block explorers without relying on our hosted app. Read the full recovery playbook at /recovery — it walks through the practical steps your family would take.Who can see my seed phrases or private keys?
No one at HeirVault, ever. We don't collect, request, or store seed phrases. Your keys stay in your wallet (MetaMask, Ledger, Rabby, etc). The only thing the contract knows is the address of your heirs and guardians — not their keys.How does the dead-man's switch actually work?
You choose a check-in interval (90 or 180 days). Before the deadline, the dashboard guides you through an on-chain check-in transaction, or you can interact with the vault directly from your owner wallet. Email and Telegram reminders can nudge you, but messages do not reset the timer. If the deadline passes with no confirmed owner activity, your heirs can initiate a claim. You can extend or cancel at any time.What if I'm in a hospital or coma and can't check in?
This is exactly what guardians are for on EVM/TRON/Solana vaults. Up to 10 trusted people can push the deadline forward — capped at 90 days per active claim and 180 days across the vault's lifetime, with a 24h cooldown per guardian. They can also cancel a scheduled emergency recovery during its timelock. They can't withdraw or redirect anything. Bitcoin guardians are different: an optional BTC guardian public key is a co-signer trust role, not an extension-only smart-contract role.Can my guardians collude to steal from me?
On EVM/TRON/Solana vaults, guardians cannot withdraw, change heirs, or redirect funds. Their live powers are deadline extension and scheduled-recovery cancellation. If coordinated extensions block a legitimate claim, heirs can dispute a guardian with the vault's required signature threshold or call emergencyResetExtensions once the 90-day emergency threshold is reached during an active claim. Bitcoin guardian co-signers have a different trust model and should be chosen as fund-access co-signers.How do I choose the right multisig (M-of-N)?
The Playbook has a full chapter on this. Rule of thumb: 2-of-3 for most families (one heir lost, you still inherit), 3-of-5 for family offices with independent oversight, 2-of-2 if your heirs live together. The contract supports up to 10 heirs with any M-of-N combination where M ≤ N.Which blockchains does HeirVault support?
9 live vault networks today: Ethereum, Base, Arbitrum, Polygon, BSC, Avalanche, Bitcoin (Taproot multisig), Tron, and Solana. Hyperliquid wallet/token metadata is tracked, but vault deployment appears only after a factory address is configured. All from one dashboard, with each vault keeping its own native on-chain check-in timer. Linked EVM vaults can relay supported claim and guardian actions through CCIP; Bitcoin, Tron, and Solana use their native flows.How is Bitcoin handled — it doesn't have smart contracts?
We use Taproot (P2TR) script-path multisig. Your BTC sits in a native Bitcoin output with a Taproot script that encodes the same M-of-N heir intent. Bitcoin claims use a native PSBT signing and broadcast flow, not wrapped BTC, bridges, or the EVM transaction path.What about taxes? How will my heirs be taxed?
HeirVault generates tax reports with stepped-up basis calculation at the moment of inheritance (US, EU, UAE, Singapore covered out of the box). We are not your accountant — the report is designed to hand to one. Cross-border cases are in the Playbook.I live in one country, my heirs live in three others. Does this work?
This is one of our most common use cases — see /use-cases/expat. The vault can execute on-chain, but probate, forced-heirship, translation, and tax questions still depend on local law. The legal kit records your intent and highlights review points for counsel.What are the gas fees to set up or claim?
Setup: one vault deployment (typically $3–20 depending on chain and gas at deploy time). Ongoing check-ins are owner transactions: L2s are usually low cost, while Ethereum mainnet gas varies. Email and Telegram reminders are free, but they do not reset the on-chain timer. Claim: one commit + one execute transaction per heir who wants to pull (L2s make this $0.10–2, Ethereum mainnet $10–50).Is the vault upgradable? Can HeirVault push an update that steals?
V1 and V2 vaults are immutable clones — nothing to upgrade, nobody can change the code. V3 uses a beacon proxy behind a 7-day timelock: any upgrade is announced, auditable on-chain, and you have 7 days to exit to an immutable clone if you don't trust the change.Can I cancel or change my vault later?
You can update heirs before a claim, manage guardians with cooldowns, change supported settings, or use the owner recovery path while no claim is active. Some changes are timelocked or chain-specific, and active claims/pause state can temporarily block state-changing actions.
Your family needs clear instructions. Give them this.
Deploy a testnet vault in half a minute. Move to mainnet when you're convinced. No card, no commitment, nothing to cancel — just a clear on-chain plan your heirs and advisors can review.
Non-custodial · Open-source · Independent security checks