Heirloom

Liveness-aware money · non-custodial

The wallet that can't be lost.

Not to death, not to forgetting, not to thieves. Money today assumes its owner is alive, present, and remembers everything. Heirloom removes that assumption — so funds never get stranded.

Vault · liveness ladder — accelerated demo
Active
Owner activity detected. Clock reset.

One signature — any transaction counts — resets everything. Silence escalates: nag → guardians → care mode → claimable.

Onchain assets have one silent failure mode

The cause never matters — a forgotten seed phrase, a death, a stolen device, a deprecated AI agent, a founder who held the only key. The outcome is identical: the owner can no longer sign, and the money strands forever.

20%+of all Bitcoin estimated permanently lost to key loss
$190Mlocked at QuadrigaCX when its sole keyholder died
₹ tens of thousands crsit unclaimed in Indian banks and insurers — money that never learned its owner was gone

The liveness ladder

Any activity resets the clock. Silence escalates — slowly, loudly, and always reversibly by one signature from the owner.

Any time

Owner signs → everything resets

Any transaction is a heartbeat. Travel, hospital, prison — declare a pause in advance and the clock waits.

3 months silent

The nag

Email and Telegram reminders. Most stories end here.

6 months

Guardians alerted

Your M-of-N circle is notified. They can propose rotating the vault to a new key — recovery for a forgotten seed — behind a 7-day timelock you can always veto.

9 months

Care mode

A designated guardian gets capped monthly spending for essentials — not the keys. Instantly revoked by any owner activity.

12 months

The cascade

Beneficiaries claim in your order: your own backup wallet first, then family, then a charity sink. Unclaimed tiers cascade — funds can never dead-end.

One mechanism. Five endings rewritten.

Recovery, inheritance, incapacity, continuity, and agent cleanup are the same contract seen from five directions.

Forgotten keys

Social recovery

Guardians rotate the vault to your new key. The lock changes — the house doesn't. No seed phrase required, ever again.

Death

Inheritance without probate pain

A non-crypto heir claims through an email link and receives dollars, not jargon. An encrypted note from you decrypts only on claim.

Decline

Care, not surrender

Bills get paid by someone you chose, within limits you set, while you keep the keys.

Founder risk

Continuity for treasuries

Org funds cascade to a co-founder multisig instead of dying with one person. The QuadrigaCX problem, closed.

AI agents

The watchdog

An agent stops heartbeating — deprecated, crashed, abandoned — and its treasury walks home to the operator.

"The lock changed.
The house didn't."

Every configuration change — heirs, guardians, timings — takes a 7-day timelock with notification and owner veto. A thief with your key cannot silently redirect your safety net. Guardians can propose; only contracts move funds.