Liveness-aware money · non-custodial

The wallet that can't be lost.

Not to death, not to forgetting, not to thieves. Money today assumes its owner is alive, present, and remembers everything. Heirloom removes that assumption — so funds never get stranded.

Vault · liveness ladder — accelerated demo
Active
Owner activity detected. Clock reset.

One signature — any transaction counts — resets everything. Silence escalates: nag → guardians → care mode → claimable.

20%+of all Bitcoin estimated permanently lost to key loss
$190Mlocked at QuadrigaCX when its sole keyholder died
₹ tens of thousands crsit unclaimed in Indian banks and insurers — money that never learned its owner was gone
The failure mode

Onchain assets have one silent failure mode

The cause never matters — a forgotten seed phrase, a death, a stolen device, a deprecated AI agent, a founder who held the only key. The outcome is identical: the owner can no longer sign, and the money strands forever.

The mechanism

The liveness ladder

Any activity resets the clock. Silence escalates — slowly, loudly, and always reversibly by one signature from the owner.

Any time

Owner signs → everything resets

Any transaction is a heartbeat. Travel, hospital, prison — declare a pause in advance and the clock waits.

3 months silent

The nag

Email and Telegram reminders. Most stories end here.

6 months

Guardians alerted

Your M-of-N circle is notified. They can propose rotating the vault to a new key — recovery for a forgotten seed — behind a 7-day timelock you can always veto.

9 months

Care mode

A designated guardian gets capped monthly spending for essentials — not the keys. Instantly revoked by any owner activity.

12 months

The cascade

Beneficiaries claim in your order: your own backup wallet first, then family, then a charity sink. Unclaimed tiers cascade — funds can never dead-end.

Coverage

One mechanism. Five endings rewritten.

Recovery, inheritance, incapacity, continuity, and agent cleanup are the same contract seen from five directions.

Forgotten keys

Social recovery

Guardians rotate the vault to your new key. The lock changes — the house doesn't. No seed phrase required, ever again.

Death

Inheritance without probate pain

A non-crypto heir claims through an email link and receives dollars, not jargon. An encrypted note from you decrypts only on claim.

Decline

Care, not surrender

Bills get paid by someone you chose, within limits you set, while you keep the keys.

Founder risk

Continuity for treasuries

Org funds cascade to a co-founder multisig instead of dying with one person. The QuadrigaCX problem, closed.

AI agents

The watchdog

An agent stops heartbeating — deprecated, crashed, abandoned — and its treasury walks home to the operator.

"The lock changed.
The house didn't."

Every configuration change — heirs, guardians, timings — takes a 7-day timelock with notification and owner veto. A thief with your key cannot silently redirect your safety net. Guardians can propose; only contracts move funds.

Deployed & verified

Live on Arc testnet

Both vaults are deployed, source-verified, and have run a full lifecycle on-chain — including an assisted claim, where a helper with no role triggered the payout and the registered heir received the funds.

Production vault 0x0CA49eBD6fba33530287cb8eAE9aE565e80e18dA

Real ladder — 90 / 180 / 270 / 365 days. Source verified.

Demo vault · short durations 0x0D884E62B1dE894df1651910849E534aDf4deaDa

Seconds-scale tiers so the cascade can be watched end to end. Demo-only — not a safety net.

Assisted claim receipt 0x10937bae…06c8a14e

A helper triggered the claim. The heir was paid; the helper gained nothing and paid the gas.

Chain Arc testnet · 5042002
Explorer testnet.arcscan.app
Suite 126 contract tests, including a stateful multi-actor invariant suite
Addresses & every transaction hash: docs/addresses.md