Liveness-aware money · non-custodial

The wallet that can't be lost.

Not to death, not to forgetting, not to thieves. Money today assumes its owner is alive, present, and remembers everything. Heirloom removes that assumption — so funds never get stranded.

Vault · liveness ladder — accelerated demo
Active
Owner activity detected. Clock reset.

One signature — any transaction counts — resets everything. Silence escalates: nag → guardians → care mode → claimable.

Live right now on Arc

This is a real vault, live on Arc testnet — verify every value on the explorer.

State
BalanceUSDC · 6dp
Next tier in
Last activity
Beneficiaries
Guardians
0x0CA49eBD6fba33530287cb8eAE9aE565e80e18dA Explorer ↗

Read directly from rpc.testnet.arc.network in your browser — read-only, no wallet, no connection prompt.
As of

20%+of all Bitcoin estimated permanently lost to key loss
$190Mlocked at QuadrigaCX when its sole keyholder died
₹ tens of thousands crsit unclaimed in Indian banks and insurers — money that never learned its owner was gone
The failure mode

Onchain assets have one silent failure mode

The cause never matters — a forgotten seed phrase, a death, a stolen device, a deprecated AI agent, a founder who held the only key. The outcome is identical: the owner can no longer sign, and the money strands forever.

How it works

Five steps, in plain English

No wallets to install, no jargon to learn. This is the whole idea, start to finish.

  1. Step 1

    You set it up once

    Choose who should be looked after, and who you trust to help.

    Technical: beneficiaries and M-of-N guardians written to the vault at construction.

  2. Step 2

    Live your life

    Every time you use your money, it quietly knows you're still here.

    Technical: any owner transaction stamps lastActivity, resetting the liveness ladder.

  3. Step 3

    If you go quiet, it checks on you

    First reminders, just in case. Then the people you chose are told.

    Technical: Nagging at 90 days, GuardianAlert at 180 — reminders are off-chain, the state is not.

  4. Step 4

    If you can't come back, bills still get paid

    Someone you picked can cover essentials — a set amount, to approved places only.

    Technical: care mode, capped per period and per category, payable only to owner-approved addresses.

  5. Step 5

    Your money finds its way home

    It reaches your family — in dollars, without them needing to understand any of this.

    Technical: cascading claims to pre-registered payees; anyone may trigger, only the payee is paid.

The mechanism · for technical readers

The liveness ladder

Any activity resets the clock. Silence escalates — slowly, loudly, and always reversibly by one signature from the owner.

Any time

Owner signs → everything resets

Any transaction is a heartbeat. Travel, hospital, prison — declare a pause in advance and the clock waits.

3 months silent

The nag

Email and Telegram reminders. Most stories end here.

6 months

Guardians alerted

Your M-of-N circle is notified. They can propose rotating the vault to a new key — recovery for a forgotten seed — behind a 7-day timelock you can always veto.

9 months

Care mode

A designated guardian gets capped monthly spending for essentials — not the keys. Instantly revoked by any owner activity.

12 months

The cascade

Beneficiaries claim in your order: your own backup wallet first, then family, then a charity sink. Unclaimed tiers cascade — funds can never dead-end.

Coverage

One mechanism. Five endings rewritten.

Recovery, inheritance, incapacity, continuity, and agent cleanup are the same contract seen from five directions.

Forgotten keys

Social recovery

Guardians rotate the vault to your new key. The lock changes — the house doesn't. No seed phrase required, ever again.

Death

Inheritance without probate pain

A non-crypto heir claims through an email link and receives dollars, not jargon. An encrypted note from you decrypts only on claim.

Decline

Care, not surrender

Bills get paid by someone you chose, within limits you set, while you keep the keys.

Founder risk

Continuity for treasuries

Org funds cascade to a co-founder multisig instead of dying with one person. The QuadrigaCX problem, closed.

AI agents

The watchdog

An agent stops heartbeating — deprecated, crashed, abandoned — and its treasury walks home to the operator.

"The lock changed.
The house didn't."

Every configuration change — heirs, guardians, timings — takes a 7-day timelock with notification and owner veto. A thief with your key cannot silently redirect your safety net. Guardians can propose; only contracts move funds.

Deployed & verified

Live on Arc testnet

Both vaults are deployed, source-verified, and have run a full lifecycle on-chain — including an assisted claim, where a helper with no role triggered the payout and the registered heir received the funds.

Production vault 0x0CA49eBD6fba33530287cb8eAE9aE565e80e18dA

Real ladder — 90 / 180 / 270 / 365 days. Source verified.

Demo vault · short durations 0x0D884E62B1dE894df1651910849E534aDf4deaDa

Seconds-scale tiers so the cascade can be watched end to end. Demo-only — not a safety net.

Assisted claim receipt 0x10937bae…06c8a14e

A helper triggered the claim. The heir was paid; the helper gained nothing and paid the gas.

Chain Arc testnet · 5042002
Explorer testnet.arcscan.app
Suite 126 contract tests, including a stateful multi-actor invariant suite
Addresses & every transaction hash: docs/addresses.md