Security

All deposited digital assets remain under your sole cryptographic authority until protocol settlement conditions are permanently fulfilled on-chain. No Cadence server, administrator, or third-party entity ever holds custody of your private keys or funds.

Eliminates counterparty insolvency, centralized exchange freezes, and rogue administrative seizures. While your locker is in ACTIVE status, you retain absolute authority to withdraw your tokens at any moment.

All allocation percentages, heir identities, and blinding salts are encrypted inside your browser before any data is broadcast to the network or smart contracts.

Your estate plans and family inheritance arrangements remain completely confidential. Validators, indexers, block explorers, and RPC nodes cannot read your beneficiaries or their share distributions.

Inactivity cannot be triggered by a single party. A decentralized network of designated guardians must independently verify and submit cryptographic attestations reaching a strict 2-of-3 quorum. Furthermore, Guardian Resilience enables guardians to nominate non-custodial backup keys that activate after a waiting period, eliminating single-point-of-failure orphan lockouts if a guardian loses their keys.

Prevents unilateral claims, rogue oracle takeovers, and compromised guardian attacks. Even if an individual guardian becomes permanently unresponsive or loses their private key, their registered backup can attest to protocol consensus without compromising security.

The locker smart contract stores only a single 32-byte cryptographic root hash of all beneficiary allocations rather than unencrypted recipient lists and token amounts.

Guarantees that allocations are mathematically immutable and tamper-evident while minimizing on-chain gas footprint and preserving recipient privacy.

Locker activity is maintained via periodic Proof-of-Life heartbeats signed by the owner wallet. Heartbeats can be broadcast directly or sponsored via ERC-4337 verifying paymasters with zero gas overhead.

Provides an effortless, highly visible proof of life. As long as you maintain regular signals within your chosen timeframe, no inheritance procedure can ever initiate.

If inactivity is asserted and guardian quorum is met, the locker enters an emergency 72-hour reversible Contest Window before any assets can be finalized or claimed.

Acts as a protocol safety valve. If a false alarm occurs or guardians mistakenly assert inactivity while you are alive, you have a guaranteed 72-hour window to cancel the claim with an instant stealth reset.

During the Contest Window, the owner can cancel pending claims using an EIP-712 typed signature signed by an unlinkable stealth address. The reset payload can be relayed by any third party without gas.

Ensures Zero Gas Linkage. Even if your primary address is monitored or out of gas, an unlinkable emergency key can cancel false activations and restore your locker immediately.

Beneficiary claims utilize EIP-5564 stealth addresses and blinded Merkle proofs. An heir reveals only their specific leaf verification and cryptographic salt when claiming.

Prevents public clustering and blockchain espionage. Observers cannot determine which family members received assets or what shares were allocated to each beneficiary.

Final asset distribution executes deterministically through audited smart contract logic. Beneficiaries receive funds either via direct lump-sum transfer or streamed incrementally via smart account circuit breakers.

Eliminates probate courts, executor delays, and legal disputes. Asset transfer is governed strictly by verifiable math and irrevocable decentralized execution.

Merkle allocation proof verification is implemented as an Arbitrum Stylus Rust WASM contract (stylus_merkle), executing alongside standard EVM smart contracts with bit-for-bit mathematical equivalence.

Unlocks WebAssembly near-native compute speeds, reduces verification gas costs to fractions of a cent on Arbitrum Nitro chains, and proves composability between Rust and Solidity contracts.

Cadence Streams releases an initial emergency liquidity buffer upon finalization and streams remaining funds per-second while accruing unvested yield. If an heir's wallet is compromised or drained, designated guardians or registered backup addresses can invoke pauseStream() and redirectStream() on-chain.

Transforms crypto inheritance from a fragile 100% lump-sum dump into an insulated family trust. Unvested capital is safeguarded against phishing drainers, redirecting the family fortune to secure cold storage.