A dead-man switch for Solana wallets

Inheritance without a lawyer or a seed phrase.

Heirloom lets you sign transfers to your heirs once. If your wallet goes quiet for longer than you allow, the keeper sends them. Until then, nothing moves and nobody holds your keys.

CA drops at launch
Hover an heir · click the trunk to check in

Day 41 of 90. It is summer. Last check-in 41 days ago, 49 left before the flag.

A demo with example heirs and wallets, no real funds. Changing heirs, shares or the window re-signs the will and resets the clock.

No custodyPre-signed on durable noncesSeven days of last callUp to eight heirsSOL and up to five tokensRevoke in one transaction
How it works

The four seasons of a will.

Most of the time your tree stands in summer and does nothing. The keeper reads the chain every day and only moves when your calendar says so.

Spring, plant

Choose your heirs, their shares, and how many days of silence counts as gone. Sign the releases once. They're sealed with the keeper and can only ever pay your heirs.

sign · durable nonce

Summer, tend

Check in from the app with a free signature, or just use your wallet. Any transaction it signs resets the clock to zero.

checkin · free

Autumn, last call

When the window runs out, the keeper flags the will and its page turns to last call. You get seven more days. One check-in cancels it all.

keeper · flag

Winter, release

Still silent? The keeper broadcasts your signed releases. Coins go straight from your wallet to your heirs, and its 0.5% rides in the same transaction.

release (pre-signed)
Inside a release

One transaction. Only your heirs in it.

Every address is inside your signature, so the keeper decides when a release is sent, never where it goes. Change one byte and the network rejects it. Close your nonce accounts and every copy is dead.

Deed of ReleaseSigned once · valid for years
  1. 00system::advance_noncekeeps the signature valid for years
  2. 01transfer → heir · 60%SOL, SPL or Token-2022
  3. 02transfer → heir · 40%up to eight heirs
  4. 03transfer → keeper · 0.5%only paid if it is sent
Failure modes

Why most dead‑man switches wither.

The idea is old and simple. What kills it is everything that goes wrong in the years between planting and harvest.

Signatures go stale

The blightA normal Solana transaction carries a recent blockhash and expires in about 90 seconds. A switch built on that can't hold anything signed in advance, so it ends up holding your keys.

The cure

Every release is signed against a durable nonce account you own. It stays valid until the nonce moves, and only you or the release can move it.

Someone redirects the money

The blightA pre-signed transfer is valid the moment it exists. In the wrong hands, that sounds like a blank cheque.

The cure

Your heirs' addresses are inside your signature. A release can only ever pay the people you named, so the keeper controls when, never where. Releases are encrypted at rest and checked byte for byte before they're accepted.

One company holds it all

The blightCustodial services hold your coins. If they shut down or get hacked, your coins go with them.

The cure

Heirloom never holds a coin or a key. Everything stays in your wallet until the moment of release. If the keeper ever went dark, the failure is safe: nothing moves.

A hospital stay looks like death

The blightSilence isn't proof. People lose phones, travel, get sick.

The cure

Seven days of last call after your window, counted down on your will's page. One check-in, or any transaction from your wallet, cancels the release.

You change your mind

The blightA new heir, a divorce, a different split. The old signed copies are still out there.

The cure

Revoke closes your nonce accounts. One transaction voids every release you've signed and refunds the rent.

The keeper

The keeper of the grove.

0.5%Of released SOL, paid only when a will is carried out
0Cost to plant, beyond refundable account rent
DailySweep of every will against the chain
FreeCheck-ins. A signature, not a transaction

The keeper holds your signed releases, encrypted. Every day it reads the chain for each wallet it watches. Any transaction your wallet signs, or any check-in, pushes your clock back to zero.

When a wallet stays silent past its window, the keeper flags it and starts a seven-day last call. If nothing changes, it broadcasts the releases. If the balance has dropped, it falls back to the largest signed tier that still fits, so your heirs get what's there.

Watching the chain · every day
The token

$HEIR

The community token of Heirloom. You don't need it to plant a will, and owners pay nothing until a release happens.

Never a toll

Planting, checking in and revoking never require $HEIR. The app works the same for every wallet.

A flag for the idea

Hold it if you think every wallet should have a will. The more people who plant one, the fewer coins are lost for good.

Next in the grove

More keepers so no single server holds the releases, and reminders by email and Telegram during last call.

Contract addressCA drops at launch

Any token calling itself $HEIR with a different address is not ours.

Specifications

The register.

ChainSolana mainnet
CustodyNone
TransactionsPre-signed, durable nonce
Release gateWindow + 7-day last call
Check-in costFree (signature)
Silence window30 to 365 days
Last call7 days
Heirs per willUp to 8
AssetsSOL + up to 5 tokens
Keeper fee0.5% of SOL, on release
RevokeOne transaction, rent back
FAQ

Before you plant.

Does Heirloom ever hold my funds?

No. Your coins stay in your own wallet the entire time. A release moves them directly from your wallet to your heirs in one transaction. There's no vault, pool, or escrow in between.

What if I just forget to check in?

Last call is built for that. Once your window passes you get seven more days, counted down on your will's page. One check-in stops it, and so does simply using your wallet. For most people, 90 or 180 days is a sensible window.

Can the keeper redirect my money?

No. Your heirs' addresses are inside the transaction you signed. Changing any byte breaks your signature and the network rejects it. The keeper only decides when a release is sent, never where it goes.

What if my balance changes after I sign?

Releases are signed for what the wallet held when you planted. If the balance drops, the keeper sends the largest signed tier that still fits: 80, 60, 40, 20 or 10%. If you add a lot, re-sign from the app in a minute.

Do my heirs need to know about crypto?

They need a Solana address and that's it. You can make one for them in two minutes. They don't have to know the will exists, though we recommend telling them.

Is this a legal will?

No. Heirloom moves coins; it doesn't settle estates. Keep a real will that mentions your crypto and says Heirloom is set up, so nobody is surprised.