Your assets stay where they are. The rules live in one place.
Vault logic runs on a single EVM coordination chain. Assets stay on their own chains, under threshold keys that only sign after a valid proof is accepted on the coordination chain.
Status by chain
The coordination registry is live on BSC Testnet. Asset custody comes online chain by chain, and this table updates as each one does.
| Asset | Custody mechanism | Privacy | Status |
|---|---|---|---|
| Coordination registryEVM | PrivacyVaultRegistry and UltraHonk verifiers. Stores commitments, policies and nullifiers. Holds no funds. | No owner, beneficiary or guardian addresses. Proofs are generated client-side. | Live on testnet |
| ZcashZEC | FROST threshold signing in the Ironwood shielded pool (NU6.3). | Fully shielded custody and payout. Viewing keys allow selective disclosure to an executor or auditor. | In development |
| BitcoinBTC | FROST threshold Schnorr signing for a Taproot key-path output. | A threshold Taproot spend looks like any single-key spend on-chain. | In development |
| SolanaSOL | FROST threshold Ed25519 signing. | Looks like an ordinary single-signer account. | In development |
| Ethereum and EVM chainsETH | Safe smart account with a Vault ZK Protocol module that pays out after a valid claim. | The Safe is visible on-chain. Payouts can route through the ZEC rail to break the link. | In development |
| Anything elseANY | Encrypted data vault holding the keys or seed phrase for the asset. | Ciphertext only. The key is released by threshold after a valid claim. | In development |
Who holds the keys
Threshold custody is in development. The keys are designed to be created by distributed key generation, so no complete key ever exists in one place.
- Your device
- Holds one share. It can be required in the signing set while you are alive.
- Your guardians
- Optional shares, so release can require people you chose.
- Independent keepers
- A threshold of separate operators. They sign only after a valid on-chain claim, and no single keeper can move anything.
- The payout destination
- Hashed into the beneficiary’s claim proof, so neither a relayer nor the keepers can redirect it. Trust assumptions are spelled out on the security page.
Optional Zcash shielded payouts
A claim on the coordination chain says that a share was claimed, not who received it. To make sure the payout on the destination chain can’t be tied back to the vault either, a beneficiary can choose to receive it through the Zcash shielded pool. Zcash viewing keys can then disclose exactly that payout to an executor, accountant or court, and nothing else. This rail is in development.