How CryptoLegacy works
The owner creates the contract, sets roles, and approves assets for transfer. If the timeout is not refreshed for 6 months or enough guardians confirm inactivity, the assets move into the contract and beneficiaries claim them. If access is lost, recovery addresses can move the assets to a new address.
Create contract, set roles, approve assets.
Refresh timeout every 6 months.
Assets remain in wallets.
Timeout expires or guardians confirm inactivity.
Transfer stays blocked during challenge.
Assets move into the contract and beneficiaries claim.
If access is lost
Move assets to a new address.
Create contract, set roles, approve assets.
Refresh timeout every 6 months.
Assets remain in wallets.
Timeout expires or guardians confirm inactivity.
Transfer stays blocked during challenge.
Assets move into the contract and beneficiaries claim.
Move assets to a new address.
If access is lost
Owner-defined rules
The owner creates the contract, approves assets, sets beneficiaries, guardians, and recovery addresses, and records encrypted asset data on-chain.
Who can act
Beneficiaries
Guardians
Recovery addresses
When they can act
After assets move in
Before timeout expires
At any time
What they can do
Claim assets
Confirm inactivity to open transfer
Move assets to a new address
Transfer
Transfer starts only after the timeout expires or enough guardians confirm inactivity. Then there is still a challenge period before assets move into the contract.
Timeout expires or guardians confirm inactivity
Assets stay in owner wallets until one of these happens.
Challenge comes before transfer
After timeout, beneficiaries start the challenge. Guardians can start it earlier. The owner can still cancel it.
Assets move into the contract, then beneficiaries claim
If the challenge finishes cleanly, approved assets move into the contract. Beneficiaries then claim them.
After transfer, approved plugins can run extra actions on assets held in the contract.
Owner-approved
Set before transfer. More can be allowed during distribution.
Allowed actions
Swap, stake, lend, or manage positions where allowed.
Extra confirmations
These actions still follow the configured confirmations.
Recovery
Recovery is a separate path for lost access. The owner sets recovery addresses and a threshold in advance. They can move approved assets into the contract at any time and then send remaining assets to new addresses.
Set recovery addresses and threshold
The owner adds one or more recovery addresses and chooses how many must approve, like a multisig.
Recovery can start at any time
Recovery does not wait for timeout or challenge. Approved assets can move into the contract under the recovery threshold.
Send remaining assets to a new address
Recovery addresses can withdraw remaining contract-held assets to new addresses. Finalized claims stay final.
What CryptoLegacy does not do
What CryptoLegacy
does not do
CryptoLegacy does not move assets during normal use or give invited roles control. Approved assets stay in owner wallets. Beneficiaries and guardians do not see asset details before distribution, and guardians do not control assets.
Ready to define the rules?
Go to the app to define the setup, or continue into Documentation for deeper verification.
Nothing changes. Your assets stay under your control. Self-custody does not define what happens if you cannot act.
Yes. During normal operation, your assets stay fully in your wallet. The contract holds permissions, not funds. It only defines what may happen if you cannot act.
Multisig requires real-time coordination. Key sharing exposes secrets. CryptoLegacy defines rules in advance — no one needs to hold your keys or coordinate at the right moment.