Built on Robinhood Chain · Preview
Nothing leaves the fort in a hurry.
A 24h guard on your Stock Tokens. Every withdrawal waits. You can cancel. A thief can't.
Contracts not deployed · $HILT not launched · Unaudited
Four principles
01
Every withdrawal waits
24h by default. You choose anything from 6h to 7 days.
02
Cancelling is free
The owner or the backup wallet can cancel at any time during the delay.
03
A backup wallet can rescue
It can move everything to itself, only while a withdrawal is pending.
04
Silence clause
12 months of silence, then a 30-day notice. For lost keys and inheritance.
Holds Stock Tokens, USDG and any ERC-20 on Robinhood Chain
- NVDAStock Token
- AAPLStock Token
- TSLAStock Token
- MSFTStock Token
- AMZNStock Token
- GOOGLStock Token
- USDGGlobal Dollar
- any ERC-20On Robinhood Chain
The problem
A thief needs seconds. You need one chance to say no.
A leaked seed phrase or one malicious signature empties a normal wallet in seconds. There is no undo.
Exchanges hold withdrawals for review. Self-custody has nothing between a thief and your assets.
Hillfort puts one thing between a signature and an empty wallet: time you can use.
Try it
Try to drain this vault.
No wallet needed. Press Drain and watch what a thief with your key would see.
In the real vault the delay is 24h by default and you choose it from 6h to 7 days.
NVDA
12
AAPL
20
TSLA
8
Default delay
Accelerated: 24h shown as 24s
1d 00:00:00
Request a withdrawal the way a thief with your key would.
How it works
Five steps. One rule: nothing leaves quickly.
A vault you own, a delay you choose, a cancel that is always free, and a backup wallet that can step in.
01
Deposit
Create a vault for your wallet. One vault per owner wallet, a contract that only you control. Deposit Stock Tokens, USDG or any ERC-20.
02
Delay
Every withdrawal starts a delay: 24h by default, and you can set it from 6h to 7 days. The request is public on-chain from the first second. Nothing leaves until the delay has passed.
03
Cancel
During the delay the owner can cancel the withdrawal. Cancelling is free. The backup wallet can cancel too. The assets never move.
04
Backup wallet
You choose a backup wallet when you create the vault. While a withdrawal is pending, it can rescue everything to itself. Changing the backup wallet or shortening the delay waits for the current delay. Lengthening the delay applies at once.
05
Silence clause
Optional. After 12 months without any owner action, the backup wallet can start a claim. A 30-day public notice follows, and any owner action cancels it. Turning it on waits for the current delay; turning it off is immediate. Covers lost keys and inheritance.
The delay
A withdrawal, hour by hour.
Every withdrawal follows the same path. The delay is 24h by default and can be set from 6h to 7 days.
T+0
Request is public
The request is on-chain from the first second. Anyone can see it. Nothing has left.
During the delay
You can cancel, free
Change your mind, or spot a request you never made. Cancelling costs nothing.
During the delay
The backup wallet can rescue everything
It can cancel, or move everything to itself. Only while a withdrawal is pending.
After 24h
Execute
Nothing was cancelled, so the withdrawal goes through. A 0.10% fee applies, waived for $HILT stakers.
No oracle, no market hours, no KYC. The delay is the only rule.
Protection
What the fort holds. And what it cannot.
Hillfort is one layer of defence, not a promise. This is exactly where the line is.
What it protects against
- A stolen seed phrase used in a hurry.
- A malicious signature.
- A compromised hot wallet.
- A drained connected device.
- Your own impulsive 3am withdrawal. You can cancel it.
- Losing your keys, with the silence clause and a backup wallet.
What it does not protect against
- Smart contract bugs. The contracts are unaudited and not deployed.
- An issuer pausing or freezing a Stock Token.
- Both the owner and backup keys being compromised.
- Tokens kept outside the vault.
- Ignoring a pending withdrawal for the full delay.
- A backup wallet on the same seed phrase as the owner.
Who it is for
Built for the patient owner.
The rules are the same for everyone. Only the settings differ.
The long-term holder
Keeps Stock Tokens for years and wants a thief to fail, even one holding the seed phrase.
What to setA longer delay, up to 7 days.
The careful trader
No market hours: the vault never asks the time. Cancelling is free, so a 3am mistake costs nothing.
What to setThe default 24h delay.
The family
If the keys are lost, the backup wallet can recover the vault after 12 months of silence and a 30-day public notice.
What to setSilence clause on. A backup wallet the family can reach.
$HILT
$HILT is not launched yet. Launching soon.
The withdrawal fee of 0.10% is waived for wallets staking $HILT. Cancel and rescue are always free.
Where the fee goes
- Buy and burn
- 50%
- Stakers
- 30%
- Treasury
- 20%
The contract address will only ever be posted on @Hillfortrh.
FAQ
Questions, answered plainly.
The short version of the most common ones. The docs hold the rest.
Can I shorten the delay?
Yes. Shortening waits for the current delay before it applies, so nobody can shorten it in a hurry. Lengthening is immediate.
What if I lose my keys?
Turn on the silence clause. After 12 months without any owner action, the backup wallet can start a claim. A 30-day public notice follows, and any owner action cancels it.
What does it cost?
A 0.10% fee on executed withdrawals only, waived for $HILT stakers. Cancelling and rescuing are free.
Can the team move my funds?
No. The vault is non-custodial. Only the owner and the backup wallet can act, and only in the ways the contract allows.
Is it live?
Not yet. This is a preview. The contracts are not deployed and unaudited, and $HILT is not launched.
Preview
Raise your vault. Nothing leaves it in a hurry.
In the preview you only sign messages. No transaction is sent and nothing moves.
Contracts not deployed · $HILT not launched · Unaudited