Try the demoOpen app
On-chain security vault for Solana and Ethereum · testnet beta

Crypto that can't be taken in a hurry.

Ecrin is a vault where nothing leaves without a delay you choose. A drainer, a phishing signature, a stolen key or a bad night all hit the same wall: time. You see it coming, and you cancel.

Open the appTry the demo, no wallet
  • Non-custodial
  • Rules enforced by Solana
  • Cancel any time
  • Open source
The problem

On Solana, a transfer is final in under a second.

One bad signature, one leaked seed phrase, one person standing over you, and it's gone before you understand what happened. Every one of these attacks needs your money to move now. Ecrin is built so it can't.

Wallet drainers

A fake mint or airdrop asks you to sign. Your vault isn't in your wallet's reach: the most a signature can do is ask to withdraw, and that waits.

Normal wallet: gone in one blockEcrin: queued, you cancel

Phishing

A copied support page, a fake connect screen. Even if you approve the wrong thing, a withdrawal to a new address sits in plain sight for days.

Normal wallet: no undoEcrin: days to notice

Stolen keys

A thief with your seed phrase still has to wait out your delay, and can't loosen a rule or name their own guardian without waiting too. You cancel each request, and your guardian can help you move out.

Normal wallet: emptiedEcrin: they can't cash out

Someone forcing you

Being pressured in person or over a call is a real crypto risk. No one can make the vault pay out on the spot, because you can't either.

Normal wallet: one tapEcrin: "it takes 3 days"

Your own 3 a.m.

Panic selling, revenge trades, a casino at the end of a long night. The urge passes long before the delay does, and the cancel button is right there.

Normal wallet: instant regretEcrin: sleep on it

See it for yourself.

Request a withdrawal on devnet with test SOL, watch the clock, then cancel it.

Open the app
A bad day, with Ecrin

The attack works. The money still doesn't move.

Before

All quiet.

Your savings sit in the vault. Your own trusted addresses can be paid instantly; everything else has to wait.

0:00

Your key leaks.

A thief signs a withdrawal of everything to their own address. On a normal wallet, this is the end of the story. Here, Solana itself queues it for your delay, and it shows up with a countdown.

0:20

You press Cancel.

Free and instant. Then you get out on your terms: pay your own trusted address, or request a withdrawal to a fresh wallet and have your guardian release it on the spot.

72:00

Nothing was taken.

The thief can't shorten the delay, add their address as trusted, or name their own guardian without waiting days. A key can make the rules stricter, never looser: at worst it freezes the vault, it never empties it.

Compared

A hardware wallet protects your key. Ecrin protects your money.

They work best together: sign for your vault with a hardware wallet, and both have to fail before you lose anything.

Hot walletHardware walletEcrin vault
You sign a drainer by mistakeLostLostCancel it
Your seed phrase leaksLostLostTime to react
Someone forces a transferInstantInstantDays away
A 3 a.m. impulseInstantInstantSleep on it
Paying your own accountsInstantInstantInstant to trusted
Undo a mistakeNeverNeverAny time before it runs
How it works

Three ways out. Only your own addresses are fast.

01

Trusted addresses

Your exchange account, your bank off-ramp, your cold wallet. Money sent here arrives instantly. Adding a new one waits days, or needs your guardian.

Instant
02

Any other withdrawal

Waits out your delay, from 1 hour to a year, before anyone can run it. You can cancel at any moment, for free.

Your delay
03

Loosening a rule

A shorter delay, a higher limit, a new trusted address, any guardian change: these wait days. Making rules stricter applies at once.

Days
  1. Create a vault. A program account on Solana that only your wallet controls. Ecrin never touches your keys.
  2. Pick your protection. Gentle, Strong or Locked, add your trusted addresses, and optionally a guardian.
  3. Live normally. Pay your own accounts instantly. Everything else waits, and you can always change your mind.
Features

A few strict rules. Enforced by the chain, not by us.

Withdrawal delay

Every withdrawal to a new address waits out a delay you choose, with a live countdown you can watch.

One-tap cancel

Anything queued can be cancelled until the moment it runs. It costs a fraction of a cent and takes a second.

Trusted addresses

Up to 8 places your money can go instantly. New ones take days to add, so no one can sneak one in.

Guardian

Someone you trust can approve a real emergency early. They can never start a withdrawal or choose where money goes.

Lock until a date

Nothing leaves before the date you pick. Only a guardian-approved emergency opens it early.

Daily limit

Cap how much can leave in a day, trusted sends included. Lowering it is instant; raising it waits.

Protection levels

Choose how strong. Change it any time, slowly.

Gentle

Everyday savings with a safety net.

  • Withdrawals wait 24 hours
  • Looser rules wait 3 days
  • Guardian optional
Recommended

Strong

For the money you really can't lose.

  • Withdrawals wait 72 hours
  • Looser rules wait 7 days
  • Guardian for emergencies

Locked

For savings that must not move.

  • Nothing leaves before your date
  • Emergency exit with your guardian
  • Looser rules wait until the date
Security

The rules live on Solana, not in an app.

Close the website, delete the app, import your key somewhere else: the program still enforces every delay. Here is every shortcut we know of, and why it fails.

Way around itWhy it fails
Import your key into another walletThe key can only request a withdrawal. The program still enforces the wait.
Turn the rules offLoosening any rule waits days, and never before a lock ends.
Add the attacker's address as trustedNew trusted addresses wait days, or need your guardian's approval.
Name a second wallet as guardianAny guardian change waits days, so no one can approve their own withdrawal.
Sell a receipt token for instant SOLUnlike liquid staking, there is no token to sell.
The developer changes the codeThe program will be made immutable after its audit.
Open source

Every line is on GitHub.

Tested on every change

Rule tests, plus on-chain tests against a real Solana validator, on every push.

Non-custodial

Ecrin never holds your keys or your funds. Only your wallet can request a withdrawal.

Not audited yet

Devnet only, with test SOL. Mainnet comes after an independent security audit.

Roadmap

Security first. Then make the safe place the best place.

Now

Devnet beta

  • SOL and ETH vaults with delays, trusted addresses, guardian, lock and daily limit
  • Live countdown and one-tap cancel
  • Open source, tested on a real validator
Next

Alerts and tokens

  • Email and Telegram alerts the moment anything is requested
  • USDC and other SPL tokens
  • Independent security audit
Later

Mainnet and yield

  • Mainnet with deposit caps at first
  • Native SOL staking inside the vault: earn yield, keep every delay
  • Opt-in lending, only after its own audit
Who it's for

Anyone whose savings shouldn't be one tap away.

Long-term holders

Keep a cold stack that drainers, phishing and leaked keys can't reach in time, and still pay your own accounts instantly.

People stepping back from gambling

Ecrin started here. Put real time between an urge and your savings, with someone you trust as guardian.

Families and small teams

A treasury where no single bad day, or single person, can move everything at once.

If gambling is hurting you right now, you're not alone. Search for your country's gambling helpline; most are free, confidential and open all night.

FAQ

Questions, answered.

Is my money safe? Who holds it?

Your funds sit in a program account on Solana tied to your wallet. Ecrin never has your keys and can't move your funds. Only your wallet can request a withdrawal, and only the program's rules decide when it can run.

What if someone steals my key?

They can only ask to withdraw, and that waits your full delay, so cancel each request before it runs (alerts that tell you right away are next on the roadmap). To move out, pay one of your trusted addresses, or request a withdrawal to a fresh wallet and have your guardian release it at once. A stolen key can make your rules stricter but never looser: it can't add its own trusted address, shorten a delay or name a guardian without waiting days, so at worst your funds are frozen, not taken. That's why we recommend a guardian on Strong.

What if I have a real emergency?

Your guardian can co-sign a withdrawal you already requested so it runs immediately. They can't start one, change the amount or pick where it goes. You can also always pay your trusted addresses instantly.

Can my guardian take my money?

No. A guardian can only approve something you asked for: an emergency release of your own withdrawal, or a trusted address you proposed.

Will I be able to earn yield?

That's the plan: native SOL staking where the stake stays inside the vault, so you earn rewards without creating a fast way out. It comes after the audit.

What can I store?

SOL on Solana devnet and ETH on Ethereum Sepolia during the beta. USDC and other tokens are next.

Does it cost anything?

The devnet beta is free, using test SOL. You only pay normal Solana network fees, a fraction of a cent.

Is it live on mainnet?

Not yet. Ecrin is on Solana devnet while it's being tested. Mainnet comes after an independent security audit, with deposit caps at first.

Why "Ecrin"?

An écrin is the case that keeps something precious safe. That's the whole idea.

Give your savings the one thing attackers don't have: time.

Try it with test SOL on devnet, or play with the demo first.

Open the appTry the demo