Security
Security you can verify, not just trust.
FORTCORE is designed so that the worst we could do is nothing. We hold no keys, have no authority over your funds and add no custom contracts to the part that holds your money.
Protection
What protects your vault
Every guarantee is enforced on-chain by the vault itself, not by a promise from us.
| What you get | How it is enforced |
|---|---|
| Two of three keys approve anything important | A Safe smart account with three owners and a threshold of two. |
| One key can only ask to withdraw, then wait | The Zodiac Delay module on your Safe. Only your main key can queue a withdrawal, with a cooldown of 24 to 72 hours (48 by default). |
| Backup and recovery keys can do nothing alone | They are owners of the Safe but not modules of the Delay. FORTCORE's monitor flags the vault if that ever changes. |
| Two keys withdraw or cancel at once | Standard Safe transactions signed by two owners. |
| A lost key can be replaced | A two-key Safe transaction swaps the key. Replacing the main key also moves its Delay permission to the new one. |
| You're told about every change | An off-chain monitor checks your vault every minute and alerts you by email, Telegram or signed webhook. |
| FORTCORE can't lock you in | FORTCORE is never an owner or a module of your vault. You can operate it and exit with Safe{Wallet} or a block explorer. |
Non-custodial
What FORTCORE can never do
- See, store or ask for your private keys or seed phrase.
- Move, freeze or spend your funds.
- Approve a transaction or cancel a withdrawal for you.
- Become an owner or a module of your vault.
- Stop your vault working if FORTCORE goes offline.
Built on established parts
No custom contracts
Your vault is a standard Safe smart account (v1.4.1) with the Zodiac Delay module (v1.1.1). Both are open-source and widely used, and Safe's contracts are publicly audited.
FORTCORE deploys nothing of its own. Contract addresses come from the official deployment registries and are checked to have code on every supported network, so the part that holds your funds stays small, public and well understood.
Honest limits
What a vault doesn't change
Good security tells you where it stops. These are the limits of the model.
- A stolen everyday key can only queue withdrawals. You have the whole waiting period to cancel with two keys.
- A stolen backup or recovery key can do nothing on its own.
- Two compromised keys are equivalent to full control. Keep your keys on different devices, in different places.
- Queued withdrawals complete in order, so cancelling one also cancels any that were queued before it.
- Vault keys must be regular wallet addresses, such as software or hardware wallets, not smart contracts.
Your way out
An exit kit that works without us
Your vault belongs to you. The exit kit is generated in your browser and contains everything needed to reach it with standard tools.
- Your vault's addresses, owners and roles.
- Delay settings and contract versions.
- Step-by-step instructions to send, cancel, recover or remove the delay using Safe{Wallet} or a block explorer.
Your account
Account and website security
- You sign in with a one-time email code, so there is no password to leak or reuse.
- Wallet signatures are free messages. They prove ownership and give FORTCORE no authority over your funds.
- You can review your signed-in devices and sign any of them out from your account.
- Every sensitive action is recorded in an audit log.
- The site is served over HTTPS only, with strict security headers and a nonce-based content security policy.
Further reading
Want the bigger picture?
Our guides explain the threats and how a vault fits into a safe setup.
Keep your savings where one key isn't enough.
Free to use. Setup takes a few minutes with the wallets you already have.
Non-custodial. We never hold your keys or funds.