Three kinds of instruction, nothing else
| Kind | What it covers |
|---|---|
| Withdrawals | Sending an amount of one token to one address, cancelling a withdrawal, and your daily amount |
| Settings | Phones, your restore key, your FortCard, homes, roles, inactivity, strict settings, locks and unlocks |
| Closures | The ways your savings go home, and switching a return between your homes |
There are no approvals, permits, delegations, batch calls or signed messages. The contract rejects anything outside these three kinds, and a signature made for one kind is never valid for another.
Why a drainer has nothing to take
A drainer works by getting your wallet to sign something that hands over control: an unlimited approval, a permit, or a message that moves tokens later. Your vault can't produce any of those. It doesn't connect to websites, swap, bridge or hold NFTs, and it holds no approvals for anyone to use.
Your face, not your passcode
- Your phone key is made in your phone's Secure Enclave or StrongBox, and it can't be exported or copied.
- It opens only with a face or fingerprint enrolled on that phone, never the passcode, and asks again for every signature.
- Opening the app leaves nothing behind that another app could reuse.
- If the enrolled faces or fingerprints change, the key stops working, and re-adding the phone waits 48 hours, or 12 with a FortCard.
Every signature is bound to one thing
Each instruction your phone signs names the network, your vault, the contract version, the action and its details, a one-time ID and a deadline. It can't be replayed on another vault or network, used twice, or submitted after its deadline. The app, the exit kit and the contract build the same message from the same instruction, so what you approve is what the contract checks.
What a signature can't prove
On-chain, a signature proves that your phone key signed. It can't prove that your face was in front of it, or what the screen showed. That's why large and new withdrawals also wait, and why every phone and your email are told about each one. You can still approve a wrong transfer yourself: the wait is there for that.
When you deposit from a wallet
Fortcore asks your wallet for a plain transfer to your vault, never an approval, a permit or a message signature. Anyone who asks your wallet for one of those isn't Fortcore. Depositing safely.
Questions
Can I connect my vault to a dApp?
No. The vault can't connect to websites, swap, bridge or hold NFTs. Use your everyday wallet for that, and keep your savings in the vault.
What if a site asks me to sign a message for Fortcore?
It isn't Fortcore. Fortcore never asks your wallet to approve, permit or sign a message, and never sends you an address.