Held by Safe
Your vault is a Safe smart account, version 1.5.0, the contracts many funds and organisations use to hold crypto. Fortcore pins the exact Safe release it deploys. Safe's track record belongs to Safe's code; it doesn't vouch for Fortcore's own contract, so we don't lean on it.
Sealed shut
| Part of the Safe | In a Fortcore vault |
|---|---|
| Owner | One seal contract that can't sign anything and can't call the Safe |
| Owner transactions | Every one rejected, by a guard that can't be changed |
| Fallback handler | None |
| Modules | Exactly one: your vault's own contract, the Keep |
| Later changes | None to the owner, modules, guards, handler or Safe version |
A vault deployed any other way isn't a Fortcore vault. Approvals, other modules, delegate calls after setup and gas refunds can't move or change anything.
One contract holds every rule
Each vault has its own Keep: one contract, never upgraded, that holds your keys, waits, limits, homes and roles, and checks every signature itself. Anyone can pass it a signed instruction, but it acts only on what your keys, or a role you granted, actually signed.
The only thing it can send
For each transfer, the Keep checks who signed and that the wait is over, sets the amount aside, and allows exactly one call: a plain transfer of that token, or ETH, to the recipient you signed for. If the transfer fails or returns anything unexpected, the whole transaction is undone. There is no approval, batch call, permit or arbitrary call to slip in, and whoever submits the transaction can't choose where the money goes.
Deployed exactly as you signed it
At setup your phone signs a description of your vault: its network, address, keys, home and settings. The factory deploys exactly that, sealed, in one transaction, or nothing at all. A relayer can submit it but not change it, and a half-finished or altered deployment gives nobody any power. Your vault lives on Base only, and its address never changes.
No upgrades, no special versions
- A funded vault is never upgraded. A new Fortcore version means a new vault, reached by an ordinary withdrawal or a return home.
- Free, Protect and Private run the same contract. Paying adds people and services, not different code.
- The Keep calls nothing outside your vault except token transfers and price feeds.
When prices can't be trusted
Instant withdrawals rely on Chainlink price feeds on Base. If a price is more than an hour old, or Base's sequencer is down or less than an hour back, instant withdrawals stop and every withdrawal counts as crossing the half rule. The half rule itself counts tokens, not dollars, so it never depends on a price.
Questions
Can Fortcore upgrade my vault?
No. The Keep can't be upgraded and the Safe can't be changed. Moving to a newer Fortcore means opening a new vault and moving your savings to it.
Is Fortcore secure because it uses Safe?
Safe holds the money, and the seal makes sure only Fortcore's own contract can move it. That contract has to stand on its own: Safe's record doesn't vouch for it.