Your funds stay in your own contract
Every plan is a separate smart contract (an EIP-1167 clone) created by the CronVault factory on Arbitrum. Deposits sit in that contract — never in a CronVault wallet, exchange account or server.
The factory has no owner and no admin functions: anyone can create a plan, and nobody can alter one. A vault has no setter, no upgradeable proxy, no pause switch and no emergency withdrawal. Money leaves a vault only through the rules its creator signed: a beneficiary’s claim, the transfer of the remainder after the last period, or — only for plans signed as cancellable — the creator’s own cancellation or withdrawal before the plan activates.
What your signature covers
You authorise a plan with one EIP-712 typed-data signature (domain “CronVault”, version 1, bound to the chain ID and the factory address). It covers every field: creator, plan name, asset, period length and unit, time-zone offset, start time, claim window, number of periods, amount mode and amount, growth, inactivity period, remainder recipient, whether the plan is cancellable and its notice period, every beneficiary and share, plus a salt and a deadline.
Change any field and the signature no longer verifies. One signature creates at most one vault, only before its deadline and only on that chain. Smart-contract wallets such as Safe can sign through ERC-1271.
What the CronVault servers do — and cannot do
- Index public on-chain events so the website can list plans quickly. The index holds nothing that is not already on-chain and can be rebuilt from the chain at any time.
- Relay (optional): submit your signed plan and pay the gas to create it. The relayer cannot change a single field — the factory would reject the signature.
- Serve the website. It never asks for, receives or stores private keys or seed phrases.
- None of these can move, freeze or redirect funds. If the website goes away, vaults keep working: beneficiaries can call
claim()from a block explorer or any other interface.
Verify it yourself
- Before signing, check that your wallet shows the domain CronVault and that the verifying contract is the factory address listed on this page.
- Each vault page recomputes the plan digest and recovers the signer in your browser, proving the on-chain rules are exactly what the creator signed.
- Every deposit, claim, check-in and cancel/withdrawal request is a public event you can inspect on the block explorer.
Risks you accept
- Smart-contract risk. The contracts are covered by extensive automated tests but have not yet been independently audited. A bug could lock or lose funds, and a deployed vault cannot be repaired. Start with amounts you can afford to lose.
- Lost keys. If a beneficiary loses their wallet before moving their entitlement to a new one, their share can never be claimed. If you use the check-in switch and lose your own wallet, the plan activates when the deadline passes.
- Stolen creator key. Whoever holds the creator key of an irrevocable vault still cannot withdraw from it. In a cancellable vault a thief could request a cancellation or withdrawal before activation; the notice period makes the request public, but beneficiaries cannot block it.
- Missed windows. A period not claimed within its window is forfeited by design. A network outage, a lost phone or simple forgetfulness can cost a period — choose generous windows, or arrange for someone to claim on the beneficiary’s behalf.
- Asset risk. Token issuers can freeze addresses: Circle (USDC) and Tether (USDT) can block a vault or a beneficiary. A blocked beneficiary receives nothing until they move their entitlement to another wallet. Stablecoins can lose their peg, and the price of ETH is volatile.
- Network risk. CronVault depends on Arbitrum. A sequencer outage can delay transactions, and Arbitrum’s own upgrade and security model applies.
- Time. Opening times use block timestamps and the fixed UTC offset chosen at signing; they do not shift for daylight saving time.
- Legal. A vault executes its code regardless of court orders, tax rules or family agreements. It is not a legal will.
Protect yourself from scams
- CronVault will never ask for your seed phrase or private key, and will never message you first.
- Nobody can “unlock”, “speed up” or “recover” a vault for a fee. A vault only does what its signed rules say.
- Check the address bar before connecting your wallet, and bookmark the official site.
This deployment
- Network
- CronVault Testnet
- Chain ID
412346- Factory contract
0x5FbDB2315678afecb367f032d93F642f64180aa3