Multisig claims —
no single heir moves funds alone.
Your heirs collectively unlock the vault. Pick any threshold from 2-of-2 up to 10-of-10. Per-share basis points sum to 10,000. Contract enforces it all.
The safest inheritance architecture is the one where no single person can cash out unilaterally. HeirVault uses Ethereum-style M-of-N multisig for heir claims, with heir-specific commit-reveal protection against frontrunning.
Sign, wait 20 minutes, execute, pull. Every step logged on-chain, auditable by every heir, every guardian, and you.
Key features
Any M-of-N you want
2-of-3, 3-of-5, 5-of-7 — configure at vault creation. Up to 10 heirs per vault. Thresholds enforced by the contract, not by trust.
Basis-point precision
Heir shares sum to exactly 10,000 bps (100%). Split 33.33% / 33.33% / 33.34%, or 50% / 30% / 20%, or any distribution you want.
Commit-reveal anti-frontrun
20-minute delay between commit and execute blocks MEV bots and compromised-heir frontrun attacks. Audited by OpenZeppelin.
Pull-based withdrawal
Each heir pulls their share post-execute. Reentrancy-proof by design — no outward call in the claim path.
The flow
- 01
Heirs initiate
Any heir can call initiateClaim after the owner's deadline passes. The claim enters a signature-collection phase.
- 02
Heirs sign
Each heir signs off-chain (EIP-712). Signatures collected on-chain until the M threshold is reached.
- 03
Commit (20 min)
The final signer calls commitExecuteClaim. A 20-minute window starts — frontrun protection window.
- 04
Execute
After the window, any heir calls executeClaim. Snapshot-based withdrawal entitlements are locked in.
- 05
Pull
Each heir calls withdraw to pull their share — pull-based, reentrancy-proof. Take stablecoins, ETH, NFTs, whatever's in the vault.
Questions
Frequently asked
How do I choose M-of-N for my family?
Rule of thumb: 2-of-3 for most families (lose one heir, still inherit). 3-of-5 for family offices with independent oversight. 2-of-2 if your heirs live together. The contract supports up to 10 heirs with any threshold where M <= N.
What is commit-reveal and why 20 minutes?
Commit-reveal is a two-step execute: the last signer calls commitExecuteClaim, waits 20 minutes, then calls executeClaim. That 20-minute window prevents MEV bots or a compromised heir-wallet from frontrunning the payout. It also gives other heirs a final chance to review.
Can heirs claim individually?
Each heir pulls their own share after the claim is executed. But initiating and signing the claim requires the full M-of-N threshold. This prevents any single heir from dragging others into an unwanted distribution.
What happens if a signer is unavailable?
As long as you meet the threshold, you're fine. With 2-of-3, even one unavailable heir doesn't block inheritance. Design the threshold for the worst realistic case: illness, travel, lost keys.
Can heirs change shares later?
No — heir shares are fixed at vault creation (sum to 10,000 basis points). The owner can adjust before any claim is initiated, but heirs themselves never reshuffle.
No single heir. No single point of failure.
Set up your heir multisig in the vault wizard. Any M-of-N, any share distribution. Testnet is free.
Create a multisig vault