FAQ

Short answers. Each one points to the page with the long version.

Because speed is the thief's only advantage. A stolen key empties a normal wallet in seconds. In a Hillfort vault every withdrawal has to wait, in public, and during that wait you or your backup wallet can cancel it. The delay turns an instant loss into a race you are set up to win. See The problem.

Can I shorten the delay?

Yes, within the bounds: 6h to 7 days. Shortening waits for the current delay to pass first, so a thief cannot shorten it and withdraw in one move. Lengthening applies at once. See How it works.

What if I need my tokens right now?

Then the vault is doing its job. The shortest delay you can set is 6h, and that change itself waits for the current delay. Keep what you may need quickly outside the vault, and treat the vault as the place for what you do not want to lose.

Does it work when the market is closed?

Yes. The vault has no market hours, no oracle and no price feed. A delay is measured in time and nothing else, so a withdrawal requested on a Saturday executes when the delay ends, not when a market opens.

Keys and recovery

What if I lose my keys?

If the silence clause is on, after 12 months without any owner action the backup wallet can start a claim, wait 30 days of public notice and take over the vault. If it is off, a lost owner key means a lost vault, because the backup wallet can only act while a withdrawal is pending. Turn it on when you create the vault if this matters to you.

What if the backup wallet is compromised?

On its own, the backup wallet can cancel a pending withdrawal and rescue the vault to itself, but only while a withdrawal is pending. If you suspect the backup wallet, request a change to a new one. The change waits for the current delay and the old backup keeps its powers until then, so do not request any withdrawal during that window. See The backup wallet.

Does the backup wallet need to be a hardware wallet?

It should be a separate cold wallet: its own seed phrase, ideally its own device, kept offline. The one rule that matters most: never derive it from the same seed phrase as the owner wallet. See What Hillfort protects against, and what it does not.

Can the team move my funds?

No. Hillfort is non-custodial. Only the owner wallet and the backup wallet can act on a vault, and the contract enforces that. There is no team key over your assets.

Money

Is there yield?

No. Assets in the vault are idle in this version. There is no lending, no staking of your tokens and no trading inside the vault. Holding slowly is the only feature.

What does it cost?

One fee: 0.10% on withdrawals that execute, waived for wallets that stake $HILT. Deposits, requests, cancelling, rescuing and settings changes are free. Network gas applies on mainnet. See Fees.

What about an issuer freeze?

Stock Tokens and USDG are issued by companies that can pause or freeze them. Hillfort cannot override an issuer, and a frozen token is frozen inside the vault as well. See What it does not protect against.

The preview

What is preview mode?

The app before the contracts exist. Every action is an EIP-712 signature from your wallet, the vault's state is stored in your browser, and a clock control lets you fast-forward through delays. Nothing is sent to the chain and nothing is protected. See Preview vs mainnet.

Which wallets can I use?

Any wallet that can connect to a website and sign typed messages, such as a browser extension wallet or a mobile wallet that supports WalletConnect. On mainnet the wallet will also need to support Robinhood Chain, and the app offers to add the network.

Which chain?

Robinhood Chain, chain ID 4663. The parameters are listed in Preview vs mainnet.

Is KYC required?

No. Hillfort is a smart contract. There is no account, no sign-up and no identity check. Your wallet is the only credential.

Trust

Is it audited?

No. The contracts are not deployed and have not been audited. Hillfort is a preview, and nothing on this site should be relied on until an audit is published. See Risks and disclaimers.

Is $HILT live?

No. $HILT has not launched. There is no contract address, and the address will only ever be posted on @Hillfortrh. See $HILT.

FAQ