The problem
A wallet on a blockchain has no pause button. Whoever holds the key can move everything, at once, and nothing can bring it back.
A key is a bearer instrument
Your wallet is controlled by a private key, a secret string of characters. Anyone who learns that secret is, to the blockchain, you. There is no second check, no name on the account and no branch to call.
Keys leak in ordinary ways. A phishing page that looks like a wallet. A fake support agent. A seed phrase photographed and backed up to the cloud. Malware that reads the clipboard. None of these needs a sophisticated attacker.
A signature can be a trap
You do not even need to lose the key. Wallets ask you to sign messages and approve transactions all day, and a malicious page can present a signature that looks harmless and is not. One approval can give a contract the right to pull tokens from your wallet whenever it likes.
Seconds, not days
Once a key or an approval is in the wrong hands, the drain is automated. Bots watch for funded wallets and empty them within moments. By the time you notice, the tokens have been swapped, bridged and split across new addresses.
There is no undo. There is no fraud department. A transaction that was validly signed is final, and the chain does not care who signed it.
Exchanges pause, self-custody does not
A traditional exchange or broker reviews large withdrawals, holds them for a while and emails you about them. That friction is annoying, but it is also the reason a stolen password rarely empties an account overnight.
Self-custody removes the middleman and, with it, the pause. You get full control and zero delay, for you and for anyone who gets your key.
What Hillfort adds
Hillfort puts the pause back, but it hands the control to you instead of a company.
Assets sit in a vault that only your wallet can open. Every withdrawal has to be announced first, and then it waits: 24h by default. While it waits, the request is public, and you or your backup wallet can cancel it.
A thief with your key can still start a withdrawal. They cannot finish it quickly, and they cannot stop you from cancelling it. The one thing a thief relies on, speed, is gone.
Hillfort does not make a key impossible to steal. It makes a stolen key much less useful. The rest of the design follows from that, and How it works walks through it piece by piece.
