Live on 7 EVM networks · Non-custodial

The wallet that cannot spend your money without you.

Swap, bridge, rest orders at your own price and automate recurring buys — while every key stays split across your own device. The server quotes routes and builds transactions. It has never held a signature.

2-of-3 MPC · Secure enclave · 48h recovery time-lock · 100% contract coverage
/portfolioDESIGN PREVIEW
PortfolioRead live from the chain
Total value
—
No wallet connected
Networks
7
One portfolio, every chain
Key custody
ON DEVICE
2-of-3 shards, never whole
EthereumChain ID 1—
OptimismChain ID 10—
BNB Smart ChainChain ID 56—
PolygonChain ID 137—
What It Does

Built, not announced.

Everything on this page is in the app today. Nothing here is waiting for a launch date.

Ghost Orders

Sign one order that names its own floor and walk away. A fixed order rests at your price; a decaying one starts above it and falls on a schedule you signed. Placing it costs no gas.

LIVE
One quote, nothing hidden

The aggregator’s cut and the protocol fee are added together and shown as a single percentage — not two rows you are left to total yourself.

LIVE
Recovery you can cancel

Guardians submit Shamir shards to a threshold you chose. A 48-hour time-lock, enforced on chain by RecoveryGuard.sol, lets you stop one you did not start.

LIVE
Autopilot

Buy weekly or send monthly from one signature. The plan names its spend, its cadence and the least you accept per run — a keeper can do that and nothing else.

LIVE
Gas in any token

EIP-7702 keeps your existing address, batches actions into one signature, and lets a paymaster take the fee in an ERC-20 instead of the native coin.

LIVE
Simulated before you sign

Value-moving transactions are simulated against the network that will run them, and screened against the phishing blocklist. A chain that cannot simulate says so.

LIVE
EthereumOptimismBNB Smart ChainPolygonBaseArbitrum OneAvalanche
Routing

One quote. Nothing hidden.

Routes are priced through a meta-aggregator that reaches the pools and bridges across every supported network, and the transaction it returns is signed on your device. The helper server never holds a key.

🧾
One fee, stated once
The aggregator’s cut and the protocol fee are added together and shown as a single percentage of what you are selling. No two rows to total yourself, and no figure quoted smaller than what actually leaves the wallet.
🛡️
Private broadcast where it is set up
A network configured with a private relay sends value-moving transactions through it instead of the public mempool, and the app says which networks those are rather than implying it everywhere.
⛽
Ghost Orders cost no gas to place
Signing an order is free. A keeper pays the gas to fill it and takes a capped reimbursement out of the proceeds — a cap that is inside the order you signed, so it cannot be raised afterwards.
🌉
Cross-chain in one flow
A bridge is two transactions on two chains, and the app reports them separately — including the state where the source leg confirmed and the destination has not, plus the refund path if it fails.
WHAT A QUOTE SHOWS YOU
Minimum receivedThe floor the transaction itself enforces, not an estimate
Total feeAggregator plus protocol, added up, as one percentage
Network feeEstimated gas, in the coin it will actually be paid in
RouteWhich provider is filling it, and across how many steps
Price impactMeasured from the quote, and flagged when it is large
Security Architecture

Built for paranoid people. That's a compliment.

Every security decision was made before the first line of code. No retrofits, and nothing here is a setting you have to find and switch on.

🔑
2-of-3 MPC Key Splitting
Your private key is split into 3 shards using threshold cryptography the moment it is derived. It is never stored whole — not in memory for more than a single signing operation.
noble-curvesnoble-hashesAES-256-GCM
📱
Secure Enclave Signing
On mobile, all signing operations happen inside iOS Secure Enclave or Android StrongBox TEE. Key material never touches the application layer.
CryptoKitKeystoreBiometricPrompt
🌐
WebCrypto Non-Extractable Keys
In the browser, private key material is stored only as non-extractable WebCrypto CryptoKey objects. No private key ever touches localStorage, sessionStorage, or any extractable form.
WebCrypto APIIndexedDBDexie.js
🔮
Simulated Before You Sign
A value-moving transaction is simulated against the network it is about to run on, so you see what it does before you approve it. The recipient is screened against the phishing and contract blocklists at the same time, and a network that cannot simulate says so instead of staying quiet.
eth_callGoPlusBlocklist
📋
Gated, Not Promised
100% line and branch coverage is a hard CI gate on the contracts and the cryptography package — nothing merges below it. Slither must report zero HIGH or MEDIUM findings, and a static-analysis rule fails the build if a key, seed or shard reaches a log or an API surface. An independent audit is scheduled before mainnet.
FoundrySlitherSemgrep
Multi-Chain Support

One wallet. Every chain.

One portfolio across every supported network, read live from the chain. Cross-chain swaps are routed for you and executed on your device — the balances you see are the ones the network reports, never a cached guess.

Ethereum
Chain ID: 1
ETH
Optimism
Chain ID: 10
ETH
BNB Smart Chain
Chain ID: 56
BNB
Polygon
Chain ID: 137
POL
Base
Chain ID: 8453
ETH
Arbitrum One
Chain ID: 42161
ETH
Avalanche
Chain ID: 43114
AVAX
Product Roadmap

From foundation to launch.

Three phases shipped, one in progress. Every milestone has an exit gate, and nothing is marked complete until it passes.

✓
Phase 1 · Complete
Foundation & Core Crypto
Monorepo, shared types and design system
BIP-39/44 key derivation
2-of-3 MPC key splitting
AES-256-GCM encryption at rest
Foundry contract pipeline
✓ Shipped
✓
Phase 2 · Complete
Wallet Engine & Accounts
Multi-chain portfolio and transfers
EIP-7702 smart accounts, gas in a token
Social recovery with a 48-hour time-lock
WalletConnect and anti-phishing
Web, extension and mobile on one engine
✓ Shipped
✓
Phase 3 · Complete
Swaps, Bridge & Ghost Orders
Meta-aggregated swap quotes
Cross-chain bridging with a refund path
Ghost Orders: fixed and decaying
One combined fee shown before signing
Keeper settlement and operator console
✓ Shipped
04
Phase 4–5 · In progress
Autopilot & Release
Autopilot: recurring swaps and sends — shipped
Mobile and extension release builds
Independent contract audit
App Store and Chrome Web Store submission
▶ In progress
Get the App

Your keys, wherever you are.

The same non-custodial wallet on your phone and in your browser. Keys are generated and kept on each device — installing NexVault somewhere new never copies them there.

Early Access

Be first. Trade better.

Tell us you want early access to NexVault and we will get in touch when the next build is ready to hand out.

Please enter your first name.
Please enter a valid email address.

This page stores nothing. Your details go straight into an email you send yourself, and no analytics or tracking runs here.