01
Base Layer · LiveInvestment Yield
Safe, diversified staking & lending across top Solana protocols — Marinade, Jito, Lido, Solend. Principal stays locked, yield flows to the hourly payout distributor 24/7.
White Paper · v2.5 · Solana · Updated Q3 2026
The Vault Economy
More Than Staking.
Standard staking only earns yield on what you deposit. $VAULTY creates new money from services, then invests that too — and pays the profits to existing holders every hour.
Chapter 3 · Token Economics & Distribution
Supply, Allocation & Fair Launch
$VAULTY operates with a fixed maximum supply of 1,000,000,000 tokens. Upon deployment, the mint authority is immediately revoked, ensuring absolute scarcity and preventing inflation. The overwhelming majority of supply is distributed directly to the community via a fair Pump.fun bonding curve — no pre-sales, no private rounds, no insider allocations.
Public Circulation
90 – 95 %Fair launch via Pump.fun bonding curve · 900,000,000 – 950,000,000 $VAULTY
No pre-sales · No private rounds · No insider allocations
Project Reserve
5 – 10 %Locked & transparent · 50,000,000 – 100,000,000 $VAULTY
Bonus pool · Ecosystem · Liquidity support · Team (vested)
Decimals 9 · Mint authority revoked · Freeze authority disabled · Inflation impossible
3.1
Supply Parameters
Total supply is hard-capped at 1,000,000,000 $VAULTY with 9 decimals. Mint authority is revoked at launch; freeze authority is disabled. Inflation is mathematically impossible and no actor — including the team — can alter supply.
3.2
Fair Launch Methodology
Distribution uses the industry-standard Pump.fun bonding curve. Equal access for all participants, price discovery driven purely by demand, zero advantage for the founding team. 100 % of capital raised flows directly into the secured Reserve Vault.
3.3
Allocation Breakdown
Public Circulation (90–95 %): the overwhelming majority of tokens are distributed to the community via the launch curve. Project Reserve (5–10 %): a limited, time-locked allocation held in publicly disclosed wallets, used strictly for operational growth, reward programs and long-term ecosystem sustainability — never market manipulation.
3.4
Liquidity & Security Framework
Upon completion of the bonding curve, liquidity is automatically migrated to Raydium. All LP tokens are permanently burned (sent to a non-recoverable address), ownership of the program is renounced and administrative keys are disabled. The result: a trustless, immutable asset, fully protected against rug-pulls or administrative interference.
Fair Launch & Graduation Protocol
🚀 Pump.fun → Raydium → Burned
- 01Pump.fun · FairBonding Curve
Price rises automatically with demand. Every SOL raised flows directly into the Permanent Reserve Vault.
- 02Auto-MigrationGraduation
When the ~$69 K market cap threshold is reached, the protocol auto-creates a Raydium liquidity pool with 100 % of remaining SOL + tokens.
- 03LP Tokens BurnedLock & Burn
All LP tokens are sent to a dead address. Liquidity is permanently inaccessible — to anyone, including the team.
- 04Open MarketLive Trading
Open, free, safe market on Raydium and aggregators. Trading fees feed the Reserve and your hourly payouts.
3.5 Reserve Transparency · All official wallets are published below. Real-time balances are viewable on Solscan, and all reserve allocations are subject to time-locking and vesting schedules.
Official Wallet Registry · Verifiable On-Chain
🔒Permanent Reserve Vault
4qPDiT…DEktLUSolscan ↗Principal locked · Yield only · Source of hourly payouts
🎁Launch Bonus Wallet
—30-day launch reward pool · Pre-funded by dev · Bonus-only
📈Project Reserve (5–10 %)
—Ecosystem · Partnerships · Liquidity support · Vested team ops
🪙Token Mint
D9SGBv…7qpumpSolscan ↗$VAULTY SPL mint · Authority revoked · 1 B fixed supply
All addresses are verified and viewable on Solscan. No hidden wallets. No hidden moves.
Section 1 · Revenue Diversification Strategy
The Four Pillars
A multi-pillar economy designed so the Reserve grows continuously, independent of market conditions. All revenue is non-inflationary and 100% accrues to existing holders.
02
Trading Layer · LiveSwap, Limits, DCA & Cash-Out ATM
Vaulty Swap v2 routes through Jupiter with a 0.25% fee — 100% to Reserve. Limit Orders, DCA accumulation and the Cash-Out ATM (Take-Profit · Trailing Stop · Ladder · Drip) run on-chain triggers with kill-switch and slippage guards.
03
Capital Layer · LiveNFTs, Packs & Pantheon Mint
1,000-supply Pantheon Genesis (4 tiers, USDC mint → Reserve), Multiplier Boost NFTs, Bundle Packs and the secondary marketplace (2.5% royalty → Reserve). Every primary sale and royalty is a non-inflationary capital injection.
04
Service Layer · Phase 05–06Competitions, Launchpad & Services
Holder-gated competitions, premium analytics subscriptions, Launchpad listing fees, Whitelabel Vault-as-a-Service and cross-DEX aggregation. External capital flowing into the holder economy.
Section 1.5 · Live Systems Inventory
What's Already Running
The Vault economy is not a roadmap promise — it is a stack of live, on-chain systems. Every module below is deployed, monitored 24/7 by the Security Operations Center, and routes its fees and revenue into the Permanent Reserve.
VaultLive
Permanent Reserve Vault
Principal locked by smart contract. Multisig + 72h timelock for ops. Real-time balances on Solscan.
YieldLive
Strategy Engine
Marinade · Jito · Lido · Solend. Hourly auto-payout distributor with holder weight & multipliers.
SwapLive
Vaulty Swap v2
Jupiter-routed, MEV-aware quotes. 0.25% fee → 100% Reserve. Slippage cap + price-impact guard.
TradeLive
Limit Orders & DCA
On-chain Trigger API for limits. Interval-based DCA accumulation. Per-wallet rate limits.
ATMLive
Cash-Out ATM (Profit Engine)
Take-Profit · Trailing Stop · Ladder · Drip. Server-side peak tracking, fresh-quote enforcement, kill-switch.
NFTMinting
Pantheon Genesis Mint
1,000 supply · 4 tiers · USDC priced. Provable randomness. 100% of mint USDC → Reserve.
NFTLive
Boost NFTs & Bundle Packs
Multiplier certificates + upgrade packs. Every sale is a direct, non-inflationary capital injection.
MarketLive
Secondary NFT Marketplace
2.5% royalty on all secondary trades → Reserve. Pantheon Holder Lounge sync in progress.
CompeteLive
Holder-Gated Competitions
Verified entry guard against holder weight. Auto-cash-out future wins via Profit Engine wiring.
TelegramLive
Vaulty Mini-App (TMA)
In-Telegram swap, holder verification, notifications. Anti-bot rate limiter + airdrop sender.
SafetyLive
Security Operations Center
Live module status, kill-switch, wallet safety scan, swap protection HUD. 24/7 monitoring with audit log.
AdminLive
Admin Console
Fee manager, swap settings, collection access, profit-engine controls, security feed, full audit trail.
Net result · 12 live systems feeding one Permanent Reserve. Every swap, mint, royalty and pack sale converts user activity into locked principal — which then earns yield that pays existing holders every hour, forever.
Section 2 · Phased Rollout Logic
Build Stability, Then Stack Streams
We don't launch everything at once. We build security first, then add revenue streams one by one — creating multiple 'growth events' where payouts jump as each new stream goes live.
- ✅Phase 00–02Genesis · Foundation · ExpansionPayout potential · 30%
- 🚀Phase 03Pantheon NFT Mint · LivePayout potential · 55%
- ✅Phase 04Trading Stack & Safety Ops · ShippedPayout potential · 75%
- 🔜Phase 05–07Ecosystem · Global Scale · LegacyPayout potential · 100%
Section 3 · Early Holder Advantage
Your Share Is Fixed. The Pie Grows.
- ▸Your profit share is determined by your Total Weight (Balance + Boosts) at any given time.
- ▸When we add a new revenue stream, it does not dilute your share.
- ▸If you hold now, you earn from all future revenue streams forever — without buying more.
- ▸As the economy grows, the value of your share multiplies.
Service Fee
User pays
→
Reserve
🔒 Locked
→
Yield → You
Hourly payout
Every fee becomes principal. Principal becomes yield. Yield becomes your hourly payout — forever.
Section 4 · Long-Term Sustainability
Mathematically Built to Last
Because principal is locked forever and only yield is distributed, the system cannot run out of money, cannot collapse, and only pays out more over time.
Principal
🔒 Locked forever
Yield
💸 Distributed hourly
Lifespan
♾️ Perpetual
Chapter 5 · Revenue Engine
Where The USDC Comes From
The Vault is fed by an entire ecosystem — buy-ins, strategy yield, swap fees, NFT mints, marketplace royalties, mini-game fees, boosts, and partner revenue. Every stream is priced in USDC and 100% of it flows into the Permanent Reserve. Zero team cut, zero leakage.
Revenue Engine · USDC Only · 9 Streams
Where The USDC Comes From
The Vault doesn't rely on one stream — it is fed by an entire ecosystem. Every fee, every sale, every mint, every swap, every ticket, every mini-game is priced and settled in USDC, and 100% flows into the Permanent Reserve. When the economy thrives, the Vault grows. When the Vault grows, every holder earns more.
✓ 100% to Vault✓ 0% Team Cut✓ On-Chain Verifiable✓ USDC = $1 Always
★ Flagship Stream · Competitions Engine
Win Millions.
Build the Vault.
Earn Forever.
Vaulty Competitions are the heartbeat of the ecosystem. Holders enter weekly raffles, daily skill draws, and seasonal mega-jackpots — all settled in USDC, all drawn on-chain, all verifiably fair. A slice of every entry pool seeds the Permanent Reserve, which is autonomously invested across blue-chip Solana strategies and paid back to holders hourly.
Prizes
Millions / season
Drawn
On-chain · VRF
Vault Cut
10% per pool
Holder Yield
Hourly auto
USDC Entry→Prize Pool→Vault Reserve→Auto-Invested→Holders Earn
Vaulty ATM · Live
v3Weekly Mega Draw
Prize Pool
$412,867USDC
02
D
14
H
22
M
07
S
Tickets Sold18,204
1st
60%
2nd-10th
30%
Vault
10%
● On-Chain DrawProvably Fair
All 9 Streams
★ FLAGSHIP
🎟️
Competitions Engine
Raffles · Skill Draws · Mega Jackpots
Flagship engine. Holders enter weekly draws — every ticket is USDC, every cent funds prizes AND the Vault. Designed to pay out millions, fairly, on-chain, forever.
➜ 1 USDC ticket → prize pool + Vault reserve.
100% → Vault→
● LIVE
💳
Holder Contributions
USDC buy-ins & deposits
Every USDC contribution from a new or existing holder lands directly in the Vault — instantly deployed, never idle.
➜ 100 USDC in → 100 USDC working for the pool.
100% → Vault→
● LIVE
🌾
Strategy Yield
Marinade · Jito · Solend · Kamino
The Vault deploys its USDC across the safest, highest-yield protocols on Solana. Profits return as more USDC.
➜ Idle USDC → blue-chip yield → compounds the Vault.
100% → Vault→
PHASE 2
🔁
Swap Fees
Vaulty Swap (0.25%)
Every trade routed through Vaulty Swap charges a small fee — 100% of it captured in USDC and pushed into the Vault.
➜ 10,000 USDC traded → 25 USDC into the Vault.
100% → Vault→
● LIVE
🖼️
NFT Mint Revenue
Multiplier NFTs · Tier Upgrades · Bundles
Every NFT mint — Economist, Banker, Tycoon, Platinum, bundle packs — is paid in USDC. 100% flows into the Vault, zero to team wallets.
➜ Tycoon mint (49 USDC) → 49 USDC into the Vault.
100% → Vault→
PHASE 2
🏷️
Marketplace Fees
Secondary NFT trades (2.5%)
Anytime a Vaulty NFT changes hands on the marketplace, the 2.5% royalty is collected in USDC and routed straight to the Vault.
➜ 200 USDC sale → 5 USDC into the Vault.
100% → Vault→
PHASE 2
🎮
Mini-Game Fees
Telegram ATM · Spin · Quests · Bot mini-app
Every play, spin, ticket, or upgrade inside the Vaulty mini-games is priced in USDC. House edge and entry fees route to the Vault.
➜ 1 USDC ticket → 1 USDC into the Vault.
100% → Vault→
● LIVE
⚡
Boosts & Upgrades
Boost Shop · Multiplier sales
Boosts, multipliers, and tier upgrades purchased in-app are USDC-priced. Every cent of revenue → Vault. No founder skim.
➜ 20 USDC boost → 20 USDC into the Vault.
100% → Vault→
PHASE 3
🤝
Partner Revenue
Integrations · Services · API licenses
When other protocols integrate Vaulty rails, the revenue share is paid in USDC and added to the Vault — strengthening every holder's slice.
➜ Partner fee → USDC → Vault → you.
100% → Vault→
All Streams
9 USDC sources
Competitions · buy-ins · yield · swap · NFT · marketplace · mini-games · boosts · partners
🏦
The Permanent Reserve
100%
Locked · Transparent · TVL Live
Every Holder
Earns USDC
Hourly auto-payouts · multiplied by NFT tier · forever
The Promise
A thriving economy feeds the Vault. A thriving Vault feeds the holders. Every transaction inside Vaulty is a vote of compounding strength — because 100% of USDC, from every system, stays inside.
Chapter 6 · Crystal Ball Analysis
How Wealth Compounds
Understanding the numbers: why early entry is the most powerful advantage in finance. Standard staking earns yield on what you deposit. $VAULTY adds new revenue on top of yield, locks it permanently, and lets early holders ride every future stream — without buying more tokens.
Crystal Ball Analysis
The Mathematics of Growth
At first, returns look small — but because of how the system is engineered, they grow exponentially. We are not just staking. We are building a self-feeding financial machine.
The Base Reality · Standard Staking
$1M TVL · 5% APY = $50k / year
Split across 1,000 holders ≈ $0.14 per person per day. Too small to be exciting, and it never grows significantly. This is the reality for every standard staking project.
Boring baseline
$0.14/day
$VAULTY is different — we do not rely on staking alone.
The 4 Levers of Exponential Growth
Four Layers That Multiply Your Returns
📈
01The Foundation
Optimized Yield
12 – 25% APY
Not a basic 5% stake. Our Strategy Engine actively allocates across the highest-performing, safest protocols — Marinade, Jito, Lido, Solend. This alone lifts daily returns roughly 3× over the standard staking model.
★ Most Important
💰
02The Growth Engine · Most Important
Revenue Streams
$550+ / day → $4M / year
Marketplace fees (2.5%), Vaulty Swap (0.25%), Boost sales, Launchpad partnerships, premium tools. Every service creates fresh new capital that lands in the Permanent Reserve. This is the only mechanism that lets payouts grow exponentially.
🔒
03The Magic
Permanent Compounding
100% locked forever
Other projects let teams take fees or dump them on the market. Here, every dollar collected is locked in the Reserve permanently, invested safely, and generates yield for you every hour — forever. The Vault only moves in one direction: UP.
🚀
04Your Advantage
Multiplier Weight
Up to 3.0× weight
Early believers earn disproportionately. Base holders 1.0×, Economist 1.5×, Banker 2.0×, Tycoon 3.0×. While the average holder earns $1.10/day at Phase 1, a Tycoon earns $3 – $5+ from day one — and that gap multiplies as the Vault grows.
The Flywheel Effect
Each turn makes the next bigger
More activity → more fees → bigger Vault → more yield → higher payouts → more holders → more activity. The loop accelerates, and your share rides every turn.
The Future Trajectory
How the math evolves over time
Phase 1 · Month 1
Launch & Build
- Vault
- $250k – $500k
- Revenue
- Low / Building
- Base Payout
- $0.20 – $0.50 / day
- Boost
- + Launch Bonus +$0.50 – $1.00
Total
$0.70 – $1.50 / day
Solid start. People see the system working. Hype builds.
Phase 2 · Month 3 – 6
Expansion & Volume
- Vault
- $5M – $15M
- Revenue
- $1,000+ / day inflow
- Base Payout
- $5 – $15 / day
- Boost
- Tycoon Holders: $25 – $50
Total
$5 – $50 / day
Life-changing income for early adopters. News spreads virally.
Phase 3 · Month 12+
Maturity & Ecosystem
- Vault
- $50M – $100M+
- Revenue
- $5,000 – $10,000+ / day
- Base Payout
- $30 – $100+ / day
- Boost
- Tycoon Holders: $200 – $500+
Total
$30 – $500+ / day
Fully autonomous financial empire. Payouts grow forever.
Growth Simulation
Vault Size → Daily Payout
| Stage | Vault Size | Avg Daily Payout | Tycoon Daily Payout |
|---|---|---|---|
| Launch | $500k | $0.40 | $1.20 |
| Month 2 | $2M | $1.80 | $5.40 |
| Month 4 | $8M | $8.00 | $24.00 |
| Month 8 | $25M | $30.00 | $90.00 |
| Year 1+ | $50M+ | $80.00+ | $250.00+ |
Conservative estimates based on current yield rates and moderate volume. New revenue streams push these higher.
“Imagine buying a share of a bank when it first opens. Today it makes $100 profit. Next year it makes $1,000,000 profit. You still have your share. You earn on all of it.
This is exactly what you are doing with $VAULTY.— The $VAULTY Crystal Ball
Chapter 4 · Risk & Safety
Industry-Leading Safety Standards
Every standard available on the Solana ecosystem has been implemented. Once launched, $VAULTY is governed entirely by code, not people. It cannot be rugged, it cannot be stopped, and it cannot be changed.
🔒 Safety & Security
Every Risk Point Removed.
Built by professionals, for the community. We have implemented every safety standard available on Solana. Once launched, $VAULTY is governed entirely by code — it cannot be rugged, stopped, or changed.
🪙
Mint Authority REVOKED
No one can ever print more $VAULTY. Supply is mathematically fixed at 1,000,000,000.
✅ ACTIVE❄️
Freeze Authority DISABLED
Wallets cannot be frozen or blacklisted. Trading cannot be paused by anyone.
✅ ACTIVE🔥
Liquidity BURNED
100 % of Raydium LP tokens sent to a dead address at graduation. Liquidity is permanent.
✅ PERMANENT📜
Ownership Renounced
Smart-contract authority keys disabled. The protocol is governed by code, not humans.
✅ RENOUNCED🔒
Principal Locked
Bonding-curve SOL flows into the Reserve Vault. Principal never moves — only yield is paid out.
✅ ENFORCED🧾
Separation of Funds
Launch Bonus, Project Reserve and Permanent Reserve live in independent wallets, on-chain.
✅ ISOLATED🛡️
Anti-Rug Guarantee
No admin can withdraw liquidity, mint tokens, or stop trading. Ever.
✅ GUARANTEED🔍
Fully Auditable
Every wallet, every transaction, every hourly payout visible on Solscan in real time.
✅ PUBLICBuilt by professionals · For the community · Verified on-chain
Chapter 7 · Permanent Security Protocol
Principal Protection & Governance
Engineered for absolute safety today, with intelligent flexibility for tomorrow. Principal is locked by smart contract, operational control sits behind a 2-of-3 multisig with a 72-hour public timelock, and the ultimate destination is full community DAO ownership. A rug pull is mathematically impossible.
🔒 Permanent Security Protocol
Principal Protection & Governance
Engineered for absolute safety today, with intelligent flexibility for tomorrow.
"Principal is permanently secured — not permanently buried."
✅ Vault Stable · No Pending ActionsAll systems nominal · Multisig idle
Section 1
The Core Principle: Locked, Not Buried
A common misconception in crypto is that "secure" means funds are sent to an unrecoverable address forever. While this prevents theft, it also destroys the ability to adapt, upgrade, or protect assets if market conditions change or technology evolves.
$VAULTY uses a superior model. The base capital inside the Reserve Vault is immutable in normal operation — it cannot be withdrawn, sold, or moved arbitrarily. However, the system is designed with built-in governance to allow controlled, transparent, and safe changes when it is in the best interest of all holders.
Section 2
How The System Works — Technical Overview
Layer 1 · Base Security
🛡️Smart Contract Lock
The code is written with strict separation of funds:
- PRINCIPAL: The total capital deposited into the Vault is mathematically locked inside the contract. Under no circumstances can it be withdrawn or distributed as a payout. It remains invested and working forever.
- YIELD ONLY: Only the profits generated by investing that principal are allowed to flow out. These are distributed automatically every hour.
- RESULT: The Vault balance is strictly non-reducible. It only ever increases via new revenue streams or yield compounding.
Layer 2 · Operational Control
⏱️Time-Locked 2 of 3 Multisignature Wallet
To manage strategies, upgrade infrastructure, or reallocate capital safely, the Vault is controlled by an industry-standard 2 of 3 multisig combined with a 72-hour time delay.
Signer 1 of 3
🏛️Core Protocol
Founding team. Operational oversight, day-to-day strategy proposals, infrastructure upgrades.
Signer 2 of 3
🛡️Security Guardian
Independent auditor & technical partner. Code review, risk veto, emergency safety checks.
Signer 3 of 3
🤝Community Representative
Elected early adopter / partner. Holds the community mandate — represents holder interest in every signature.
The Process · How Funds Are Accessed Or Moved
- 1. PROPOSAL. A change is proposed (e.g. "Migrate strategy to higher-yield protocol").
- 2. SIGNATURE. Requires approval from 2 of 3 signers.
- 3. PUBLIC COUNTDOWN. Once signed, a 72-hour timer begins. Broadcast live on homepage, explorer, and socials.⚠️ EXAMPLE: PENDING ACTION · Reallocation of 10,000 SOL · Executes in 68h 14m
- 4. EXECUTION. Only after the full time period has passed can the action occur.
Why this eliminates Rug Pull risk
If anyone ever tried to act maliciously, the moment they propose the transaction, the community sees it immediately. Holders have 3 full days to sell, withdraw, or take action before anything happens. A rug pull becomes mathematically impossible.
Layer 3 · Future State
🤝Decentralized Governance · Full Community Handover
Our ultimate goal is complete decentralization. Once the ecosystem is mature and stable, full control of the Vault will be handed over to the community.
- Governance Model: Weighted voting — 1 $VAULTY = 1 Vote.
- Proposals: Any holder can suggest changes to strategies, fees, or allocations.
- Execution: Only proposals that pass with a 60%+ majority are enacted.
- Result: The protocol becomes a community-owned financial institution. The team becomes contributors; the holders are the owners.
Phase 1ACTIVE
Team-Led + Multisig
2/3 multisig + 72h timelock. Founding team operates; every action publicly delayed and broadcast.
Phase 2TRANSITIONING
Hybrid Governance
Multisig retained for emergencies; non-critical decisions opened to holder snapshot votes.
Phase 3PLANNED
Full DAO Handover
Complete community ownership. 1 $VAULTY = 1 vote. 60%+ majority required to execute any proposal.
Section 3
Anti-Rug & Safety Guarantees
We have implemented every available protection to ensure your funds are safe:
| Safety Feature | Status | Description |
|---|---|---|
| 🚫Mint Authority | REVOKED | No new tokens can ever be created. Supply is fixed forever. |
| 🧊Freeze Authority | DISABLED | No accounts can be blacklisted or blocked from trading. |
| 🔥LP Tokens | BURNED | Liquidity pool ownership sent to dead address — cannot be removed. |
| ⏱️Principal Access | TIME-LOCKED | Cannot be moved instantly. 72-hour public notice required before any execution. |
| 🔐Admin Keys | MULTISIG | No single person holds the keys. 2-of-3 distributed control with timelock. |
| ✅Code Audit | VERIFIED | Smart contracts audited and verified secure by ChainGPT. |
"We have removed every possible point of failure. What we have built is not just a token — it is a legally sound, technically secure, governed financial reserve."
Section 4
Economic Flexibility — Why This Matters For You
By not permanently burning the access keys, we ensure the system can survive and thrive forever:
✅ Upgrade Strategies
Move capital to better, safer, or higher-yield protocols as the industry evolves.
✅ Emergency Protection
If a partner protocol fails, we can safely move funds to protect the principal.
✅ Future Expansion
Enable cross-chain functionality or new products without disrupting the economy.
✅ Community Ownership
Eventually, you decide where the money works for you.
Your investment is protected not just today, but for decades to come.
▸ Wallet Storage Architecture
Security & Storage — Google + Arweave hybrid
Plain-language summary · In plain words: your encrypted wallet lives in a hidden, app-only folder on your own Google Drive for fast access, with an optional permanent backup that lasts forever. We can't read either copy.
Vaulty syncs securely via Google and keeps an optional permanent backup on Arweave — so your encrypted wallet always follows you. We never see your keys, but they can never be lost.
- Non-custodial by designYour private keys are generated and encrypted on your device. They never leave Vaulty unprotected, and we have no copy on our servers — only you can unlock your wallet.
- Primary sync — Google DriveYour encrypted wallet is stored in a hidden, app-only folder on your own Google Drive. The folder is invisible in your file list and scoped strictly to Vaulty. The blob is double-encrypted before it leaves your browser.
- Permanent, immutable backup — ArweaveYour encrypted bundle is written once to Arweave's decentralized network — unchangeable, undeletable, and retrievable forever. Network fees are fully covered by our operator wallet, so there's nothing for you to pay.
- Tiny Solana pointerA small (~128–256 byte) Solana account records only the Arweave transaction ID and content hash — an unchangeable, on-chain index to your backup. No keys, no balances, no personal data.
- Easy entry with Google loginGoogle sign-in is just the doorway. Vaulty never stores readable wallet data with Google — the OAuth scope is limited to the hidden app folder. You stay in control of the keys.
Vaulty is a fully non-custodial Solana wallet. Every private key, mnemonic, and password is generated and encrypted on the user's device using AES-256-GCM with a key derived through PBKDF2/Argon2-class strengthening. The unencrypted material never leaves the browser or the secure enclave of the host device, and is never transmitted to any Vaulty server.
Primary synchronisation uses Google Drive's Application Data Folder ("appDataFolder"). This is a hidden, app-only scope: the folder does not appear in the user's normal Drive file list and Vaulty's OAuth grant is limited strictly to that scope. Before the encrypted vault leaves the browser it is wrapped a second time in an outer envelope tied to the user's Google account identifier, so even an attacker with read access to Drive could not decrypt the payload without also breaking the device-local key.
For long-term redundancy, users may opt in to a one-time Arweave backup. The same encrypted bundle is uploaded once via Irys/Bundlr to Arweave's permanent storage network — paid once, stored forever, with no subscription or renewal. A minimal Solana account (≈128–256 bytes, rent-refundable) is created per Google identity to record only (i) the Arweave transaction ID, (ii) the SHA-256 content hash of the bundle, and (iii) primary/secondary flags. No keys, balances, or personal data ever touch the chain. The account is updated only when the backup itself changes; reads are off-chain and free.
Restore prefers speed: Google Drive is always tried first. Arweave is consulted only if the Google copy is missing, corrupted, or expired, and never serves as the primary path. All network calls use short timeouts and exponential back-off, and integrity is verified against the on-chain hash before any blob is decrypted locally.
The Google sign-in flow is an authentication doorway only. Vaulty never stores readable wallet data in Google, never asks for full Drive access, and cannot recover or reset a user's password — the user remains the sole custodian of their funds.
▸ Authentication
Two paths, one Vaulty
Choose your path: enterprise-grade convenience with Google, or fully decentralized control with your Solana wallet. Both unlock the same Vaulty — always there, permanent, never lost.
- Continue with GoogleEnterprise-grade security — fast, familiar accessSign in with the Google account you already trust. Vaulty's scope is limited to a hidden, app-only Drive folder — we can't read your files, email, or contacts. Your encrypted wallet is wrapped with a key derived from your Google identity so even Drive admins can't open it.
- Sign in with Solflare or PhantomFully decentralized — no third-party identity providerVaulty asks your wallet to sign a one-time verification message — no transaction, no fees. Your public key becomes your profile, and the outer encryption key is derived deterministically from that pubkey. Nothing about you leaves the Solana network.
Wallet-based profiles are identified by their Solana public key — there is no email, username, or password on file. The outer encryption key is derived deterministically from that pubkey, so the same wallet always unlocks the same Vaulty bundle. Google profiles derive theirs from the OAuth identifier. The double-encryption rule (unlock password + auth-derived key) is identical for both methods. Storage, sync, multi-account, Portal and Telegram integrations behave identically regardless of how you signed in. Your login method is tied to your account — always sign in the same way you first created it.
Chapter 8 · Vaulty Wallet Ecosystem
A Premium Banking Interface for Self-Custody
Vaulty Wallet is a non-custodial digital account designed to feel like a traditional bank — without the bank. Keys never leave your device, but the experience (account number, statements, payouts, credit profile) mirrors the clarity people expect from premium banking.
8.1
Purpose & Positioning
A premium, banking-grade interface over a Solana self-custody wallet. Designed for users who want clarity and trust without giving up control. Your wallet public address is presented as your Account Number across portal, statements, payouts, and the Telegram Mini App.
8.2
Core Wallet Features
Local key generation (24-word default, 256-bit entropy), AES-GCM vault encryption with PBKDF2 600k iterations, encrypted local storage, secure memory wipe, SOL + SPL token support, send / receive / statements / payouts, optional fiat value display (USD · EUR · GBP), and CSV export of activity.
8.3
External Wallet Linking
Users may optionally link Phantom, Solflare, or any Solana Wallet Standard provider. Linked wallets keep their own custody model and provider terms. Vaulty surfaces them inside the same interface for a unified balance and activity view, without ever touching their keys.
8.4
Credit Rating Integration
The wallet powers the Vaulty Credit Rating display — a community profile indicator (not a regulated credit score). Today the score is presented as a snapshot. Future versions will fold wallet usage signals (consistent activity, holding durations, payout history, on-time competition participation) into the scoring formula, with public notice before any methodology change.
8.5
Technical Foundation
Built on @solana/web3.js and @solana/wallet-adapter, fully compliant with the Solana Wallet Standard. Multiple RPC fallbacks (mainnet default, testnet toggle). Background polling, online/visibility-aware refresh, strengthened input validation, and structured error handling across web and mobile.
8.6
Platform Utility
The same self-custody account works seamlessly with deposits, withdrawals, trading, transfers, competition entries, holder-gated features, NFT rewards, and hourly payouts. One account number, one interface, every Vaulty service.
8.7
Telegram Mini-App
A read-mostly secure view inside Telegram showing Account Number, live balance, recent activity, and pending payouts. Sensitive actions (signing, sending, key export) always hand off to the secure web flow. No keys, seed phrases, or secret material are ever exposed in deep links, messages, or the Telegram WebView.
8.8
Security Model
Self-custody by design: Vaulty cannot freeze, seize, or recover funds. Per-user vault binding, session lock, automatic re-lock, secure memory handling, phishing warnings, and a multi-step backup checklist. Users are guided through how this digital account differs from a traditional bank — funds are protected by cryptography and the user's own backup discipline, not by deposit insurance.
8.9
Optional SLIP-39 Secure Backup & Recovery
An opt-in, fully non-custodial safety net. The 12 / 24-word backup phrase is encrypted on the user's device with AES-256-GCM using a fresh 256-bit random key. That AES key is then split with Shamir Secret Sharing over GF(256) into a 2-of-3 configuration (the same primitive that underpins the SLIP-39 standard). The three encrypted shards are independently distributable across heterogeneous storage — Arweave for permanent on-chain storage, IPFS via Pinata for pinned decentralized storage, and a local encrypted file the user routes to iCloud, Google Drive, USB media, or a password manager. Only opaque ciphertext ever crosses the network; Vaulty servers, storage providers, and observers see no plaintext, no AES key, and no single shard sufficient to recover the wallet.
8.10
Biometric-Verified Recovery Flow
Recovery requires any 2 of the 3 shards plus successful on-device identity verification. WebAuthn / FIDO2 platform authenticators provide the biometric step (Face ID, Touch ID, Windows Hello, Android fingerprint, Pixel face unlock); on devices without a platform authenticator, the user's new device password serves as the final attestation. Shards are fetched in parallel from their public locators, validated against the same-bundle and threshold checks, recombined into the AES key, and decrypted entirely in browser memory. The reconstructed seed phrase is never displayed, never transmitted, and is wiped from memory immediately after re-encryption under the user's new device password via the standard importAccount path.
"$VAULTY is not a high-risk gamble. It is the construction of a permanent financial engine. We build tools, we collect fees, we lock the capital, we invest safely, and we pay you the profits every hour. The more we build, the more you earn.
— The $VAULTY Doctrine
