For estate attorneys

Your crypto, passed on.

White-label crypto beneficiary designation infrastructure for estate attorneys. Cryptographically designate heirs for self-custodied assets — on any chain — with wallet addresses never in any public document, and Keyrite holding zero cryptographic material. Works for death and incapacitation.

Even Satoshi left no succession plan for his 1.1M BTC. The inventor of the private key left no plan for his own keys. Keyrite exists so your clients don't have to repeat that mistake.

$500B+
Crypto lost to death & disability
0
Cryptographic material at Keyrite
2-of-3
Shamir threshold · MVP
5 Gates
Independent trigger protocol
Interactive click-through

The full succession flow, in eight steps

Walk through how an estate attorney sets up Keyrite for a client, how liveness works, and how a beneficiary claims assets after death — without Keyrite ever holding a cryptographic share.

app.keyrite.com / attorney-portal
Stage 1 of 8 · Attorney portal

Attorney creates a new succession plan

The estate attorney onboards a client through their Keyrite portal. A new Plan ID is issued and linked to the firm. Keyrite is invisible to the end client — the attorney bills once, acting as sole point of contact.

Stage 2 of 8 · Holder setup

Split the secret into three shares

The holder's seed phrase is split in-browser using Shamir's Secret Sharing. 2 of 3 shares are required to reconstruct. No single party can recover the key alone. Keyrite stores none of them.

Stage 3 of 8 · Liveness system

Monthly heartbeat keeps the plan dormant

The holder confirms "I'm here" once a month. If heartbeats stop, Keyrite escalates through three tiers before any death-confirmation protocol begins.

Monthly heartbeat due · Apr 1, 2026
Tap once to reset all timers. Vacation mode available for up to 180 days.
Tier 1 — Email + push
Monthly
"I'm here" tap resets timers. No response in 7 days → Tier 2.
Tier 2 — SMS + devices + contacts notified
+7 days
Trusted contacts asked to check on the holder. 14-day window.
Tier 3 — Attorney alert
+21 days
Attorney receives formal notification. 30 days to reset or begin Gate 1.
Stage 4 of 8 · Attorney initiates succession

Death certificate uploaded by attorney

Attorney uploads the certified death certificate. Gate 1 begins — automated verification against independent government registries. The attorney cannot override this check.

↑
Upload death certificate
PDF, JPG, or PNG · certified copy required
Stage 5 of 8 · Five independent gates

No single party can release the assets

Five gates evaluate independently. Attorney collusion is architecturally impossible — the attorney holds no shares and cannot override any gate.

1
Death verification
VitalChek · GRO · Standesamt · automated registry check
Pending
2
Trusted contact confirmation
Keyrite contacts both independently · 1 confirmation required
Pending
3
Contest period
90 days · living holder or third party can intervene · cannot be shortened
Pending
4
Legal hold check
Attorney confirms no court order active
Pending
5
Heir initiation
Government ID + liveness check · smart contract releases S5
Pending
Stage 6 of 8 · Heir reconstruction

Three shares reconstruct the key, in-browser

The heir collects shares in their Keyrite app. SSS reconstruction happens in WASM in the heir's browser. Assets are swept directly to the heir's own wallet. The heir never sees a seed phrase or private key.

Share 2 — Holder's backup (provided by heir's app)
collected
Share 3 — Smart-contract escrow
released
2-of-3 threshold met · attorney's Share 1 not needed
verified
SSS reconstruction in WASM
in-memory
Sweep transactions signed + broadcast
on-chain
Key wiped from memory
zeroed

Assets transferred to heir's wallet

Bitcoin (cold wallet)14.3 BTC
Ethereum (Ledger)82.4 ETH
USDC (Arbitrum)45,200 USDC
Destinationheir.eth · 0x4b…9f2a
Stage 7 of 8 · CEX claim guide

Personalized exchange playbook for the heir

Keyrite cannot transfer CEX assets cryptographically — the exchange is custodian. But the Asset Vault documents every account and generates a step-by-step claim guide per exchange, running in parallel with the 90-day contest period.

Coinbase
Kraken
Gemini
Binance
Stage 8 of 8 · Complete

Succession closed

All assets have been transferred. Attorney finalizes paperwork. Wallet addresses never appeared in any public document. Keyrite held zero cryptographic material throughout.

✓

Succession successfully executed

Jordan Avery's designated beneficiary received their self-custodied assets, and received claim guides for every documented exchange account.

5/5
Gates passed
0
Addresses public
0
Keyrite shares
Step 1 / 8
Architecture

Six invariants that shape every decision

◆

Zero cryptographic material at Keyrite

Not a share. Not a shard. Not an encrypted fragment. Keyrite is coordination software — all material lives in smart contracts, decentralized networks, or with designated humans.

§

Attorney holds one share, cannot act alone

The attorney holds Share 1 but needs Share 2 or Share 3 to reconstruct — and controls no gate. A hostile attorney must defeat automated registry verification, bypass the 30-day contest window, and access either the holder's backup or the smart contract release. Every step is on-chain and criminally liable.

○

Blind heir by default

Heirs don't know they're designated during the holder's life. Their identity is registered at setup and verified only when succession begins — no knowledge, no share, no exposure during the holder's lifetime.

≡

ZK commitments survive probate

A will becomes public record after probate. Any wallet address in a will is permanently linked to a known deceased person. Keyrite's legal documents reference only a Poseidon commitment hash — the address stays private even after the will is unsealed.

⎔

Five independent trigger gates

Death registry + independent confirmation + 90-day contest period + legal hold + heir initiation. No single party controls any gate. Every attack requires two simultaneous independent compromises.

↻

Shutdown cannot strand assets

The escrow contract is immutable. An open-source reconstruction tool is published at launch. If Keyrite disappears tomorrow, every plan still resolves.

Roadmap

Complexity earned by revenue, not assumed

The MVP is the simplest safe design. Resilience layers compound as the network grows — each tier is additive, not a replacement.

MVP 3-shard architecture
  • 2-of-3 Shamir — attorney portal · holder backup · smart-contract escrow
  • Single heir per plan · split wallets for multi-heir (Path A)
  • Immutable escrow on Arbitrum · no admin key · Trail of Bits audit pre-mainnet
  • ZK commitments (Poseidon) · wallet addresses never in any legal document
  • 5-gate trigger · automated death registry (VitalChek · SSA DMF · GRO · Standesamt)
  • Open-source reconstruction tool · shutdown cannot strand assets
Seed Guardian Network
  • 3-of-5 Shamir · trusted contacts added as optional fourth and fifth shares
  • Distribution contracts (Path B) for multi-heir EVM allocations · attorney-coordinated for BTC/NFTs
  • 9-node Guardian Network · 6-of-9 threshold · estate law firms, notaries, trust companies, accounting firms
  • Mutual escrow · Practice-tier attorneys act as guardian nodes for each other's clients — no token, pure reciprocity
  • MiCA-compliant alternative to the smart contract for EU jurisdictions
  • Annual shard-holder liveness · silent degradation of redundancy prevented
Series A Institutional tier
  • Institutional Guardian option · BitGo Trust (US) · Sygnum Bank (DE/CH) for $500K+ estates
  • Full zk-SNARK proofs · address verification without transmitting commitment pre-image
  • Contingent heir logic · automatic escalation if primary heir predeceased (cross-checked against registry)
  • Hardware wallet native signing · phase-3 integration with Ledger and Trezor
  • Estateably integration · post-death administration workflow with Keyrite as data source
  • Duress check-in codes · wrench-attack mitigation with silent alert to attorney
Try it live

The cryptography, end to end

A real 2-of-3 Shamir split and SHA-256 commitment, running locally in your browser. Walk through both sides of the protocol — the holder setting up a plan, and the heir claiming the assets. Nothing leaves this page.

Holder · Setup
1 Your seed phrase and wallet address Edit freely
How does this work?

Shamir's Secret Sharing (SSS) treats each byte of the seed phrase as the constant term of a random polynomial of degree k−1 (here k=2, a straight line). Evaluating at x = 1..3 produces three shares. Any 2 shares uniquely determine the line via Lagrange interpolation at x=0 — recovering the constant term exactly. With only 1 share, infinitely many lines fit, so the byte is information-theoretically hidden. All arithmetic runs in GF(28) with the AES polynomial (0x11b).

The address commitment is SHA-256(address ‖ salt ‖ timestamp) — a cryptographic commitment with two essential properties: hiding (the hash reveals nothing about the address) and binding (the holder cannot later change what was committed). The salt prevents brute-force lookups; the timestamp prevents cross-plan replay.

Together these compose the protocol: SSS recovers the seed phrase without anyone reconstructing it centrally. The commitment lets the heir prove they're claiming the right plan without any wallet address ever appearing in the legal record. Both pieces are necessary — SSS alone leaks the address at the attorney's office; a commitment alone doesn't help the heir actually take custody.

Production Keyrite swaps SHA-256 for Poseidon — a ZK-friendly hash that can be verified inside a zk-SNARK circuit, enabling full zero-knowledge proofs where even the commitment's pre-image is never transmitted to the verifier.