Avelock
ENRU
Join early testing
Non-custodial · time-locked

Your crypto,
on your time.

A non-custodial wallet — your keys never leave your phone. Every withdrawal from an Avelock vault waits a delay you choose, and nobody can rush it. Not a thief with your recovery phrase, not someone forcing you to unlock your phone, not us.

Try the test app → See how it works
One recovery phrase · vaults on 12 networks
Why a delay

A wallet that says “not yet”

Crypto robberies — wrench attacks — only pay off if they are quick: take the coins and disappear. In Avelock the delay is written into the contract, and no one can shorten it on the spot — not even you. A quick grab turns into a day of waiting and risk, so an Avelock vault is a bad target.

The risk is real

Robberies, leaks and hacked exchanges

Keys are no longer stolen only online. People with crypto are followed home, and the data that points to them keeps leaking.

01Robberies
146
known attacks in 2026 by November 5 — all of 2025 had 170

Kidnappings, home invasions and torture to force a transfer. Every year there are more of them, and the losses keep climbing — the first half of 2026 alone passed all of 2025.

Confirmed physical attacks on crypto holders and the money involved, per year
YearLosses
2024$28.3M
2025$40.9M
2026*$124.1M

* 2026 is the first half, CertiK’s latest published total: what was put at risk, not all of it taken. Only confirmed cases count; many victims never report.

Every recorded attack, by year and country →
02Leaks
680
Revolut customers picked by their on-chain balance, September 2026

Their files were obtained through a request from a real government email domain: passports, home addresses and full bitcoin histories. Then came a demand for about $3 million.

Coinbase, May 2025. Bribed support agents leaked names, addresses, IDs and balances of about 69,000 customers.

A name, an address and a balance are all a robber needs. A delay on the vault makes the visit pointless.

03Exchanges
$6.3B
left Binance’s hot wallets in about 20 minutes, October 29, 2026

The largest crypto theft ever; the FBI attributes it to North Korea. Coins on an exchange belong to the exchange — you hold a promise, and after a hack or a bankruptcy you wait in line with everyone else.

Bybit, February 2025: about $1.5 billion in one attack. FTX, 2022: withdrawals stopped, then bankruptcy.

How it works

Four steps, enforced by the contract — not by a promise.

The rules live in your own vault contract. The app only asks; the network decides.

01

Choose your rules

A withdrawal delay from one hour to 90 days, a confirmation window, a delay for new addresses, and permanent minimums nobody can lower.

02

Allow addresses

Funds go only to addresses you allow — your exchange, your other wallets. A new one works only after its own, longer delay.

03

Request & wait

A withdrawal is a request first. It becomes available only after the delay — and you can cancel it any moment before.

04

Confirm

After the delay, you confirm within the window and funds leave. Loosening any rule waits too.

0networks, one recovery phrase
0admin keys or backdoors
0longest delay you can set
0to cancel a withdrawal
Networks

One recovery phrase. A vault on every network you choose.

Where a network has smart contracts, the delay is enforced by the chain itself. Where it doesn’t, we tell you exactly how it works.

Bitcoin · Litecoin
BTC, LTC
Co-signer + timelock
Ethereum
ETH, ERC-20 tokens, NFTs
Vault contract
Solana
SOL, SPL tokens
Vault program
TON
TON, jettons incl. USDT, NFTs
Vault contract
Base · Arbitrum · Optimism
ETH, USDC and other tokens
Vault contract
BNB Chain · Polygon · Avalanche
BNB, POL, AVAX, tokens
Vault contract
Tron
TRX, TRC-20 incl. USDT
Vault contract
Security

A security product should tell you its limits.

01Code

Check every rule

The vault contracts for every network will be published together with the independent audit, so anyone can check that a deployed vault matches the code.

02Access

No admin key

Your vault is your own contract. We can’t move, freeze or speed up anything.

03Stage

Test coins only, for now

This version runs on test networks. An independent audit of the contracts comes before mainnet.

FAQ

Questions, answered plainly.

Can Avelock move or freeze my funds?

No. There is no admin key and no backdoor. Your vault is your own contract, bound to keys that exist only on your phone. We can’t move, freeze or speed up anything.

What if I need my money right away?

You wait the delay you chose — that is the point. Pick one you can live with: a day or a few is a common balance. Money you need instantly belongs in an ordinary wallet next to your vault.

What if someone steals my recovery phrase?

They can’t withdraw quickly: every request they make waits the delay, and you can cancel it. They can cancel yours too, so it becomes a standoff rather than a loss. The app doesn’t send alerts yet: you see a new request when you open it, so check it well within your delay. Keep the phrase offline — it is still the key.

What if I lose my phone?

Restore the wallet from your recovery phrase on a new phone. Your vaults are found again from the same phrase.

What if my phone is stolen or hacked?

The phrase on the phone is encrypted with a key from your PIN and never goes into backups, and wrong PINs make the app wait. But malware that takes over a phone can watch you type the PIN — so the real protection is elsewhere: every withdrawal from a vault waits its delay and can only go to approved addresses, and a Guard on another device can cancel it and lock the vault. Keep a Guard on a second device: against a hacked phone, nothing works better.

Isn’t a hardware wallet safer?

Against malware on your phone, yes: the key never touches the phone. But the device reaches you through a maker, distributors, a shop and a courier, and any of them can tamper with it. In October 2026 Ledger confirmed a hidden implant in wallets sold by an authorized reseller in Southeast Asia, CryptoBilis: a chip inside the case read the recovery phrase off the screen during setup and sent it out over a mobile network. Losses are estimated at $86–93 million. MediaMarkt and Saturn stopped selling Ledger devices after a customer in Germany reported a similar implant, and Trezor found one in its own device bought from the same reseller. Buy only from the maker. And whatever gives your keys away — a phone, a tampered device, a photo of the phrase — a vault delay still makes a thief wait, and gives you time to cancel.

What does Avelock see?

The app reads the networks through the Avelock relay (rpc.avelock.app, run on Cloudflare). The relay sees your IP address and the wallet and vault addresses the app looks up; it never sees your recovery phrase or keys, and it keeps no request logs. Cloudflare processes that traffic as our provider. The Bitcoin and Litecoin co-signers see your vault account and its requests. To avoid the relay, set your own node for a network in Settings → Network endpoints: the app then talks to it directly.

Is it safe to use with real money?

Not yet. This version runs on test networks with test coins only. An independent audit of the contracts comes before mainnet.

For investors

We’re raising a pre-seed round — and we’re open to talk.

01Stage

Pre-seed

A working Android app on 12 test networks, built by the founder with no outside funding and ten rounds of security review.

02What it funds

Audit, team, launch

An independent audit of the contracts, the first team and the mainnet launch. Equity, no token.

Early testing

Try it with test coins. Try to break it.

The Android test build is free and runs on test networks only — you risk nothing. We’re looking for people who will poke holes in the model before it guards real money.

Project page on GitHub → How it works

Found a hole or have a question? Write to gleb@avelock.app or @hokvo on Telegram.