Nothing big leaves before morning.
Mora holds the crypto you keep yourself. Large transfers wait in a queue, and people you trust can stop them while they wait. If your key leaks at 2 AM, the money is still there at 7.
One leaked key empties a wallet in one transaction.
In 2026 Binance, Coinbase and SwissBorg added withdrawal delays and trusted contacts for the money they hold for you. Keys you hold yourself had nothing like it. Mora gives them the same delay, and gives the people you trust a way to act on it.
- 158,000
- personal wallets compromised in 2025
- Chainalysis
- $713M
- taken from those wallets
- Chainalysis
- 72
- verified physical “wrench attacks” in 2025
- CertiK
Your key leaks at 2:07 AM. Here is the rest of the night.
- 22:00
Curfew starts
Your instant allowance drops to $0 until morning.
- 02:07
Someone uses your key
They ask to send $10,000. The vault puts the request in a queue that opens at 14:07.
- 02:11
Ada’s phone buzzes
Your guardian gets a Telegram message from @usemora_bot with a link to the vault.
- 02:14
Ada presses Rescue
The balance moves to your recovery wallet. The queued request is void.
- 07:00
You wake up
The person with your key has $0. You make a new vault with a new key.
Six rules
You set the rules once, when you make the vault. The contract enforces them for everyone, you included, and loosening any of them takes the full delay.
Instant allowance
Small amounts leave right away, up to a daily limit you pick. The allowance refills a little at a time over 24 hours, so splitting a transfer across midnight gains nothing.
Curfew
During the hours you sleep, the instant allowance is $0. Every transfer waits.
The queue
Anything above the allowance waits for the delay you set, 12 hours for example. A wait that would end during curfew ends when curfew does.
Guardians
Up to five people you trust. Each one can cancel a queued transfer, freeze the vault for up to three days, or press Rescue. None of them can send money to themselves.
Rescue
Sends the whole balance to the recovery address you chose when you made the vault. It also voids every transfer and rule change still in the queue.
Slow changes
Raising a limit, removing a guardian, or changing the recovery address waits the same delay, so a guardian can cancel it. Lowering a limit happens at once.
A delay works when someone is watching.
Anyone can follow a vault on Telegram. When a transfer or rule change joins the queue, every follower gets a message within about 5 minutes, with a link straight to Cancel and Rescue.
- 1Open a vault page and tap Get Telegram alerts.
- 2Press Start in the bot. You now follow that vault.
- 3Send the same link to each of your guardians.
We ran the theft on Base Sepolia.
Same contract, real transactions. Open any step on Basescan and check it yourself.
- 01Vault created: $200/day instant, 1h delay, 1 guardian, recovery wallet settx ↗
- 02$10,000 test USDC depositedtx ↗
- 03$50 sent instantly, inside the allowancetx ↗
- 04Stolen key asks to send $5,000. The vault queues ittx ↗
- 05Stolen key asks to change the recovery address. Also queuedtx ↗
- 06Guardian presses Rescue. $9,950 goes to the recovery wallet and both requests are void. The thief gets $0tx ↗
- See that vault liveRead the contract
What Mora does not do.
It is unaudited.
Mora runs on Base Sepolia testnet. Use test money.
It guards the vault only.
Your everyday wallet works as it always has.
Someone has to act.
If nobody cancels a queued transfer before it unlocks, it goes through. Pick a delay with room to spare.
A leaked key ends the vault.
Rescue gets the money home. After that, make a fresh vault with a new key.