Kelvara

Kelvara ison watch.

Sign your exit once. Kelvara watches the accounts that control your position. If that control changes against your policy, it sends the exit for you.

solana mainnet

solana mainnet
You

Sign the exit once.

You sign it ahead of time: a full withdrawal to your own wallet, in three priority-fee variants. Durable nonces keep them valid until they're needed. Kelvara stores the signed bytes. It can send them, but it can't change a single one.

Kelvara

Then Kelvara keeps watch.

It follows the accounts that can change your position: the program's upgrade authority, the Squads multisig behind it, its members, threshold and proposals, and unusual transaction activity. Every reading is stored with its slot and source. A reading that goes stale shows as unknown, never as safe.

Someone with the keys

At 3 a.m., a new admin takes the keys.

Since launch, the vault's code could only change with the team multisig's approval. Tonight that power moves to one wallet nobody announced, and one key can rewrite the vault. The timelock on this vault is 0: a change takes effect the moment it lands, so nobody gets a window to react. Kelvara sees the change once it is final on the blockchain, alerts you and steps in as your rules say.

Kelvara, while you sleep

Your exit left before anyone woke up.

Kelvara sent the transaction you signed on Tuesday. Nobody had to approve anything at 3 a.m. When the new key pushes its upgrade at 03:20, your position is already empty. Your team wakes up to the evidence: the admin change, the exit and the block each one landed in.

Much of DeFi's capital still has no one on watch.

01

We hold your exit, never your keys.

Kelvara holds one transaction you signed: a full withdrawal to your own wallet. It can send it. It can't change a byte, send funds anywhere else or act on anything you didn't sign. No custody, no trading mandate, no delegated authority.

02

Decided on Tuesday. Done at 3 a.m.

An in-house team still needs its signers awake to approve a withdrawal. With Kelvara, your committee approves the exit in advance. When your rules say go, it runs without waiting for anyone.

03

We don't wait to prove it's a hack.

You deposited when a team multisig controlled the vault. If that changes, Kelvara steps you out, no forensics needed. The vaults are permissionless, so you can deposit again once control is restored. A false alarm costs a short time outside. A real one costs everything.

Kelvara works alongside your security team. They set the rules. Kelvara carries them out at any hour.

For capital that can't wait for Monday.

Funds and treasuries
Your risk committee approves the exit once. Nobody takes the 3 a.m. call.
Vault curators
Show depositors that the authorities behind your vaults are watched around the clock.
Protocols
Give your users an exit that still works while they sleep.

Kelvara is non-custodial. It never holds your keys or your funds. The exit you sign pays only your own wallet, and Kelvara can't alter the signed bytes.

Talk to us.

Book 30 minutes. We'll walk through how Kelvara would watch a position like yours.