A fresh shell for your SOL.
Your SOL in its own vault. A new key after every spend.
Your SOL lives in its own vault
SHELL stores your SOL in an on-chain vault protected by hash-based, one-time signatures called Winternitz signatures. Your Phantom or Solflare signature alone can’t move the funds.
Every spend changes the shell
When you send SOL, the remaining balance moves into a fresh vault with a new signing key. The old shell is permanently consumed. Its key can’t authorize another spend.
Built for quantum resistance
These signatures rely on cryptographic hashes rather than the elliptic-curve mathematics that sufficiently powerful quantum computers could break. Quantum-resistant describes this experimental signature layer. Your device, recovery secrets and the Solana network still matter.
Create your vault, verify its recovery file, then connect your wallet to add SOL.
How do I get started?
Create your vault. Set a SHELL recovery password. Your keys are created and encrypted on this device. Creating your local identity doesn’t move any SOL.
Save and verify your recovery file. Download the encrypted file, then reopen it in SHELL to verify it. You need the file and your password to restore your vault. SHELL never asks for your Phantom or Solflare seed phrase.
Connect your wallet and activate your vault. Once security checks pass, activate it on-chain. Choose Add SOL to move funds into the vault, or Send SOL to pay your chosen address. Before each send, save and verify an updated recovery file. Keep the latest version.
What protects your vault?
Two kinds of approval. Your connected wallet approves deposits, transaction fees and operation coordination. A separate, hash-based one-time signature authorizes spending from your SHELL vault.
One send per key. SHELL saves the amount and every destination before signing. Retries keep the same operation. If confirmation is uncertain, check its status before continuing.
Keep the latest recovery file. It contains encrypted vault keys and signing state. A password or basic seed alone cannot restore your vault safely. An old file may lack the keys needed after a send.
Costs are shown before approval. Your connected wallet pays Solana transaction fees and permanent vault-record rent. Old vault records remain on-chain to prevent key reuse.
Experimental quantum-resistant vault authorization. SHELL is browser-based software. Device security, recovery secrets, application and program correctness, RPC integrity and the underlying Solana network remain dependencies. The Mainnet vault program is immutable; independent security review is pending for this adaptation.