Single key
A single key can be a single point of failure.
One key controls everything. If it is lost, destroyed, or held by someone who can no longer use it, assets may stay frozen on-chain forever.
No recovery path
A safety net for self-custody
Your self-custody, with a plan B built in.
Choose your recovery recipient and set your check-in schedule. If you miss your deadline, CKB enforces the recovery rules you put in place.
CKB
Dash
Litecoin
Monero
SolanaThe missing layer
Self-custody has a gap.
Most recovery options ask you to choose between doing everything alone and trusting someone else with your assets. Tranfr offers a different path.
Multisig & custodians
Shared custody adds people to the equation.
Multisig can add coordination for daily use. Custodians and third-party services introduce people, processes, and delays.
More coordination
Tranfr safety net
A safety net without giving up the keys.
One owner key during normal life. If you go quiet past a deadline you set, a trusted recipient has a defined recovery path.
Trustless by design
Simple by design
Set it up once. Check in when you're around.
Three clear steps. Your assets stay in your control until the recovery window opens.
Explore the interactive sandbox- 01
Step 01
Create your policy
Choose a trusted recipient and set an inactivity window that feels right for you.
Your assets stay under your own control. The policy only defines what happens if the deadline passes without a heartbeat.
- 02
Step 02
Send a heartbeat
Check in whenever you like to restart the countdown.
A heartbeat proves you are still active and resets the deadline. You can check in at any time — there is no fixed schedule to keep.
- 03
Step 03
Recovery opens if you go quiet
When the deadline passes, your recipient can follow the recovery path you set.
The on-chain rules determine when recovery is available. No custodian holds your funds or decides whether the deadline has passed.
Transparent rules
How Tranfr operates on-chain.
A deterministic state machine, enforced by each chain's own scripting layer. No central operator, no hidden switch.
Step 1 · Setup01
Create policy
The owner creates a Tranfr policy with a recipient and a recovery window. Assets remain under owner control until the deadline.
Step 2 · Active02
Heartbeats
While active, the owner sends periodic heartbeats to reset the deadline. Each action renews their time to be around.
Step 3 · Freeze03
Expired and frozen
If no heartbeat arrives before the deadline, the owner path freezes. The inactivity threshold cannot be reset.
Step 4 · Settlement04
Recovery claim
The recipient submits a recovery transaction. The chain validates the deadline and the recipient lock before releasing the assets.
CKB-style local simulator
Interactive network sandbox.
Test the policy states, timing, and recovery path. Everything here is a local simulation — no wallet connection, chain data, or transactions.
Time machine 90-day policy
Time machineAdvance the policy clock
Send owner heartbeat
Confirm the owner is active and reset the inactivity timer.
Standard cell spend
Simulate a normal owner action while the policy is active.
Simulation ready. No wallet is connected and no transaction will be sent.
Built around verifiable rules
Technical architecture.
No custodians. No central oracles. Just a designated path executed on-chain. The policy makes the owner, recipient, and timing conditions explicit.
Policy structure
What the chain verifies
Representative fields in a recovery policy:
- owner_lock
- Owner key remains active before expiry.
- recipient_lock
- Recovery is restricted to the chosen recipient.
- inactivity_window
- The minimum wait is defined at setup.
- header_check
- The chain validates the current deadline.
On-chain invariants
Rules that stay predictable
The state machine is designed to enforce:
- 01
The owner keeps control before the deadline.
- 02
The recovery window cannot be reset after expiry.
- 03
Only the designated recipient can complete recovery.
For builders
Build with the TypeScript SDK
Add heartbeat-based recovery to your own wallet or app.
Common questions.
Clear answers about the recovery path and what stays in your hands.
What if I forget to send a heartbeat?
Once the deadline passes, your owner path freezes and your recovery recipient can claim the assets. Choose a period you can comfortably beat.
How do I choose the inactivity period?
You set it in days. A longer period gives you more room if you're offline, but your recipient waits longer if something happens to you.
Can I change my recovery recipient?
Yes, any time before the deadline. Updating the recipient also resets the timer.
Do I give up custody of my assets?
No. You keep full spend and policy authority until the deadline, and no third party holds your funds.
Does Tranfr work on more than one chain?
It's designed to, with CKB as the reference implementation today.