
Moray is a self-custodial smart-contract wallet on Monad testnet, built to be a personal "safe" rather than a dapp browser. It closes the three most common ways people lose crypto, and enforces every safeguard on-chain in the MorayVault contract, not just in the UI. 1. Bad or scam sends. Every payment to a new address clears through a recallable time window, so you can pull it back before it lands. Moray reads the recipient's on-chain facts (transactions, balance, contract-or-wallet, whether you've paid it before) and hard-blocks address-poisoning lookalikes of your saved payees and recent recipients. 2. A thief with your signer. A per-day instant allowance caps what can leave immediately; anything above it is delayed, recallable, and freezable. A recovery contact can freeze the vault or sweep it to a pre-set safe address, but can never take your funds. Panic freeze is instant; re-enabling is time-locked. 3. Lost keys, or worse. A Dead Man's Switch passes funds to an heir after a period of silence, on a veto delay you cancel just by using your vault. Auth is a Privy embedded wallet (email or passkey), so there is no seed phrase to lose and no wallet extension to connect. What I learned: honesty matters in a security product. A stolen key is survivable, not "unhackable." Keeping a gas reserve in the signer wallet can wedge it, which put gasless transactions on the roadmap. Address-poisoning detection needs edit-distance, not just matching the first and last characters. And security-UI copy must never overclaim what the contract actually guarantees.
Discussion
No comments yet. Be the first to share what you think.