// PROTOCOL

The Vault Protocol

How Vault holds contributions, what decides a campaign’s outcome, and which on-chain programs enforce it. Every rule below is checked by the program on-chain rather than attested to by Vault off-chain.

// Escrow & Custody

Funds live in escrow

How it works

Each campaign has its own escrow address on Solana. When you contribute, your SOL goes there - not into a Vault-owned wallet. The program re-verifies custody rules on every contribution and every payout. No operator key can move escrowed funds outside those rules.

Contributions are always SOL

All contributions are SOL, all escrow is on Solana. A campaign can display token identity for projects on other chains - Ethereum, Base, BNB, Monad, and others - but that is branding metadata only. There is no bridge, no EVM custody. Escrow and contributions are Solana and SOL, without exception.

// Campaign Lifecycle

From launch to outcome

Every campaign follows a path determined by its goal, deadline, and the SOL raised, enforced by the on-chain program.

While running - the campaign accepts contributions until its deadline.

At the deadline - the program checks whether the goal was met.

If funded - a short waiting window begins (roughly 10 minutes). Tips from contributors can end the window early. Once it closes, the campaign is ready for settlement.

If the execution window expires before settlement lands - the campaign falls back to refunds, regardless of whether it was funded. Failure resolves in the contributor’s favor.

If not funded - refunds are processed automatically once the campaign closes.

// Success

What happens when a campaign succeeds

If the campaign satisfies its success conditions, escrowed funds proceed through the campaign’s fulfillment path. Vault purchases or arranges the service or deliverable associated with the campaign’s stated purpose. Campaign creators do not receive the escrow balance as an unrestricted cash payout. The on-chain program verifies that settlement conditions are met before any funds move.

// Refunds

Refunds are processed when the campaign ends

If the campaign does not satisfy its success conditions, it enters the refund path and eligible refunds are processed automatically. The refund fee rate is locked into the campaign at creation and cannot be changed afterward - see the fee schedule for current rates. Tips are non-refundable and do not count toward the goal.

// Campaign Types

Standard vs. Charity

Standard

All-or-nothing. The campaign qualifies for fulfillment only if it reaches 100% of its goal by the deadline; otherwise it moves to the refund path.

Charity

Charity campaigns qualify at a 20% minimum threshold: reaching 100% before the deadline succeeds normally, and a campaign that expires at or above 20% of its goal qualifies for fulfillment instead of refunding. Below 20% at expiration, contributions are automatically refunded. Charity campaigns also skip the waiting window. What this means for contributors is covered on How Vault Works.

// On-Chain Identity

The programs that hold campaign funds

Vault’s escrow rules are enforced by these Solana programs. Publishing their addresses lets you confirm independently that the program you are interacting with is the program Vault identifies as its own.

vault-core

Global configuration, fee parameters and campaign registry.

Mainnet program address published here at launch.

vault-escrow

Per-campaign escrow custody, contributions, settlement and refunds.

Mainnet program address published here at launch.

Campaign funds are held in program-controlled on-chain escrow, and Vault operator keys do not have arbitrary withdrawal authority over campaign escrow. Funds leave escrow only through settlement, refunds, or fee collection at settlement or refund. A fuller account of what Vault can and cannot do is in the Trust & Security center.

// NEXT STEP

That's the architecture. Here's what it looks like in practice.

How Vault Works Read the docs