How Vault protects funds

Every contribution lands in that campaign’s escrow address on Solana - a program-controlled account. No Vault operator key can sign transfers out of it. Release conditions (goal met, timing windows) are checked inside the program on every state transition, not attested to off-chain by Vault.

SOL leaves escrow only through the program, and only three ways: settlement to fulfill the campaign on success, refund to contributors on failure or cancellation, and fee collection at settlement or refund. No other exit path exists.

Eligible refunds are normally processed automatically when a campaign enters its refund state. The underlying protocol is designed so that refund rights do not depend solely on Vault manually deciding whether to return contributor funds.

You may not get back every lamport. A processing fee is deducted from your refundable principal, and contribution fees and tips are non-refundable - see the fee schedule.

If a successful campaign is not settled before its execution deadline, it falls back to refunding. Failure always wins over an unsettled execution - you keep a refund exit even after funding.

Vault never asks for a seed phrase, recovery phrase, or private key. No page, email, or message from Vault will ever request one. If anything appears to, treat it as a phishing attempt and close it.

Every action you take on Vault - contributing, tipping - is a transaction you sign in your own wallet. Read the transaction preview before you approve.

An internal security review has been completed. No third-party audit has been completed to date. External audit results, when available, will be published here with the auditor’s report. Until then, the internal review is the only audit claim Vault makes.

When you contribute through Vault, your contribution is not simply sent to the campaign creator. Contributions are held in campaign-specific on-chain escrow while the campaign is active, and the campaign’s outcome determines what happens next.

If the campaign succeeds, funds are used to fulfill the campaign’s stated purpose - Vault purchases or arranges the associated service or deliverable according to the campaign. If the campaign does not succeed, eligible refunds are processed automatically according to the campaign and protocol rules.

This removes the need for contributors to rely solely on a campaign organizer’s promise to voluntarily return unused funds.

A charity campaign uses a flexible threshold set at creation, so it can release funds without reaching the full goal - and it skips the waiting window.

If you contribute to a charity campaign that reaches its threshold, you are not eligible for a refund, even if the full goal is never reached. This is not the all-or-nothing model most contributors expect - check the funding policy before you contribute.