Veto Wallet

A wallet where withdrawals wait, and a second key can cancel them. A stolen key is no longer enough.

Veto is a self-custodial crypto wallet with a delay built into it. Every other wallet works on one rule: whoever holds the key holds the money. If your key is stolen, everything leaves in a single transaction and there is no step in between where you can react. Veto adds that step. You set an amount that can leave instantly. Anything above it does not go out straight away. It waits for a delay you choose, in the open, where you can see it. While it waits, a second key on another device can cancel it. That second key cannot spend. It cannot move a coin, raise your limit or shorten your delay. It can cancel something that is waiting, freeze the vault, and in an emergency send everything to a recovery address that you chose yourself when you set the vault up. Because it can never move money to an address of its own choosing, it is safe to keep somewhere far away from you: an old phone, a hardware wallet, someone you trust. Anything that makes your vault safer takes effect immediately, so a longer delay, a lower limit or a freeze applies the moment you ask for it. Anything that makes it weaker has to wait. You can also lock a vault outright. Pick a date and nothing leaves until it arrives, not even an amount under your instant limit, and not a withdrawal that was already queued. A lock can only ever be extended, never shortened or cancelled, so a stolen key cannot lift it. The emergency route to your own recovery address stays open throughout, so a lock can never strand your money. WHAT IS IN THE WALLET The wallet holds addresses on eight blockchains and shows everything you own as one running total, with a breakdown underneath telling you how much sits on each. Balances are read directly from public nodes and prices update live, so nothing on that screen is an estimate. You can receive on any of them, and send on most. Each address comes with its own QR code, and you only choose a network at the moment it matters, which is when money is actually arriving or leaving. Websites can ask to connect. They receive nothing at all until you approve the request in the extension's own window, and every transaction is signed inside the extension rather than in the page. HOW YOUR KEYS ARE HELD Your recovery phrase is generated on your device and encrypted with your password using PBKDF2-SHA256 at 600,000 iterations, then AES-GCM. Only the encrypted result is written to your browser's storage. Your password is never stored and cannot be reset by anyone, including us. Private keys are derived in memory when you unlock and discarded when you lock. There are no accounts, no servers, no analytics and no remote code. The vault contract is deployed at 0x9BF6A00ADCb2e32e7d23632FDcBc0B98aA19c1aC on Ethereum and Base. It has no owner, no admin and no upgrade path, so its rules cannot be changed by anyone after deployment, including us. Veto is unaudited software. It removes some of the ways a stolen key can cost you money, but no wallet can make self-custody risk free.