Seal your will
Upload documents, keys and messages to IPFS, name beneficiaries with their allocation splits, and set your inactivity window — all on-chain.
- +Encrypted files on IPFS
- +Weighted beneficiary splits
- +Inactivity timer you choose
Seal your documents, keys and final messages on IPFS. Name your heirs, appoint custodians. Go quiet for long enough, and the program hands over exactly what you sealed — to exactly who you named.
How it works
Blop replaces lawyers, paperwork and goodwill with a program that releases exactly what you sealed, to exactly who you named, exactly when your custodians confirm.
Upload documents, keys and messages to IPFS, name beneficiaries with their allocation splits, and set your inactivity window — all on-chain.
Name trusted custodians and choose how many must agree before anything unlocks. They can only confirm your passing — never read or move your files.
Once you have gone inactive and the quorum confirms, the will turns claimable. Each beneficiary signs to unlock the payload — no executor, no intermediary.
Interactive demo
Connect a simulated wallet, seal a will, and check in to stay active. Or skip the wait — trip the switch and watch the custodian quorum confirm, then your beneficiary unlock the sealed documents.
Demo time runs at 3,600× · no transactions are broadcast
Time until claimable
30d 00h 00m 00s
Built for keeps
Six guarantees, each one enforced by the program rather than promised by us.
Wills, beneficiaries and custodians live in one Solidity contract; your files live on IPFS. Only the content hash is stored on-chain.
STORAGEAppoint trusted custodians and require M-of-N to confirm your passing. No single party — including us — can trigger a release.
QUORUMSet the window that arms your will. Custodians can only confirm once you have gone quiet; staying active keeps everything sealed.
TIMERName multiple heirs, each with an allocation in basis points. Add, remove or reweight them anytime while the will is active.
SPLITSEvery will update, custodian confirmation and claim is a public transaction. Anyone — including your heirs — can verify the state.
AUDITSealing, confirming and claiming each cost a fraction of a cent on an Ethereum L2. You pay gas only for the transactions you send.
COSTSecurity
Blop executes a contract you read, signed, and can verify on-chain. Your files are encrypted before they ever reach IPFS. No backdoors, no admin keys, no recovery hotline. That is the point.
pub fn confirm_death(ctx: Context<ConfirmDeath>) -> Result<()> {
let will = &mut ctx.accounts.will;
let custodian = &mut ctx.accounts.custodian;
require!(!custodian.has_approved, ErrorCode::AlreadyApproved);
custodian.has_approved = true;
will.approvals_received += 1;
// Quorum reached -> beneficiaries may now claim.
if will.approvals_received >= will.min_approvals {
will.will_status = WillStatus::Claimable;
}
Ok(())
}Your files, your keys. The contract never holds your data — only IPFS content hashes — and only the rules you signed can open it.
The will turns claimable only after you go inactive and an M-of-N quorum confirms. No off-chain authority can override it.
Source verified on Blockscout. Two independent audits in progress.
While the will is active you can re-seal documents, reweight heirs, swap custodians, or revoke the whole thing.
Use cases
Four patterns we see most often. The protocol is general — your rules can be too.
Seal encrypted recovery info on IPFS so heirs can reach your wallets and accounts — but only after custodians confirm you are gone.
Wills, deeds, insurance policies and asset directories, hashed on-chain and released to the people you named.
Letters, photos and video for loved ones, delivered exactly when your custodians confirm — not a moment before.
Hand off credentials, runbooks and signing instructions so a company keeps running if a key person goes dark.
FAQ
Only what you deliberately escrow. The contract holds no ETH at all, and no token unless you call Escrow on it — those ERC-20 deposits it does custody, and releases them to your heirs in the splits you set. Everything else it merely records: the content hashes (IPFS CIDs) of the files you seal, your beneficiaries and their allocations, and your custodians.
Two gates. First, your inactivity window has to elapse — staying active keeps everything sealed. Then your custodians sign on-chain death confirmations; once the M-of-N quorum you set is reached, the will becomes Claimable and each beneficiary can claim.
Custodians are wallets you trust to confirm your passing. Their only power is to approve a death confirmation — they can't read your files, change beneficiaries, or move anything. You choose how many must agree (the min_approvals quorum) and can add or remove them anytime the will is active.
Yes. While the will is Active, you can add, remove, or reweight beneficiaries, add or remove media references, and swap custodians — each a single signed transaction. Once a quorum confirms death, the will freezes into its Claimable state.
Any file type — documents, keys, images, video — pinned to IPFS. Encrypt it client-side before uploading; the chain only ever sees the CID and a short media-type tag, never the contents.
Just gas. Robinhood Chain is an Ethereum L2, so each transaction — creating the will, adding an heir or custodian, sealing a document, claiming — costs a fraction of a cent. There is no rent or per-record deposit to recover, and the protocol itself takes no fee.
Final step
Connect a wallet, seal your documents, name your heirs and custodians. Stay active and nothing moves — go silent and your will does exactly what you wrote.