Kaspa Forge OfficeForge
network DAA node covenants Toccata keys this browser only custody none status open beta
Non-custodial tools on the Kaspa blockchain

Your keys.
Three tools.
One desk.

A vault where a theft can be cancelled, a covenant escrow whose guarantor physically can’t steal, and a marketplace where every purchase opens into that escrow. All three run off one password-locked, encrypted profile that never leaves your browser.

  • Keys are forged in your browser — and never leave it. We can’t move your funds, ever.
  • Rules live in on-chain scripts, not on our servers. If the site dies, your money doesn’t.
  • Even the dispute arbiter can only route funds to buyer or seller — the network rejects anything else.
cancel window1 h — 90 d
inheritance1 d — 5 y
escrow fee0.5 %
arbitration2 %
deal size50 — 10 000 KAS
on-chain ops0 KAS
Kaspa Safe

A vault where theft can be cancelled

Every withdrawal from the Safe waits out a window you set. The destination address is fixed on-chain the moment a withdrawal starts — nobody can swap it. If the withdrawal wasn’t yours, one move with a separate alarm key (kept on paper, at home, anywhere apart from the hot key) returns everything to the vault.

Optional inheritance works on a “check in that you’re alive” basis: stop checking in, and after the term you chose the vault opens to your heir — automatically, or by the heir’s own key. Point it at your own second address and it doubles as insurance against losing your hot key.

Cancel windowpresets 6 h – 14 d · custom 1 h – 90 d
Keyshot + alarm, stored apart — a thief with one gets nothing
Inheritanceoff · 6 / 12 / 24 mo · custom 1 d – 5 y
Heir email alertfree, fires even without a subscription
Telegram alerts100 KAS / yr · first 30 days free
On-chain opsfree forever — network fee only
AndroidAPK with crypto inside + our F-Droid repo
How Safe works ▸
Every coin has exactly three ways out
In vault
Coins sit in a Toccata covenant. Withdrawals, check-ins and inheritance are the only paths the script allows.
Withdrawal pending
Hot key starts it. Destination locked, timer runs the full window. Your Telegram pings: “a withdrawal has started.”
Cancelled — or completed
Not you? The alarm key returns everything to the vault. You? The window passes and coins go only to the fixed address.
Lost both keys? We can’t help — and that’s the point: nobody can, including us. Turn inheritance on, even if the heir is just your own second address.
Kaspa Escrow

The guarantor that physically can’t steal

Money for a P2P deal sits in an on-chain covenant, not with us. The script allows a fixed set of outcomes, and in every one the funds go to the buyer, the seller, or a split between them. Even the arbiter’s signature opens no other door — the Kaspa network simply rejects any other destination. That’s mathematics, not a promise.

Being honest about the boundary: the contract guarantees funds can’t be stolen; the fairness of a verdict is the work of a human arbiter judging your evidence. And the evidence is solid — the deal chat runs on the Kasia protocol, where every message is an end-to-end encrypted Kaspa transaction: nothing can be forged or backdated.

Deal typesgoods · OTC exchange · service
Dispute window6 presets, 24 h – 7 d — shown before joining
Nobody acts?auto-release to the seller when the window closes
Arbiter silent?emergency timeout refunds the default side — a deal can’t hang
Deal size50 – 10 000 KAS (beta)
How Escrow works ▸
Where the covenant lets money go
Escrow covenantfunds locked on-chain
↓   ↓   ↓
→ Seller
release · auto-release · verdict
→ Buyer
refund · timeout · verdict
→ Split
arbiter’s N % division
→ Arbiter · → anyone else: no such path exists in the script. The network won’t accept the transaction.
A deal, start to finish
Create & share invite Other side joins Buyer locks funds Release· Refund· Dispute → verdict
Telegram guarantors: 3–10 % commission and they hold your money. Kaspa Escrow: 0.5 % — and they can’t.
Marketplace

Trade with strangers. Trust nobody.

A storefront of listings where the Buy button opens a covenant escrow automatically. The seller physically can’t take the money until the buyer confirms, and a dispute goes to the arbiter — exactly like any escrow deal. No reputation games, no “trusted middleman”: the same on-chain script guards every purchase.

Post a listinggoods or service · price in KAS · photos · moderated, then live
Buyone click opens the escrow deal — then fund, receive, release
Fees & limitssame as Escrow · 50 – 10 000 KAS
Your listingsmanaged from the Desk — status, unpublish, photos removed with it
Browse the market ▸
Listing → escrow, automatically
Mechanical keyboard
150 KAS goods
Buy → escrow deal opens Buyer locks 150 KAS in covenant Seller ships · chat on-chain Buyer confirms → release
While a deal is active, the listing can’t be pulled — the covenant, not the seller, decides how it ends.
Custody, spelled out

Your keys stay yours.
We built it so we can’t touch them.

Everything — vault keys, deal keys, listing keys and your personal wallet — lives in one age-encrypted profile locked by your password, inside your browser. Unlock once, use all three tools. We never see the password. We never see the keys.

Built to outlive us
The rules are enforced by the Kaspa chain, not our servers. If the site vanished tomorrow: your vault keeps working through the open-source vaultctl CLI against any Kaspa v2+ node, and every escrow resolves itself — timeouts return the funds to the default side. Losing us costs you a website, not your money.
The desk

One desk runs all of it

The Desk is your control room: a personal Kaspa wallet (receive, balance, send) that funds vaults and deals directly, a portfolio of vaults with live status, your deals and your listings — all decrypted from one profile, all in one place.

Coins flow in a loop: store in the Safe, fund a deal in Escrow, sell on the Market — proceeds land back at your desk, and you decide what’s next.

Open beta — the honest part

The contracts passed our full on-chain test cycle and adversarial attacks, and the code is open — but an external audit is still ahead. Until then, treat Forge like a beta: don’t store or trade more than you’d trust to one.

Mainnet, Toccata covenants — live since June 30, 2026. No tokens, no bridges: plain KAS inside covenant scripts.

vaults ≤ 5 000 KAS deals 50 – 10 000 KAS audit: ahead

What it costs

OperationFee
Vault: create · withdraw · cancel · inherit0 KAS + network fee
Vault alerts & check-in reminders (Telegram)100 KAS / yr · 30 d free
Escrow: create a dealfree
Escrow: release / refund0.5 % · min 1.2 KAS
Escrow: arbitration (only if disputed)2 % · min 5 KAS

Forge your first vault tonight

Runs in your browser. No account. No seed phrase handed to anyone. No custody — by construction, not by promise.

mainnet · open beta · open source