Herit hands your NEAR and stablecoins to the people you name once you stop proving you're alive. each heir holds a soulbound credential that wakes up, and proof of life is a World ID Selfie Check, not a timestamp any bot can ping.
estate
alice.herit-near.testnet
next check-in
18d 14h
of a 30d window
son.alice.herit-near.testnet
son · made from his key
ada.near
daughter · her own account
crypto inheritance has an identity problem.
a classic dead-man's switch resets on any transaction. a bot on a cron, a delegated key, or a thief holding your stolen key can keep it alive forever while you are not.
checking in takes a fresh World ID Selfie Check bound to your face at the first one. a private key can't look into a camera, so whoever holds yours can't pretend you're still here, or withdraw.
a hex string tells a grantor nothing, links to no person, and can be swapped silently. the heir has nothing to show for being named until the day it matters.
each heir is a real NEAR account (their own, or son.alice.herit-near.testnet made for them) holding a soulbound NEP-171 token. it reads locked, then grace, then claimable, then claimed: computed live from the estate.
the factory creates alice.herit-near.testnet: a NEAR account with no keys at all, running immutable estate code published once as a Global Contract. nobody, Herit included, can sign for it.
name a NEAR account the heir already has, or give them a new one under the estate from a key only they hold. each gets a share and a soulbound credential at once.
pick a check-in interval and a grace period (minutes for a demo, months for real), then deposit NEAR and tokens such as mUSDC. withdrawing needs a Selfie Check too.
one Selfie Check per interval resets the clock. miss it and grace begins; miss grace and the estate unlocks. each heir then claims with their own Selfie Check.
Herit can't unlock your estate, and nobody has to be online for it to unlock: the estate reads its own clock.
you checked in on time
the estate is sealed. heirs can see their credential and their share, and can do nothing with either. it reads locked.
credential: locked
a window closed with no check-in
the safety net for travel, illness or a bad network day. one Selfie Check returns the estate to active with nothing lost.
credential: grace · reversible by you
grace ran out too
the first claim (or anyone's poke) freezes every balance. each heir passes their own Selfie Check and is paid their share straight to their account.
credential: claimable → claimed
listed by the factory and filled in from each estate as you look: where its clock stands, what its vault holds, and who is named. open a row for the heirs, and each heir's view.
reading the factory…
the credential is the product, and the money is real-world money. both are load-bearing, not badges.
NFTs That Do Something
Real-World Money
one factory, and one keyless account per estate running code nobody can change. the Selfie Check is verified with World and signed for the estate by an attestor: on testnet a server route; an OutLayer TEE worker is built for mainnet, so no server holds the key.
opens estates as sub-accounts, records them for this page, and points each at the published estate code.
the estate contract, published once as an immutable Global Contract by hash. every estate runs it with no keys of its own.
hash 65rC6sBJGosXHCGC6ityR3poJ68ecHDZsNRAPZQjkX2p
mUSDC, a standard NEP-141 token with 6 decimals, for depositing and inheriting tokens on testnet.
takes about four minutes
open an estate on NEAR testnet, name your heirs, and let the clock do the rest. demo timers run in minutes, so you can watch the whole handover happen.