Citadel Vault Pro, housed in a tactical grey case and running air-gapped Vault OS with the Guardian inheritance app. Sovereign inheritance for your generational wealth. Launching at BTC Prague June 11th 2026. The world’s first Inheritance Computer. #Inheritance #Bitcoin

CAUSE OF DEATH: Unknown VICTIM: Every attack vector we could name Remote code execution. ✗ Blocked at Layer 1 — no network chip exists. Persistent malware. ✗ Blocked at Layer 2 — root is read-only. Memory corruption. ✗ Blocked at Layer 3 — Rust eliminated the category. GPU brute force. ✗ Blocked at Layer 4 — 65 MB RAM per guess. Single-point coercion. ✗ Blocked at Layer 5 — impossible below threshold. Vendor shutdown. ✗ Blocked at Layer 6 — the spec is public. We don’t have to survive. This is what six independent layers of security looks like. Each one stops something different. None of them depend on the others. Full post-mortem:

CitadelVault: Six-Layer Security Stack

Don't be a cautionary tale.

The Cost of Silence — Citadel Vault

Six layers between your Bitcoin and everyone who wants it. One of them is physics. One of them is math that doesn’t care who you are. One of them requires a quorum that can’t be coerced alone. Full breakdown of the CitadelVault security stack:

CitadelVault: Six-Layer Security Stack

Claude Didn’t Hack Bitcoin. It Solved a Recovery Problem. A viral story claimed Claude AI “recovered” nearly $400,000 in Bitcoin from a wallet that had been inaccessible for more than 11 years, but the reality is much more mundane and much more interesting for anyone thinking seriously about custody and recovery. Claude did not break Bitcoin’s cryptography; it helped reconstruct the correct recovery path from messy historical data. What happened The owner, posting as @cprkrn, had a legacy Bitcoin wallet dating back to around 2015. At some point he changed the wallet password, then forgot the new one. The coins were still on-chain, and the private keys were still inside wallet.dat, but he could no longer decrypt the file. Over the years he tried the usual approaches—password guessing, commercial recovery services, and tools like btcrecover—without success. As a last-ditch effort, he dumped an old college computer’s contents into Claude: files, backups, notes, password fragments, everything. Claude sifted through this unstructured data and surfaced an older wallet.dat backup that predated the password change. The user had also recently rediscovered a mnemonic or phrase that seemed related to the wallet but did not work against the current file. The key insight was that the phrase likely matched the older backup rather than the newer, re-encrypted wallet. What Claude did technically The technically interesting part is what Claude did with the artifacts, not with the Bitcoin protocol. First, it acted as a forensic search engine over the user’s digital history. Instead of brute forcing any secrets, it located an older copy of the wallet whose encryption state still matched the earlier password or mnemonic. That alone drastically reduced complexity: the “correct” wallet and “correct” secret actually existed; they just no longer matched the wallet the user kept trying to open. Second, it helped reconstruct which secret belonged to which wallet state. Human memory had collapsed multiple timelines—original wallet, password change, later usage—into a single fuzzy story. Claude re-expanded that into “this mnemonic likely goes with this older backup,” which is a pattern-matching problem, not a cryptographic one. Third, it debugged the recovery tooling. In the user’s account, btcrecover was mishandling the combination of shared key material and password when deriving the decryption key. A small implementation detail—concatenation order—meant that even with the right password, the derived key was wrong and decryption failed. Claude inspected the logic, corrected the order, and once that was fixed the decryption worked and private keys were exported (e.g., in WIF). So the actual sequence was: Find the right legacy wallet file. Associate the right previously-known phrase with that file. Fix the decryption path in the recovery tool. Decrypt and extract keys. At no point did Claude brute force a high-entropy passphrase or guess a BIP39 seed in any meaningful keyspace. What this was not It was not: Brute forcing a password over a large keyspace. Cracking a master seed phrase. Exploiting a flaw in Bitcoin’s cryptography or wallet encryption primitives. If this had been brute force in the strong sense, the story would look completely different: you would see talk of GPU clusters, constrained candidate sets, and hard tradeoffs around entropy and search space. Instead, everything hinges on prior possession of: The relevant secrets (mnemonic, password-like phrase). The relevant artifacts (older wallet.dat backup). A buggy recovery stack. Claude’s role was to reduce entropy by using context, not by applying extreme compute to an infeasible search space. Why Citadel Vault would have prevented this This is exactly the type of failure Citadel Vault is designed to eliminate: not cryptographic failure, but recovery-design and human-operations failure. In this case, the user had: Multiple wallet versions across time. Multiple related secrets. No clean mapping between “this secret unlocks this state of this wallet.” Citadel Vault’s model is to remove that ambiguity up front. During setup, it automatically imports and organizes wallet metadata and seed secrets in a structured way instead of relying on ad hoc files, notes, and remembered passwords. The user does not have to manually remember which phrase goes with which wallet file years later. Those imported secrets are then encrypted using standard, well-audited cryptography and split using a 2-of-3 Shamir scheme across smartcards, each with its own secure element. No single card ever holds the full key, and the mapping between “this set of cards” and “this encrypted secret for this wallet” is defined by the system from day one. The net effect: No password drift across different wallet versions. No ghost backups whose relationship to current state is unclear. No guessing which phrase applies to which file a decade later. Recovery becomes a deterministic process: present the required quorum of cards, follow a defined flow, and the system reconstructs the necessary secret for the correct wallet state. There is no need for AI-driven digital archaeology, because the recovery graph is explicit and preserved rather than reverse-engineered later from digital rubble. Why this story matters The Claude story is a useful reminder that most “lost Bitcoin” is not protected by unbreakable math alone; it is also hidden behind human and operational complexity. AI is now good enough to help unwind that complexity when users are lucky enough to still have the right shards of history lying around. But from a custody and inheritance perspective, depending on that kind of luck is itself a failure mode. A well-designed vault solution makes those relationships—between artifacts, secrets, and recovery paths—stable, explicit, and testable long before anyone needs to recover funds.

What if you could create a Bitcoin inheritance plan that didn’t expose your private keys… but still guaranteed your family could one day spend your sats? The quiet Bitcoin inheritance crisis Every Bitcoiner knows the mantra: “Not your keys, not your coins.” But inheritance creates a brutal paradox. If you never tell anyone how to reach your Bitcoin, it disappears when you do. If you do tell someone — a lawyer, a family member, a custodian — you’ve created a target that exists for decades before it’s ever needed. Billions in Bitcoin are already presumed lost forever, not because of carelessness, but because self-custody was never designed to survive the keyholder. Most current “solutions” are just variations on the same broken idea: • Write your seed phrase on paper and hope your heirs find it (but attackers don’t). • Put instructions in a will and trust your lawyer and the state with knowledge that you hold Bitcoin. • Use a managed custody platform that charges a yearly subscription — for the rest of your life — and assumes the company will still exist, still cooperate, and still be solvent when your family needs access most, potentially decades later. Your full balance and transaction history sits on their servers, visible to their staff, exposed to hackers, and accessible to any government that asks. • Rely on collaborative custody with a single commercial partner who holds a key and all your transaction history — a permanent privacy liability attached to your most sensitive financial data, with no guarantee they survive long enough to matter. All of these approaches either expose your keys and financial data too early, or chain your family’s future to a company that Bitcoin was designed to make unnecessary. Self-custody culture has unintentionally created an inheritance time bomb: as more people hold meaningful amounts of BTC, more families risk losing everything because the one person who understood the setup is gone. Rethinking Bitcoin inheritance: access, not secrets A sane Bitcoin inheritance plan should start from two simple principles: 1. Your heirs must be able to access funds after you’re gone. 2. Nobody should be able to front-run you, coerce you, or steal from you while you’re alive. That means: • No seed phrases sitting in a lawyer’s file cabinet. • No “dead man’s switch” that can be tricked by a missed email or a change to the Bitcoin protocol. • No dependency on a company’s servers being online, solvent, and cooperative — in 2026 and in 2046 — while they quietly accumulate your balance history, transaction graph, and identity data the entire time. • Every piece of your inheritance plan — Bitcoin private keys, legal documents, digital asset credentials — must remain offline and encrypted at all times. The moment that data touches a connected server, it becomes a target. Permanently. Modern vault design shows a better path: split control among multiple parties, enforce time delays, and make every inheritance flow an explicit protocol — not an informal set of instructions. You don’t give anyone the secret. You give them a way to jointly unlock what you’ve secured when the right conditions are met. How a Citadel Vault–style inheritance flow could work Imagine your Citadel Vault is built on a multi-key, multi-party foundation where no single person ever holds unilateral access. Your inheritance flow might look like this: 1. You set the rules — who inherits, what share they receive, and how many Vault Cards must be present to unlock the vault. You align this with your legal estate plan so on-chain reality matches your will. 2. You keep full control while alive — your Vault grows with you. As your wallet configuration changes, it adapts. As you add additional digital assets — like 2-factor authentication keys, encryption keys to drives, or power of attorney — the Vault will automatically encrypt, store, inventory, and track backups. A built-in veto window lets you stop any premature claim instantly. 3. When you’re gone, your heirs trigger inheritance — through a guided process, presenting agreed conditions. When the minimum threshold of Vault Cards is verified, the built-in Vault Advisor guides your heirs through a Recovery Ceremony — a structured, step-by-step process that confirms each card and unlocks the vault. No single card is enough. No company can intervene or override the process. 4. Time locks prevent abuse — an optional offline time lock delay ensures no one can rush an inheritance claim under duress or deception. A fail-safe override path remains available if you are alive but unreachable. 5. The vault transitions — without exposing keys — control moves to your heirs using the same cryptographic structure that protected it while you were alive. No lawyer, no custodian, and not even the vault provider ever saw your private keys, your balance, or your transaction history. Why this matters for sovereign families Bitcoin is generational money. If your inheritance plan is weaker than your self-custody, your setup is incomplete. A vault-based inheritance design: • Keeps you in full control while you’re alive, with no third party holding a key, a copy of your balance, or leverage over your plan. • No recurring subscription fees owed to a company that may not exist when your family needs it. • Gives your non-technical heirs a guided, repeatable process instead of a pile of opaque instructions they are too afraid to execute. Most importantly, it turns your Bitcoin from something only you can use into a durable, family-level asset that can safely outlive you — without trusting anyone you didn’t choose, on terms that never expire. If your current plan is a metal plate in a drawer and a hope that “they’ll figure it out,” your inheritance strategy is unfinished. Citadel Vault: a new way to think about Sovereign Inheritance. #Bitcoin #BitcoinInheritance #SelfCustody #CitadelVault #21sats

Buenos tardes. Citadel Vault is about backing up secrets and extending the storage lifespan up to 1000 years, offline. All while making them easily accessible to your heirs when the time comes. It’s 100% aligned with Bitcoin ethos! ✌🏼 View quoted note →

You set the rules. But what exactly are you protecting against? Most people think Bitcoin inheritance fails because of technical complexity. It doesn’t. It fails because no one designed it to survive real life. Here’s what Citadel Vault is built to withstand: The early claim. A beneficiary who acts too soon — out of desperation, pressure, or worse. Citadel Vault enforces a mandatory delay. A veto window only you can trigger while you’re alive. No one gets access before the conditions you defined are truly met. The compromised guardian. One corrupt trustee. One rogue co-signer. One company that folds. No single person or entity can unlock your vault alone. Threshold rules mean collusion requires more than one bad actor — by design. The surveillance threat. A custodian that knows your balance. A server that leaks your transaction history. A government that asks nicely — or doesn’t. Citadel Vault is air-gapped. Your data never touches a third-party server. What you hold stays between you and your rules. The technical heir. A grieving spouse handed a hardware wallet and a 24-word seed phrase. No one should inherit a puzzle. Citadel Vault gives your heirs a guided process — not a cryptography exam. The forgotten account. The exchange login. The 2FA key. The encrypted drive. The digital ID. Bitcoin is only part of your digital wealth. Citadel Vault covers your full digital estate — not just your sats. The long game. A custody company that existed in 2026 but not in 2046. Citadel Vault has no subscriptions. No ongoing dependency on any company — including us. The plan lives on the device. Forever. This is the threat model. Not theoretical. Not edge cases. These are the exact scenarios that have already erased billions in generational wealth. Citadel Vault was designed to survive all of them. 🔔 Next post: what the setup actually looks like — and why it takes 45 minutes, not 15 hours. #Bitcoin #BitcoinInheritance #SelfCustody #CitadelVault #21sats

Most inheritance “solutions” ask you to trust something that wasn’t built to last. A company. A server. A seed phrase hidden in a drawer. That’s not a plan. That’s a bet. Citadel Vault is built around a different idea: Inheritance shouldn’t depend on trust. It should depend on rules. Rules you set. Rules that can’t be overridden — by a company, a court, a rogue employee, or a grieving family member acting too soon. Here’s the philosophy behind it: → You stay in full control while you’re alive. No one can access your vault. No one can preview your balance. No one holds keys beside you. → Your heirs can always reach it — but only when the conditions you set are truly met. Not when someone guesses the password. Not when a company decides to cooperate. When the rules you defined are satisfied. Not before. → No subscription. No cloud. No third party between you and your Bitcoin. Citadel Vault is air-gapped. Your inheritance plan lives encrypted on the Vault Drive — not on someone else’s server. The Vault Drive is fully backed up, passphrase sharded on Vault Keys. Components are distributed across secure locations so your family is fully protected against any threat. → It covers your full digital life. Bitcoin. Passwords. 2FA keys. Exchange accounts. Encrypted drives. Legally documents. Digital IDs. Everything your family would need. In one place. With one clear process. → Your heirs don’t need to be technical. They follow a guided process. No command lines. No cryptography. No 15-hour expert session. 45 minutes of setup today protects everything, permanently. The goal was simple: make sovereign inheritance as robust as self-custody itself. Not an afterthought. Not a workaround. A battle tested protocol — built from two years of customer experiences incorporated into the Inheritance Computer from day one. Your Bitcoin is only truly yours if it can outlive you. 🔔 Next post: the threat model — what Citadel Vault is designed to survive. #Bitcoin #BitcoinInheritance #SelfCustody #CitadelVault #21sats

Between 3.7 and 5 million Bitcoin is gone forever. Not stolen. Not spent. Abandoned — because no one left behind a way to reach it. That’s nearly 25% of all Bitcoin ever mined. Inaccessible. Permanently. And most of it didn’t disappear due to carelessness. It disappeared because self-custody was never designed to survive the keyholder. Think about what it actually takes: → A hardware wallet that could be lost, damaged, or corrupted → A seed phrase only one person knows → A passphrase that dies with its owner → An heir who finds the backup — but can’t decode it → A single point of failure destroyed by fire or flood Hardware wallets secure your Bitcoin while you’re alive. They offer zero plan for after. Managed custody platforms charge monthly fees and assume the company will still exist — and cooperate — when your family needs access most decades later. The privacy of your balance and transaction history is jeopardized. DIY setups demand technical execution from grieving family members under pressure. None of them protect your full digital life. Passwords. 2FA keys. Exchange accounts. Encrypted drives. Digital IDs. Your wealth extends far beyond a single seed phrase. Without a complete system, your Bitcoin doesn’t pass to your family. It vanishes. Two years ago we built the 21sats Inheritance Protocol to solve exactly this. We guided clients through it one-on-one across dozens of jurisdictions worldwide. It worked. But it took 15 hours of expert-led setup. Most people never did it. So we built something better. ⬇️ Introducing Citadel Vault — the world’s first digital inheritance computer. One air-gapped device. A complete inheritance plan in 45 minutes. No subscriptions. No third parties. No technical expertise required from your heirs. 🔔 Follow this series. Next post: how it actually works. #Bitcoin #BitcoinInheritance #SelfCustody #CitadelVault #21sats

CitadelVault: World's First Inheritance Computer

Pass down generational Bitcoin wealth without KYC, collaborative custody, or transaction history sharing. Built for 1,000-year archival storage.

Introducing Citadel Vault. The world's first purpose-built inheritance computer for Bitcoin. Not a hardware wallet. Not a subscription service. Not a DIY guide. Hardware + protocol + legal framework. One device. Everything included. No subscriptions. No third parties. No technical expertise required from your heirs. Your Bitcoin may be secure. Your inheritance isn't — yet. citadelvault.org #Bitcoin #CitadelVault

We've spent years running real-world Bitcoin inheritance consultations with real clients. Hardware wallets. Air-gapped setups. Multi-sig. Encrypted backups distributed across locations. Legal frameworks for wills and trusts across multiple jurisdictions. We documented every failure point. Every place a technical setup broke down under non-technical hands. Every place a grieving family got stuck. We built the hardware answer to everything we learned was broken. Announcement coming soon.

3.7 million Bitcoin — nearly 1 in 4 coins ever mined — is permanently inaccessible. Not stolen. Not seized. Not lost in a hack. Gone because the keyholder died and left no system for what comes after. Self-custody protects your Bitcoin while you're alive. Nobody has solved what happens after. We're working on that. #Bitcoin #CitadelVault