The mechanics
How Vorka works
Two keys, one vault contract, and a companion app that never lets a transaction move without your signature.
The two keys
The operational key lives encrypted on your USB drive. It signs day-to-day actions — withdrawing funds, calling a vetted DeFi contract. The recovery keystays offline, kept cold. It's the root of trust for the vault's identity: it can rotate a lost or stolen operational key, but it can also change who withdrawals pay out to, or replace itself. It can never move funds directly or change the vault's own contract address — but because it can redirect where funds eventually go, it deserves the same offline handling as the funds themselves.
The vault contract
Your assets live in a small, per-user smart contract, not in a pooled custodial account. It only moves funds when it receives a valid signature — it never checks who sent the transaction, only whether the signature is genuine. That means anyone can relay a signed request for you; nobody but your key can produce one.
The interface and the signing helper
The interfaceis a website — it can't sign anything itself. It's the only thing allowed to talk to the signing helper, a small app installed on your computer. Your keystore is only ever read and decrypted inside that helper, never in the browser. It asks for your password fresh every time (never cached), builds the transaction, and shows you exactly what you're about to sign — before it happens.