NewLaunching 1 Nov 2026 · 19:00 UTC

The on-chain standard
for theft-proof wallets

Uriel is a network of Sanctum contracts and staked nodes. Every withdrawal is rate-limited, every Sanctum is watched around the clock, and any node can freeze a theft while it is still running.

Binance lost $6.36B in 20 minutes when one hot key was stolen. Not again.

Buy URIEL Read the spec

Same attack, behind Uriel: a stolen key gets 10% a day, and the wallet freezes.

Network · Ethereum
Epoch
—
URIEL / epoch
—
Minted
—
Staked
—
Nodes
—
Next halving
—

Read from Ethereum mainnet. Dashes mean the contracts are not live yet.

What you can count on

Works with any wallet

One transaction from MetaMask, Rabby or any wallet.

You keep your keys

Self-custody. No one holds your funds.

Nodes can freeze, never move funds

A node's only power is a 24 h freeze.

Small amounts move instantly

Up to 5% an hour and 10% a day, instantly; bigger moves wait 6 h.

Delay, detect, freeze

01

Delay.

Money can't leave fast. Small withdrawals go out instantly; anything big waits 6 hours. A thief gets a trickle, not the Sanctum.

5% an hour and 10% a day per asset; transfers over 10% queue for 6 h

02

Detect.

A network of staked nodes watches every protected wallet around the clock and recognises a theft as it starts: a hijacked key, a re-delegated wallet, a sudden drain.

nodes stake 100k URIEL, watch factory Sanctums and 7702 delegations

03

Freeze.

Any node can freeze the wallet in one transaction. Only your offline key can unfreeze it, replace the stolen key, or cancel what the thief queued.

24 h Panic, cold key controls, panic voids queued transfers

What Uriel is

Uriel is a security network for crypto wallets. You keep your funds in a Uriel Sanctum instead of a bare hot wallet. Your everyday key still signs, but the Sanctum decides how fast money can leave, and a network of independent nodes watches it 24/7 with the power to hit the brakes.

> watching Sanctum 0x7f3…a91

> delegation changed: 0xef0100…

> PANIC sent · block 21,394,118

> Sanctum frozen 24h · queued transfers voided

Who it's for

Anyone whose key signs for more than they could stand to lose.

01 · Deployer

Token deployers and dev wallets

Deployer and fee wallets get swept in seconds. Cap what a leaked key can take.

02 · Agent

Bots and AI agents

Keys that live on a server can only lose a trickle.

03 · Treasury

DAO and project treasuries

One phished signer doesn't empty the treasury overnight.

04 · Trader

Degens and whales

Sign all day without one bad click draining everything.

05 · Desk

Market makers' smaller hot wallets

Small flows stay instant; big moves wait and can be cancelled.

Not built for exchange core wallets that need instant large transfers.

How it works

Five steps. Set it up once with your cold key; after that, the Sanctum and the nodes do the work.

  1. 1

    Create a Sanctum

    One transaction from the factory. Set your offline "cold" key.

  2. 2

    Move funds in

    Optionally delegate your hot wallet (EIP-7702) so anything sent to it is swept into the Sanctum.

  3. 3

    Spend as usual

    Small amounts are instant, large ones wait 6 h.

  4. 4

    Nodes watch

    If your key is used in a way that looks like theft, a node freezes the Sanctum for 24 h.

  5. 5

    You resolve it with the cold key

    Cancel the thief's transfers, rotate the hot key, unfreeze.

Honest limit

Uriel does not stop a key from being stolen. It stops a stolen key from emptying the wallet. If the offline cold key is stolen too, Uriel can't help — keep it on a hardware wallet.

Built on open standards

Four open pieces. Any wallet or protocol can plug into them.

01 · Token

URIEL

A standard ERC-20 with a hard cap. Nobody can mint more.

ERC-20 · 21,000,000 hard cap · mint locked to the Emission contract

02 · Contract

Sanctum

Open Solidity contracts, one per user, created from a factory. Rate limits, a 6 h queue for anything bigger, cold-key controls, blacklist and Panic.

5% / h · 10% / 24 h per asset · GuardVault + factory

03 · Optional

EIP-7702 helper

Your everyday address delegates to Guard7702, so anything sent to it is swept into your Sanctum. A re-delegation is a signal nodes act on.

EIP-7702 · Guard7702 delegate

04 · Network

Node network

Stake 100k URIEL to run a node in Watcher, Guardian or Archangel tiers. Panic is sent with a separate signer key, so staking wallets never touch a server.

100,000 URIEL stake · Watcher / Guardian / Archangel

Where it comes from

Uriel applies the outflow-limit idea behind ERC-7265 (circuit breakers for protocols) to individual wallets, and adds a staked network that can hit the brakes. The contracts are open; any wallet or protocol can integrate them.

Why Ethereum first

  • The Binance 7702 leg happened on Ethereum.
  • Most stolen value sits on Ethereum.
  • The token and staking live on mainnet; Sanctum contracts can be mirrored to other EVM chains at the same address.

Under the hood

A stolen key can still sign. Uriel makes sure what it signs can only move a little, slowly, while someone watches.

5% an hour, 10% a day

The hot key can send up to 5% of each asset per hour and 10% per rolling 24 hours, instantly. Anything bigger, or over those caps, waits 6 hours in a queue. The cold key can cancel it, and a Panic voids it.

Core

Your hot wallet feeds one Sanctum

The hot wallet delegates to Guard7702 with EIP-7702. That does not stop a stolen key from signing. It routes funds into the Sanctum, where anyone can sweep them, and a re-delegation is a signal nodes act on. The protection is the Sanctum.

Any node can hit Panic

Any node with 100,000 URIEL staked can call it. One call freezes the Sanctum for 24 hours and voids everything queued before it. Only the cold key can unfreeze it or rotate the hot key.

Never pays a blacklisted address

Every Sanctum checks the shared blacklist before any transfer leaves. A listed address is a dead end.

Staked nodes keep watch

Nodes stake 100,000 URIEL, watch guarded wallets and are the only ones who earn emissions. A node is a Docker container on any VPS. No GPU.

Built to lose 10 ETH, not 100

A hot key is one signature from empty. AI agents now exploit contracts for about $1.22 a run.

21M
URIEL hard cap
No admin mint. 70% liquidity, 10% team, 10% treasury, 10% node emissions.
~1,042
URIEL per epoch
One epoch is 10 minutes. 2.1M URIEL, to nodes only, starting 1 hour after launch.
Binance replay

Same attack. Two wallets.

On 29 Oct 2026, $6.36B left Binance in about 20 minutes. The Ethereum leg was a 7702 delegation signed by a compromised hot key. Behind a Uriel Sanctum the same key hits the caps: at most 10% of each asset a day, and the first node to see it freezes the Sanctum.

Worst case under the caps100 ETH start
Unguarded
Drained in one call
−100 ETH
Guarded
10% a day, then frozen
−10 ETH
Kept
Still in the Sanctum
90 ETH
7 days
Halving period
First on 8 Nov, then 15, 22 and 29 Nov 2026.
70%
Launch liquidity
14.7M URIEL plus ~$5k ETH on Uniswap v2. LP locked to 1 Jan 2027.

Chains on the roadmap

Live now, and what's next

What ships at launch, and what comes after it.

Live at launch

1 Nov 2026 · Ethereum mainnet

  • URIEL token + Uniswap v2 liquidity (LP locked to 1 Jan 2027)
  • Staking + node emissions + Seraphim tiers
  • Sanctum factory, Guard7702, blacklist
  • Node client: open source, Docker
  • Raid the Sanctum: a real Sanctum anyone can try to rob

Questions, answered

Straight answers on the Sanctum, the nodes and the token.

No. A node's only power over your Sanctum is Panic, which freezes outflows for 24 hours. It cannot withdraw. Nodes stake URIEL and the stake is slashable.

It freezes the Sanctum for 24 hours: nothing leaves, and every transfer queued before the Panic is voided. Any node with 100,000 URIEL staked can trigger it. Only the cold key can unfreeze the Sanctum or rotate the hot key.

A delegation does not stop a stolen key from signing. The Binance leg was itself a 7702 delegation. Guard7702 routes funds into the Sanctum, and a re-delegation is a signal nodes act on. The protection is the Sanctum: it holds the funds and enforces the 5% hourly and 10% daily caps, the 6-hour queue and the blacklist on its own.

3% on DEX trades of URIEL, paid to the team. It opens at 20% and falls to 3% over the first 30 minutes. For those 30 minutes, max wallet and max transaction are 1% (210,000 URIEL). Launch liquidity is 70% of supply (14.7M URIEL) plus ~$5k ETH on Uniswap v2, with the LP locked until 1 Jan 2027.

10% of supply, 2.1M URIEL, goes to nodes only: ~1,042 URIEL per 10-minute epoch, starting 1 hour after launch and halving every week (8, 15, 22 and 29 Nov 2026). Stake 100,000 URIEL to run a node; a node earns emissions and can trigger Panic. Unbonding takes 24 hours, and stake is slashable for abuse.

Treat it like a seed phrase: offline and backed up. It is the only key that can cancel a queued withdrawal, unfreeze the Sanctum or rotate the hot key. Without it, nobody can do those things for you.

21,000,000 URIEL, no admin mint. Liquidity 70%, node emissions 10%, treasury 10%, team 10% (2.1M URIEL, locked: half until 15 Nov 2026, half until 1 Dec 2026). The slasher and blacklist keys are held by the deployer for now.

Guard a wallet, or get paid to watch one

Launch on Ethereum mainnet, 1 Nov 2026 at 19:00 UTC. Only nodes earn emissions: ~1,042 URIEL every 10 minutes, halving weekly. Nodes keep watch and can hit Panic.

Run a node

  • Docker container
  • Any VPS, no GPU
  • 100,000 URIEL to run a node
  • Only nodes earn emissions
  • 24-hour unbond
  • Slashable for abuse
Buy URIEL Run a node
Buy URIEL