The contract holds the money.
The group does the rest.
A vault is a smart contract that you and other people put money into. The contract decides what happens to the money. Fexr is everything a contract can't do on its own — who is in it, what they agreed, who confirmed what, and what the group has to show for it afterwards.
What the contract does. What we do.
A contract is very good at holding money and very bad at knowing whether anyone deserved it. People are the other way round. A vault is both, kept honest against each other.
We prepare it. You sign it.
There is no version of joining a vault where Fexr moves your money for you. The signature is yours, every time, and it is the only thing that can move anything.
We work it out, your wallet signs it
Fexr works out what the transaction should be — which contract, which token, what terms — and hands you the instructions. Your wallet signs. The old shortcut that let a stake through without a signature doesn't just go unused, it refuses.
The chain is what we believe, not the app
Your stake exists because the chain says so. We read the contract's own events back — money in, money out, yield harvested, a reward tier unlocked — and that is what the group sees. Nobody types a balance into Fexr.
A vault is a kind of contract, picked up front
A plain shared pool, a savings pool with reward tiers, or a position in an established protocol — Aave, Lido, Spark, Compound. Ten strategies, chosen when the vault is created, and that choice is what your money does while it sits there.
The social half is ours, and we say which half
Membership, roles, claims, confirmations, decisions and the group's record are Fexr's. The money isn't, and that line doesn't move. It's the answer to what happens to your position if we're not here: the contract doesn't need us.
Five things nobody can do to your group.
Half of these are the contract's doing and half are ours. Between them they cover the ways group money usually goes wrong.
Nobody moves your stake but you
Not another member, not the person who opened the vault, not us. Every movement needs a signature from the wallet that owns it, and Fexr does not hold that key — so there is nothing for us to be pressured into using.
Nobody takes money out on their own say-so
Paying somebody from the group's funds starts as a request — an amount, a reason, a name against it — and waits for another person to approve or reject it. Until then it hasn't happened, and either way it stays in the record.
Nobody's word alone makes something true
When a member says they did the work, that's a claim — and it needs as many members to confirm it as your group decided. Three, unless you chose otherwise. Each of them confirms or disputes, and the record keeps who did which.
Nobody wanders in
Joining is a request a member approves, or an invitation with a code. What someone can do once inside is a role you gave them and can take back — not a guess about how much they're trusted.
Nobody changes the rules after you've committed
Where a vault asks you to stake something, the terms for losing it are part of the pool from the moment it opens. A group that can't say in advance what costs you your stake can't open the pool at all.
When it can't tell you, it says so.
A lot of what this buys you shows up as nothing happening. Each one of these is deliberate, and each one had an easier alternative we didn't take.
A claim nobody has confirmed yet
It sits there rather than going through on a timer. Waiting is the safe direction to fail in — the easy alternative was letting one person's word settle it.
A payment request nobody has answered
The money is still in the vault and the request is still visible, so "I never heard back" stops being a thing that happens quietly.
"Not enough history yet" instead of a rating
A vault under three months old, or one that hasn't done enough to describe, gets those words rather than a precise-looking score with nothing behind it.
A claim somebody disagreed with
The disagreement stays visible instead of the claim quietly vanishing and reappearing next week with better wording.
What none of this protects you from.
The contract is not a guarantee and the group is not infallible. These are the parts that stay your problem.
A contract can lose money
Where a vault runs a real position in a real protocol, it carries that protocol's risk and the market's. The contract will do exactly what it says even on the day you'd rather it didn't. Nothing on this page is a yield promise.
We can't overrule it for you either
The same thing that stops us moving your money against you stops us moving it for you. If the terms lock funds until a date, that date is the answer, and no amount of asking support changes it.
A group that doesn't turn up decides nothing
Ask for more confirmations than your members realistically give and claims sit open forever. Start with a number you'll actually reach and raise it as the group grows.
The vault earning isn't you earning
What the group's work brings in lands in the group's treasury. Turning that into anything for a member is a decision the group still has to make, and until somebody proposes it the answer is nothing.
Frequently Asked
Where is my money, actually?
In the vault's contract, on the chain it was created on — not in a Fexr account and not on a Fexr balance sheet. What you see in the app is us reading that contract's events back to you.
Can Fexr move my stake?
No. Staking runs as prepare, sign, confirm: we prepare the instructions, your wallet signs them, and we record the result. We don't hold the key that could do it without you.
What happens to my money if Fexr goes away?
Your position is a position in a contract, and contracts don't depend on us being around. What would go with us is the social half — the membership, the claims, the confirmations and the group's record — which is exactly the half we're telling you is ours.
Can whoever started the vault just take the money?
Paying anyone out of the group's funds means a request with a reason on it, resolved by somebody else, and the contract's own terms still apply on top of that. Opening the vault doesn't come with a private exit.
What if a member lies about what they did?
The others dispute it and the claim never reaches the number it needs. The dispute stays visible, and where a stake is involved, what happens to it was written down before anybody staked.
I want the technical detail. Where is it?
In the API documentation, field by field — including the prepare and confirm calls behind every stake. What a vault is covers the rest of the machinery: the treasury, the decisions, the work and the record.
A contract can't tell whether you did the work. A group can't be relied on to remember.
So a vault uses both — the contract for the money, the group for the judgement, and a record that neither side gets to write on its own. Open one and you'll find you use two or three parts of it, which is the usual and entirely fine outcome.