This is 1 of 4 proposals in “LEGO Grant Proposal: Fixing Shared Problems Before They Turn Into Lost Funds”
Preventing Theft in Mainstream Wallets with Vaults: $30,000 pledge
Preventing Theft in Mainstream Wallets with Vaults (open RFP, co-drafted by pcaversaccio and Griff Green) · goal $240,000 · Lido pledge $30,000 (12.5% of the goal) https://initiatives.thedao.fund/initiative/preventing-theft-with-vaults-in-mainstream-wallets
In many ways, private keys are crypto’s original sin. At Giveth we published a vault contract with an allowList and an escape hatch in 2017, yet major wallets still don’t protect savings this way.
One seed phrase, all your savings. Chainalysis counted at least 80,000 victims of personal wallet compromises in 2025 and $713 million stolen from individuals. One leaked phrase and everything is gone.
How a vault works. A vault is a savings account inside the wallet people already use (unrelated to Lido’s stVaults). There is a small daily spending limit, and anything above it can only go to an escape-hatch address the seed phrase does not control, like a hardware wallet or a multisig. If a stolen phrase only gets a thief about $500 a day, there is far less reason to steal it.
Paid only on real use. This is actually a marketing initiative. The whole budget is tied to getting impactful adoption: a first major wallet ships vaults holding $15M+ for 2,000+ users, a campaign reaches 1M+ organic impressions as those vaults grow to $30M, and 3+ more wallets ship vaults holding another $25M.
What Lido gets. Everyday users keep their savings safe in the wallets they already use, but there are 200 users every day getting phished and losing their holdings. Many are stETH holders using wallets like MetaMask, Rabby and Trust Wallet, and this initiative brings the vaults directly to these users.
Budget. LEGO can send the $30,000, to the initiative’s Safe, 0x48F5418025C61423Fccf47b4fA0B97882EbbD22d (Ethereum mainnet, USDC, USDT, DAI or USDS). Or LEGO can pledge it and only send it once the $240,000 goal is fully funded. If that doesn’t happen by February 1, 2027, nothing is sent.
Full proposal: https://initiatives.thedao.fund/initiative/preventing-theft-with-vaults-in-mainstream-wallets