Locked Vaults

• One-time vault per link. Each claim link gets its own ephemeral Solana keypair that briefly holds the funds.
• Encrypted with your code. The vault key is sealed with AES-GCM using a key derived from your secret — funds only move when the correct code decrypts it.
• No double-claims. An atomic on-chain-state lock guarantees a link can be swept exactly once, even under concurrent attempts.
• Brute-force resistant. Repeated wrong codes trigger temporary lockouts, and SORT never custodies your keys.