Overview
KeyPact, formerly released as BroClan Wallet, is an open-source multisig wallet for Cardano that lets groups hold and spend funds together by requiring multiple signatures on every transaction. It targets treasuries, DAOs, and individuals who want to split custody across several keys rather than trusting a single hot wallet. The project is maintained as a public TypeScript monorepo on GitHub1, with a web app, a Chrome companion extension, and Docker images for self-hosting.
The wallet is purpose-built around Cardano's native multisig primitives and extends them with an optional Plutus-based smart wallet mode. Both modes are accessible from the same interface, so users can start with a simple threshold wallet and graduate to upgradeable rules without switching tools.
Key Features
- Native script multisig. Wallets are defined by signatories plus a rule — all, any, at-least-N, or time-bounded before/after conditions — using Cardano's built-in script primitives2.
- Smart wallet mode. An upgradeable variant built on Plutus contracts uses NFT-based ownership so signing rights can be rotated and rules changed without moving funds2.
- Pluggable data providers. The app can query chain state through Blockfrost, a self-hosted Kupmios stack, or the KeyPact backend, letting users pick their own trust and infrastructure trade-off.
- Driver and passenger roles. One participant drafts and broadcasts a transaction while co-signers review and sign, keeping coordination inside the app rather than over side channels.
- Self-hostable stack. The repository ships Docker images and source build instructions, and a Chrome companion extension handles key interactions alongside the web app1.
What to Expect
Setting up a wallet starts with adding signatories by key hash or address, choosing a signing rule, and selecting a data provider. The interface mirrors a traditional browser wallet once the wallet exists — users see balances, build transactions, and track pending signatures from the same screen. Smart wallets reuse the same UI, so moving from native multisig to the contract-backed variant does not require Plutus knowledge.
Security posture is transparent rather than certified. KeyPact has not published a third-party audit; the FAQ explicitly states the project relies on native scripts as a simple, well-understood primitive and asks users to verify the code themselves2. Critical wallet logic is centralised in an auditable file in the repository, and the codebase is published under the Mozilla Public License 2.01. A "Disable All Sync" option lets privacy-conscious users stop the app from transmitting any data beyond what gets posted on-chain.
The rebrand from BroClan to KeyPact is still in progress at the time of writing. The marketing site and landing page use the KeyPact name, the live app runs at app.keypact.io, and the GitHub repository, Discord server, and X account still carry the BroClan identity. Users should expect both names to appear across the project's surfaces until the transition settles.
