We spend most of our time auditing other teams’ contracts. Along the way we kept seeing the same gap: the boring, critical on-chain plumbing — vesting, locks, distributions — is where projects either reach for an unaudited script, paste an address from a forum, or reinvent a wheel that has well-known sharp edges.

So we built the tools we wished more teams were using. Today we’re launching app.cyberpal.co — a growing suite of self-serve smart-contract tools from the CyberPal security team. No accounts. No custody. No backend holding your tokens. Connect a wallet, transact, done.

First tool: Token Vesting

The launch tool is linear ERC-20 vesting:

• Create a schedule — pick the token, beneficiary, total amount, start, cliff, and duration. Tokens unlock linearly after the cliff.
• Beneficiaries claim as tokens unlock — they pull their vested balance directly from the contract, on their own schedule.
• Admin view — track every schedule on a contract, see what’s vested, claimed, and outstanding.

It’s the unglamorous primitive behind team allocations, investor lockups, and advisor grants — the kind of thing that absolutely cannot have a bug, because it holds tokens for years.

Why it’s different coming from an audit team

The whole point of CyberPal building this is that security is the default, not an add-on:

• The contracts are written and reviewed with the same methodology we apply to client audits.
• It’s non-custodial — the app is a front-end to on-chain contracts. We never hold your tokens or your keys.
• It’s self-serve — no sales call, no onboarding, no account. The fewer parties in the trust chain, the smaller the attack surface.

What’s next

Vesting is the first tool, not the last. On the roadmap:

• Token Lock — time-lock liquidity and team tokens with verifiable, public proof.
• Multisend — distribute tokens to many addresses in a single transaction.
• Merkle Airdrop — gas-efficient, claim-based airdrops from a Merkle root.

Each ships the same way: small, reviewed, non-custodial, and free of accounts.

Try it

Head to app.cyberpal.co, connect a wallet, and create your first vesting schedule. If you’re shipping a token and want the surrounding contracts reviewed too, that’s still what we do best — see who we’ve audited or request one.

---

CyberPal Apps is built by the same team behind our smart contract audits. Security-first tooling, self-serve.