Vaultara
Private file storage with onchain, revocable ENS sharing and live access logs.
Demo
About
Vaultara is a privacy-first decentralized drive: each file is encrypted in the browser before its ciphertext is stored on IPFS. File ownership and every sharing decision live in a Base Sepolia smart contract, giving users a verifiable audit trail rather than trusting a storage provider. Owners share files to an ENS name or address through a revocable onchain grant. Recipients see the file in Shared with me and can decrypt it; owners can revoke future access and both sides see the change in a live access log indexed by The Graph. Privy provides email/social onboarding with an embedded self-custodial wallet. Vaultara is a testnet hackathon reference implementation. Revocation prevents future access but cannot revoke a file someone has already downloaded; device-to-device owner key sync and key-layer revocation are future work.
How it's made
Vaultara is a monorepo with a Next.js frontend, a Foundry Solidity contract, and a The Graph subgraph. The DriveRegistry contract on Base Sepolia records file ownership plus grant and revoke events; it never stores plaintext or holds funds. The Graph indexes those events for the UI's live, two-sided access log. In the browser, WebCrypto encrypts each file with AES-GCM before upload. Only ciphertext is pinned to IPFS through Pinata. File keys are wrapped for recipients with a secp256k1 ECIES envelope using @noble tooling; an owner derives their deterministic key from a wallet signature. ENS resolves human-readable recipients and reverse-resolves them in the interface. Privy supplies embedded wallets with an injected-wallet fallback. The project includes Foundry tests for the contract and Vitest coverage for crypto and sharing helpers. The deployed Base Sepolia contract is verified, and the hosted Vercel app uses security headers plus server-side upload controls.