Production on Base mainnet

Build Verifiably Secure
Onchain Agents

Production-grade smart wallet infrastructure with parameter-level validation.
Ship confidently knowing compromised servers can't drain agent wallets.

View on GitHub See How It Works
Need help integrating? We offer consulting services →
3,000+
Agents Secured
$50M+
Transaction Volume
100%
Exploit-Free
Battle-tested in production

Powering YieldSeeker

AgentWalletKit was born from the need to secure thousands of autonomous AI agents managing real capital in DeFi. Developed and continuously funded by the YieldSeeker team, this framework currently protects over 3,000 agents executing $50M+ in transaction volume across Base mainnet—and growing exponentially.

Every agent autonomously moves USDC between onchain vaults, claims yield rewards, and reinvests—completely unsupervised. The infrastructure must be bulletproof. That's why we built AgentWalletKit: a security model where even total server compromise cannot result in fund theft.

Visit YieldSeeker →
The Problem

Traditional smart wallets are vulnerable

Even with TEEs and MPC, if your API keys or environment are compromised, attackers get full wallet access. AgentWalletKit eliminates this entire attack vector.

⚠️

Traditional wallet

// Configuration:
✓ Allow: USDC.approve(spender, amount)
✓ Allow: Vault.deposit(amount)
// When executor is compromised:
❌ USDC.approve(ATTACKER, unlimited)
❌ Wallet sees "approve is allowed" ✓
❌ Your funds are drained

Validates function signatures only.
Cannot restrict parameters.

🛡️

AgentWalletKit

// Parameter validation enforced:
✓ executeViaAdapter(ERC4626, MORPHO_VAULT)
✓ Registry validates MORPHO_VAULT ✓
✓ Executes deposit safely
// Attacker tries to compromise:
✓ executeViaAdapter(ERC4626, ATTACKER)
✓ Registry check fails ✗
✓ Transaction reverts immediately

Validates target addresses onchain.
Compromised executors cannot redirect funds.

Security Model

Sleep safely at night

Your infrastructure will be attacked. Build assuming compromise from day one.

🔓

Traditional approaches fail

❌
TEE/SGX: Only as secure as the API keys and environment variables you pass in
❌
MPC Wallets: If your MPC node keys leak, attackers sign anything
❌
Multi-sig: Validates WHO signs, not WHAT they're signing
❌
Rate Limits: Attackers just drain slowly over time
🛡️

AgentWalletKit's Guarantee

✅
Onchain Parameter Validation: Every target address checked against immutable registry
✅
No Redirect Possible: Even with full server access, attackers cannot change vault addresses
✅
Adapter Isolation: Each protocol gets dedicated, audited code that only works with registered addresses
✅
Global Kill Switch: Pause all operations across all agents instantly if threats detected
🔒

The guarantee

If your servers are fully compromised—API keys stolen, databases dumped, signing infrastructure hijacked—attackers can only move funds between your pre-approved vault addresses. They cannot send funds to external wallets. This is enforced onchain, not in your server logic.

Features

Built for security, designed for scale

🔐

Parameter-level validation

Unlike traditional wallets that only validate function signatures, we validate actual target addresses onchain. Compromised executors cannot redirect funds.

🎯

Adapter registry pattern

Each protocol interaction has a dedicated adapter. Adapters are immutable, audited code that only interact with explicitly registered addresses.

⚡

ERC-4337 native

Gas sponsorship via paymasters, batch transactions, and flexible signing options (Coinbase CDP, MPC, custom servers).

🛡️

Global emergency controls

AdapterRegistry can be paused by admins, instantly freezing all agent operations across all wallets if threats are detected.

🔄

Production-ready

Currently managing real DeFi positions on Base mainnet with adapters for Uniswap, Aerodrome, Morpho, Merkl, and more.

🔬

Audited by top firms

Currently undergoing comprehensive security audits by leading blockchain security firms. Full audit reports will be published in February 2026.

🌐

Open source

Fully open-source infrastructure. Build adapters, contribute to the protocol, or fork for your own use case.

How It Works

Execution flow

1

Sign user operation

Server signs a UserOperation for the wallet with the desired action

→
2

Validate signature

Wallet verifies signature is from owner or authorized executor

→
3

Registry check

AdapterRegistry validates target address is registered for the adapter

→
4

Execute safely

Adapter code executes protocol interactions via DELEGATECALL

Solidity 
// Deploy wallet
const wallet = await factory.createAgentWallet({
  owner: userAddress,
  ownerAgentIndex: 0
})

// Register vault in adapter registry (admin)
await registry.registerTarget(MORPHO_VAULT, ERC4626_ADAPTER)

// Agent executes deposit (via server)
await wallet.executeViaAdapter(
  ERC4626_ADAPTER,
  encodeFunctionData('deposit', [MORPHO_VAULT, amount])
)
Use Cases

Built for autonomous agents

🤖

Autonomous yield optimization

Deploy agents that move funds between Morpho, Aave, Yearn vaults to maximize returns. Agents can deposit, withdraw, and claim rewards - but only from approved vault addresses.

🎮

Gaming agents with onchain wallets

NPCs that trade items on DEXs, participate in onchain economies, all while being cryptographically unable to send assets to unauthorized addresses.

💼

DAO treasury management

Execute complex DeFi strategies autonomously while maintaining strict controls on which protocols and pools can be accessed.

📊

Trading bots

Automated trading across whitelisted DEXs and pools. Even if your trading bot is compromised, it cannot send funds to attacker wallets.

Comparison

Why AgentWalletKit?

Feature
AgentWalletKit
Traditional Smart Wallet
EOA + Bot
Parameter Validation
✅ Onchain
❌ None
❌ None
Executor Compromise Protection
✅ Cannot redirect funds
❌ Full access
❌ Full access
Gasless Execution
✅ ERC-4337
⚠️ Depends
❌ No
No Private Keys
✅ Delegated signing
✅ Multi-sig
❌ Required
Protocol Flexibility
✅ Add adapters
⚠️ Limited
✅ Any
Open Source
✅ Yes
⚠️ Varies
N/A
FAQ

Frequently asked questions

What happens if my server keys are stolen?

Attackers can only move funds between your pre-approved vault addresses. They cannot send funds to external wallets or unapproved contracts. The AdapterRegistry enforces this onchain.

How is this different from multi-sig wallets?

Multi-sig validates who can execute. AgentWalletKit validates what can be executed. Even authorized signers cannot bypass the adapter registry restrictions.

Can I add new protocols?

Yes. Create an adapter contract, audit it, deploy it, then register the protocol addresses in the AdapterRegistry. Wallets can immediately use the new adapter.

What if a protocol is hacked?

The admin can remove the protocol from the AdapterRegistry or pause it entirely, instantly freezing all agent interactions across all wallets.

Does this work with existing DeFi protocols?

Yes. Adapters interact with standard protocol interfaces (ERC-4626 vaults, Uniswap V3, etc.). No protocol changes needed.

What chains are supported?

All EVM chains are supported. The contracts are currently deployed and battle-tested on Base mainnet, securing over 3,000 agents with $50M+ in transaction volume.

Consulting

Get expert support

Whether you're integrating AgentWalletKit or need custom smart contract development, we're here to help.

Built by the team behind YieldSeeker. We've been depoloying to mainnet since 2021.

A Fox
Arthur Fox · CEO
Crypto-native since 2016
 Krishan Patel
Krishan Patel · CTO
Full-Stack Engineer with web2 Exit
Free

Integration support

Get AgentWalletKit integrated into your system with our help. We offer regular review sessions to ensure your implementation is secure and optimized.

  • ✓ Regular review calls
  • ✓ Architecture guidance
  • ✓ Security best practices
  • ✓ Adapter development help
Schedule a Review

Custom development

Need custom smart contracts built? We'll design, develop, and deploy production-ready contracts tailored to your specific requirements.

  • ✓ Custom adapter development
  • ✓ Full smart contract suite
  • ✓ Security audits
  • ✓ Deployment & maintenance
Discuss Your Project

Build agents. Verify the protocol.

The future of Web3 is autonomous. Start building verifiably secure AI agents today.

View on GitHub Learn More