Skip to content

Onchain AI agents that can't drain your wallet

CoinFello is the first agent that allows both end-users and developers alike to use any onchain protocol through a chatbot-like user experience.

7 min
Onchain AI agents that can't drain your wallet

CoinFello built the first general purpose onchain agent capable of research, executing transactions, or automating any onchain contract. CoinFello is a self-custodial AI agent for all of DeFi, built on the MetaMask Smart Accounts Kit. This case study explores how it solved the hardest problems in crypto AI by giving agents real onchain capability without handing them private keys.

CoinFello solves a key problem differently from other crypto agents

CoinFello is the first agent that allows both end-users and developers alike to use any onchain protocol through a chatbot-like user experience. It replaces the need to use centralized dapp websites. Instead, the user can let the agent know what they want to do, and the agent takes care of the rest. Actions like cross-chain swaps, yield optimization, multi-step transactions, LP management, onchain borrowing and lending, and a lot more all become simple and accessible. CoinFello can be used as a user-facing web application, agent skill (in Claude, Hermes, or OpenClaw), or through agent CLI (for bringing the agent into another product).

Most crypto agents on the market today provide users with a chatbot that connects to a centralized trading API. Users transfer funds to that agent and blindly trust its automated behaviors. Worse, most of these chatbots can’t even interact with onchain contracts. CoinFello used the MetaMask Smart Account Kit to accomplish something far more impressive.

Most AI crypto agents store your private key; CoinFello doesn't

The dominant approach to AI wallets today is to hand the agent a private key or API credential. That secret lives in the agent's runtime. Anything that can reach the runtime, like an AI hallucination, prompt injection, compromised dependency, or a misbehaving tool call, could potentially drain the wallet.

Newer designs wrap the runtime in a TEE, but this only addresses part of the problem agents face. A misbehaving agent inside of a TEE still controls the keys and can result in serious fund loss incidents. It's still a promise, not a proof.

CoinFello started from a different premise: the signing key should never leave the user's device. The agent gets a scoped, time-bounded, contract-enforced delegation instead of access to the underlying key.

CoinFello is built around solving that problem, not retrofitting a fix to it.

— jacobc.eth, CoinFello founder

There's a second problem CoinFello solves too. DeFi is genuinely complex, and most attempts to simplify it do so by hiding what matters. CoinFello believes agents must give crypto users access to all of DeFi, not just a small walled garden. Their AI agent, Fello, is designed to help users understand what they're doing onchain: explaining position risk or best routes for a cross-chain swap, walking through what a delegation grants, surfacing slippage and MEV implications of a swap, all in plain language. The goal is providing agents that help more people act onchain.

The Architecture: ERC-7710 delegations at the contract level

CoinFello leverages ERC-7710 delegations to accomplish all of the above. These delegations don't ask you to trust anyone. The permission is enforced onchain, by the contract, within the exact bounds the user signed. If the agent tries to push outside those bounds, the contract refuses. (Read more in How agentic wallets work.)

Standards like ERC-7710 pull the development community back toward verifiable rather than vouched-for, user-custodied rather than operator-custodied. We think that's the only sustainable way to scale onchain agents.

— jacobc.eth, CoinFello Founder

CoinFello uses the MetaMask Smart Account Kit's Hybrid Delegator Smart Account to wire the user's hardware-isolated device signer directly into the account. The signing key lives in the device's secure enclave rather than in any software environment CoinFello or the agent can touch.

This also solves device migration. Switching to a new phone means rotating to the new hardware key. No seed phrase shuffle, no fund migration, no loss of onchain history or existing delegations. The account persists; the device is just the current key holder.

Sign once, the agent handles the rest

Imagine a loan-protection scenario: a user directs an agent to "use the liquidity in my wallet to protect my loan positions from liquidation during a market dip." 

Before CoinFello, that meant watching health factors manually or running a keeper bot with raw key access: such automation only existed by trading away custody. When a dip started at 3 am, you either woke up to sign approvals or you ate the liquidation.

Before

With CoinFello + Smart Accounts Kit

Watch health factors manually

Tell Fello what you want in plain language

Or run a keeper bot with raw key access

Fello constructs a scoped ERC-7710 delegation: specific protocols, token caps, duration, permitted actions

Or hand credentials to a custodial service

User signs once

3am market dip: wake up and sign a sequence of approvals in MetaMask

Fello monitors positions and executes within those exact bounds

Or eat the liquidation

Contract enforces the bounds — no overreach possible

The SAK's delegation framework provides a "sign once, sleep through the dip" experience instead of a "hand over your keys" experience.

— jacobc.eth, CoinFello Founder

Automations powered by MetaMask Smart Accounts Kit

CoinFello's automations feature runs on ERC-7710 delegations. Without the Smart Accounts Kit, CoinFello users would be forced to transfer funds into an agent wallet and blindly trust the agents with their funds.

The SAK lets us offer real automation without asking users to give up custody or move their funds anywhere. It's a feature category we genuinely could not have built any other way without compromising on what we believe self-custody is supposed to mean.

— jacobc.eth, CoinFello Founder

In March 2026, CoinFello published and open-sourced their agent skill under the MIT license in partnership with MetaMask. The skill gives any developer the same security architecture CoinFello runs on as a drop-in framework for giving AI agents onchain superpowers.

The Stack: multiple layers deliver the onchain agentic future

The CoinFello stack for AI agents isn’t just for use in CoinFello’s app or web interface. It also provides agent skills that can power Claude, OpenClaw, and Hermes agents to act onchain. The MetaMask Smart Accounts Kit provides the execution-authorization layer: ERC-4337 accounts, ERC-7710 delegations, onchain enforcement, a TEE handles AI compute. 

Layer

Components

Agent Layer

OpenClaw, Claude, Hermes

AI / Compute

TEE, LLM + Intent Evaluation

Authorization

MetaMask Smart Accounts Kit, ERC-4337 Hybrid Delegation Smart Account, ERC-7710

Key Security

Device Secure Enclave, Hardware-Isolated Signing

What’s next: more delegation for more users

CoinFello's current agent, Fello 1, handles advanced multistep onchain DeFi operations: think swapping, LP deployment, and loan maintenance all in a single operation. Fello 2 (in development now) focuses on asynchronous automation of these actions. On the permissions side, added Advanced Permissions (ERC-7715) support will let delegations be granted directly from users' existing MetaMask wallets. Combined with EIP-7702, which upgrades an existing EOA to a smart account in place, this closes the gap for the largest user segment: people who already have a MetaMask wallet with years of onchain history.

The flow: EIP-7702 upgrades the EOA without creating a new address or requiring fund migration. Advanced Permissions then issues a scoped, contract-enforced permission to CoinFello from that same account. No new wallet. No migration. Just the delegation model, extended to existing MetaMask users.

CoinFello's advice for builders

Design for least privilege. Decide the narrowest possible delegation for each user intent, then issue that. Don't hand out broad permissions and rely on the agent's judgment to stay in bounds. The point of ERC-7710 isn't that agent trust disappears, it's that agent trust becomes clear, defined, and narrow. That's what shrinks the worst-case outcome from "wallet drained" to "the agent did exactly what it was allowed to do, and nothing else."

Build with the Smart Accounts Kit: ERC-4337 accounts, ERC-7710 delegations, Advanced Permissions. The same stack CoinFello ships, available to every developer.

This Article is written by:

  • MetaMask

    MetaMask, formerly Consensys Software Inc, is the world's largest self-custodial financial platform, giving people a single place to hold, spend, save and grow their money across both crypto and traditional assets. The company is building the consumer platform where that happens, bringing payments, savings, investing and digital assets together in one seamless experience. Having grown from the world's most widely used self-custodial wallet, MetaMask gives users direct control over their money and assets, with reach across approximately 190 countries. MetaMask has played a foundational role in Ethereum's growth since 2016. Today, MetaMask sits at the center of the blockchain economy, building the operating system for Open Money and putting people in full control of their financial lives.

    Read all articles