Signo

Videos

Tech Stack

Solidity

React

Node

TypeScript

Foundry

viem

Convex

Description

DeFi never sleeps, but the people using it do. A lending position, a fixed-yield PT and an LP range each need attention for a different reason, and today the owner is the monitoring system: browser tabs, approval pop-ups, a calendar for expiries.

Signo turns a wallet into an always-on assistant. The owner describes what to watch in plain English, such as a health factor, a price or an idle balance, and picks how far the agent may go:

Notify - the agent tells you when the condition is met
Prepare - the agent builds the transaction for you to review and sign
Execute - the agent acts for you, only inside a permission you signed on chain

Signo Shield is the contract layer that makes Execute safe enough to use. The owner signs one permission: which agent, which action, which asset, how much per execution and in total, until when, through which venues, and what result counts as success. The agent decides the action inside that bound; the Shield enforces the bound.

Funds stay in the owner's wallet until a firing. The agent never holds them and never gets an allowance.
A generic firing runs in a fresh single-use sandbox that can call only the venues the owner signed, and sweeps everything back to the owner.
The result is measured on the owner's own balances and positions, not by parsing calldata. If it breaks the permission, the whole transaction reverts and nothing moves.
Triggers the chain can read (Chainlink feeds, Aave health factor, balances) are checked again inside the firing. On Arbitrum the Shield also reads the sequencer uptime feed.
The owner can revoke at any time; an enforcer can freeze an agent; venues can be suspended. No upgradeable proxies.

Deployed on Arbitrum One (verified on Sourcify):

ShieldV1: 0xc9f83d96ee711C06dE80A532785d3BaEA966de97
ShieldRegistryV1: 0xE0377C8C1742FCbe885E99d8d746F56eE7982f6F
ExpressionEvaluator: 0xc428a88A92Ecec99414152Ad2A5fd4244b222B15
GenericExecutorV1: 0xDdA03e096Eaa3AC649965B62F02007970cf22836
AaveV3AdapterV1: 0xE6f6d73c782fb6263F04bB5966af7661b9ebE9d9
ClaimExecutorV1: 0x9331264a9e1C0573D920cD8403031cC9761AC60A

Users set agents up in the Signo app (app.signo.fi), from any agent through Signo's MCP server (ChatGPT, Claude, OKX.AI), or inside partner surfaces (Pendle, Saffron, Aave). After every execution the agent judges the job against the owner's intent and reports what was done, what remains and why.

Status: live on Arbitrum One since 30 September 2026 and on X Layer since 24 September. 15 review passes, including passes by an external reviewer, and 500+ tests in the public repo. Not formally audited.

Progress During Hackathon

Before the buildathon, Signo had the chat planner and Notify and Prepare agents. Everything below was built during the buildathon; the public repo's history starts on 16 September. - 16 to 24 Sep: designed and built Signo Shield from scratch: permission core, registry, expression evaluator for on-chain triggers and outcome checks, generic executor with single-use sandboxes, Aave v3 adapter (supply, repay, repay from collateral) and claim executor. 15 review passes and a frozen interface; 500+ Foundry tests including mainnet-fork tests. First deployment on X Layer on 24 September. - 24 Sep to 30 Sep: Execute agents in the Signo app: one sentence compiles to one permission the owner signs once; price, health-factor and custom triggers; amend and revoke; MCP drafting so any AI agent can propose a permission for the owner to sign. - 30 Sep: ported and deployed Shield v1 to Arbitrum One with an Arbitrum catalog (Aave's Chainlink feeds, token bindings, sequencer uptime read), verified on Sourcify, fork-tested. - 27 Sep to 3 Oct: Shield v1.1, built in the app on the same contracts and tested on Arbitrum on 1 October: an agent fires once per matching asset in an "any of" condition, routes are quoted after the agent picks the amount, and the signer service was hardened. On 2 October, a post-execution evaluator: every firing is judged against the owner's intent and reported. A daily canary sets up, fires, checks on chain and revokes a real permission on Arbitrum. On-chain evidence on Arbitrum One (2 Oct 2026, test wallet 0xbD81Fe58FB903DAAbf982Ec77289e6cA1a891064): - Supply 3 USDC into Aave under a 1 USDC per-execution limit: the Shield fired 1 USDC and the agent reported the job as partial, stopped by the limit: https://arbiscan.io/tx/0x2d8d90673a4440fe8df35287570fee10205cbe08a3c61fa1ebc184ed38bb2dc5 - Supply 1 USDC with a 1 USDC limit, reported complete: https://arbiscan.io/tx/0x93012420bb5186ec834168e56a4b08f41c37109e790813a514790437524a2cd3

Fundraising Status

No funds raised to date. Actively fundraising.