Warden

WARDEN is a trustless vault for tokenized stocks. It lets a retail user give an AI agent limited trading authority without trusting the agent's own code to behave. The user signs one policy. The agent can only act inside the vault. If it breaks the rules, the transaction reverts on-chain before the stock tokens move. A monitor can prove the violation, slash the agent's collateral, and update the agent's permanent reputation.

描述

AI agents are starting to manage real financial assets, but most agentic finance products still enforce user limits in the application layer. That means the agent’s own software decides whether it is allowed to trade.

WARDEN moves that rulebook on-chain.

A user deposits tokenized stocks into an ERC-4626 vault and signs one policy: allowed asset, max trade size, delegated agent, expiry, and blocked trading hours. The agent can act freely inside those limits. If it breaks them, the vault reverts before any stock tokens move.

In the demo, Sarah holds tokenized TSLA on Robinhood Chain testnet. She allows YieldAgent to trade TSLA only, max 50 EUR per trade, with no trades between 22:00 and 06:00 CET. YieldAgent tries to trade at 01:30 CET. WARDEN rejects the transaction with TradingWindowClosed(). No TSLA leaves the vault. A monitor submits the proof, agent collateral is slashed, and the agent’s reputation updates on-chain.

WARDEN turns AI-agent trust into contract-enforced policy.

What Is Live

Official Robinhood Chain testnet vaults for TSLA, AMD, AMZN, PLTR, and NFLX.
Each vault is funded with official test stock tokens.
Live proof that a blocked TSLA trade reverts before funds move.
Live slash/reputation proof against the agent identity.
Rust/Stylus Slash Pool deployed and activated on Robinhood Chain testnet.
Arbitrum One demo stack deployed with mock tokenized stock/collateral assets.
x402-shaped monitor service with payment validation and settlement reconciliation.
Production hardening path: emergency pause, monitor registry, timelock scripts, ownership transfer scripts, and incident runbook.

website: warden-dashboard-olive.vercel.app

本次黑客松进展

During the buildathon, WARDEN went from PRD to a working multi-chain demo: Built the ERC-4626 WARDEN vault with on-chain policy enforcement. Added EIP-712 signed policies for one-signature delegated agent sessions. Added an ERC-8004-style agent identity/reputation registry. Built SlashPool collateral slashing in Solidity and Rust/Stylus. Deployed official-token vaults on Robinhood Chain testnet. Deployed and activated the Stylus Slash Pool. Added an x402-shaped monitor market flow. Built a dashboard and recording/demo runbooks. Added adversarial fuzzing, local E2E tests, live status checks, and 24/7 safe heartbeat demo mode. Value Add For users: WARDEN lets them try AI-managed tokenized stock portfolios without giving agents unlimited control. For agents: good behavior becomes portable on-chain reputation. For operators: bad agents have slashable collateral, and monitors can earn by proving violations. For Robinhood Chain and Arbitrum: WARDEN makes tokenized stocks safer for agentic finance. Track Fit Overall: consumer-protection infrastructure for tokenized real-world assets. Agentic: autonomous agents get bounded authority and economic accountability. Stylus: slashing logic is implemented in Rust/Stylus. Robinhood Chain: primary demo wraps official Robinhood Chain testnet stock tokens.

Warden

视频

技术栈

描述

本次黑客松进展

融资状态