Skip to main content

​
Security Model

Yieldseeker uses a security-through-layers security model. Rather than relying on a single protection mechanism, security is achieved through multiple independent layers that work together to reduce risk and constrain execution. Each layer protects a different part of the system, helping limit the impact of individual failures while ensuring users remain in control of their assets.

​
User Ownership

Users remain the owners of their assets at all times. Each Agent operates through its own isolated Agent Wallet, and only the wallet owner can withdraw assets. Portfolio management may be autonomous, but ownership always remains with the user.

​
Constrained Execution

The Allocation Engine cannot execute arbitrary blockchain transactions. Every proposed action must pass through the Execution Framework, where it is validated against protocol-defined rules before execution. By separating portfolio decision-making from transaction execution, Yieldseeker significantly limits the actions an Agent can perform on-chain.

​
Layered Validation

Multiple validation layers work together before every transaction is executed. These include:
  • Adapter Registry allowlists
  • protocol-specific adapters
  • parameter validation
  • protocol compatibility checks
Transactions that fail validation are rejected before execution, reducing the likelihood of unintended or unsafe interactions.

​
Secure Delegated Execution

Yieldseeker uses EIP-7702 to enable secure delegated transaction execution. Rather than exposing private keys or granting unrestricted permissions, delegated execution allows an Agent to perform only authorised actions on behalf of the user. Combined with the protocol’s constrained execution model, delegated permissions remain narrowly scoped while preserving user ownership of assets.

​
Infrastructure Security

Execution credentials are protected using Coinbase Trusted Execution Environments (TEE). Sensitive cryptographic operations take place inside hardware-isolated environments, helping protect key material from exposure to both external attackers and internal infrastructure. This approach provides a significantly stronger security boundary than software-only key management.

​
Administrative Security

Protocol upgrades are protected through governance controls. Administrative actions require:
  • hardware-backed multisignature approval
  • a four-day timelock before activation
This provides transparency and allows users to review upcoming protocol changes before they take effect.

​
Operational Security

Yieldseeker continuously monitors both supported integrations and execution infrastructure. Operational controls include:
  • continuous protocol monitoring
  • emergency adapter pause capabilities
  • ongoing infrastructure maintenance
  • incident response procedures
These controls help reduce operational risk while allowing the protocol to evolve over time.

​
Audits & Open Source

Yieldseeker’s smart contracts have been independently audited by Nethermind, a leading blockchain security firm. The audit reviewed the protocol’s core execution framework, wallet architecture, and fund management logic prior to deployment. All critical and high-severity findings were addressed before release. The full audit report is publicly available, and the underlying smart contracts are open source for transparency. Independent audits complement—but do not replace—the protocol’s layered security architecture.

​
Recovery & User Control

Agent Wallets exist independently of the Yieldseeker interface. Even if the web application were unavailable, users retain ownership of their assets through their on-chain wallet. Recovery paths remain available through the underlying blockchain infrastructure. The Yieldseeker interface provides the most convenient way to manage an Agent, but it is not the source of ownership. Because every Agent Wallet is an on-chain account, ownership ultimately derives from the blockchain rather than the Yieldseeker application itself.

​
Security Through Layers

No single security mechanism protects the protocol. Instead, Yieldseeker combines multiple independent layers that reinforce one another:
  • isolated Agent Wallets
  • constrained execution
  • protocol validation
  • EIP-7702 delegated execution
  • Coinbase Trusted Execution Environments
  • hardware-backed multisignature governance
  • independent smart contract audits
This layered approach reduces trust assumptions, limits attack surface, and allows the protocol to remain resilient even if individual safeguards were ever to fail.