SuperAPI AI Directory

skill-01-wallet-management

Security & auditing

View repository

Updated 10-16 06:43

About this skill

Wallet Management

When to Use

  • Creating or importing HD wallets (BIP-39/BIP-44)
  • Configuring ERC-4337 smart accounts (bundlers, paymasters)
  • Setting up Gnosis Safe or multi-sig workflows
  • Implementing social recovery or session keys
  • Managing wallet connections (WalletConnect, EIP-6963)

Prerequisites

  • MCP: blockchain-rpc-server for chain reads
  • MCP: compliance-screening-server before sending to external addresses
  • Apply all rules in guardrails/web3-guardrails.yaml

Workflow

1. Wallet Type Selection

Use Case Recommendation
Single user EOA HD wallet (MetaMask-compatible path m/44'/60'/0'/0/n)
Team treasury Gnosis Safe multi-sig
Gasless UX ERC-4337 smart account + paymaster
High-frequency trading Session keys with spending limits

2. HD Wallet Derivation

Ethereum path: m/44'/60'/0'/0/{index}
Solana path:   m/44'/501'/{index}'/0'

Use references/hd-paths.md for all supported chains. Never log or persist mnemonic phrases.

3. ERC-4337 Account Abstraction

  1. Deploy or connect to existing smart account (SimpleAccount, Kernel, Safe4337)
  2. Configure entry point: 0x5FF137D4b0FDCD49DcA30c7CF57E578a026d2789 (v0.6)
  3. Select bundler URL (Pimlico, Alchemy, Stackup)
  4. Optional: configure paymaster for sponsored gas

4. Multi-Sig (Safe)

  1. Create Safe with threshold M-of-N
  2. Add owners via createProxyWithNonce
  3. Propose transactions via Safe Transaction Service API
  4. Collect signatures off-chain, execute on-chain

5. Pre-Execution Checks

  • Simulate transaction via eth_call or Tenderly
  • Screen recipient via compliance MCP
  • Verify chain ID matches intended network
  • Confirm value ≤ $10,000 or obtain user confirmation

Key Security Rules

  • NEVER output, store, or transmit private keys or seed phrases
  • Use hardware wallets or secure enclaves for mainnet signing
  • Rotate session keys regularly; set expiry and spending caps
  • Prefer read-only RPC for balance queries

References

  • references/hd-paths.md — BIP-44 paths per chain
  • references/erc4337-setup.md — Smart account configuration
  • knowledge-base/chains/ — Per-chain RPC and explorer URLs