🛡️ MetaAegis - Emergency Asset Rescue

Autonomous protection system for compromised wallets using ERC-7715 Advanced Permissions

MetaAegis automatically rescues crypto assets from hacked wallets. When your wallet is compromised and funds are being drained, MetaAegis detects the attack and autonomously transfers remaining assets to your Safe multisig — all gasless, all automatic.

---

💡 The Problem

When a wallet is compromised:

• Attacker continuously drains assets
• Manual rescue requires gas (which you don't have)
• You're racing against time
• Every second counts

MetaAegis solves this with autonomous, gasless rescue operations powered by ERC-7715.

---

🎯 How It Works

Setup (One Time)

1. Connect MetaMask Flask with your compromised wallet
2. Grant ERC-7715 permissions to session account
3. Provide your Safe multisig address

Monitoring

• Checks balances every 3 seconds
• Tracks both ETH and USDC on Sepolia
• Real-time dashboard updates

Automatic Rescue

When ETH drops below 0.005:

• Immediately rescues all remaining USDC to Safe
• 100% gasless via Pimlico

When USDC drops below 0.5:

• Immediately rescues all remaining ETH to Safe
• 100% gasless via Pimlico

Both stolen?

• Rescues whatever is left
• No manual intervention needed

---

🔑 Advanced Permissions Usage

MetaAegis demonstrates ERC-7715 Advanced Permissions for autonomous rescue operations:

1. Requesting Advanced Permissions

Code: src/lib/smartAccount.js (Lines 51-110)

Grants two permissions to the session account:

• ETH Permission: 0.1 ETH per hour for emergency transfers
• USDC Permission: 100 USDC per hour for emergency transfers

Both permissions expire after 30 days and use period-based limits to prevent abuse.

const permissions = await client.requestExecutionPermissions([
  // ETH Permission
  {
    chainId: SEPOLIA_CHAIN_ID,
    expiry: currentTime + 24 * 60 * 60 * 30, // 30 days
    signer: { type: "account", data: { address: sessionAccount.address } },
    permission: {
      type: "native-token-periodic",
      data: {
        periodAmount: 100000000000000000n, // 0.1 ETH
        periodDuration: 3600, // 1 hour
      }
    }
  },
  // USDC Permission...
]);

2. Redeeming Advanced Permissions

Code: src/lib/smartAccount.js (Lines 140-185)

When an attack is detected, the session account autonomously executes rescue operations using granted permissions:

export async function rescueAssets(ctx, permission, params) {
  // Build transfer call using granted permission
  const userOp = await ctx.sessionAccount.sendUserOperation({
    calls: [transferCall],
    context: { permission } // Uses ERC-7715 permission
  });
  
  // Gasless execution via Pimlico
  const receipt = await ctx.bundlerClient.waitForUserOperationReceipt({
    hash: userOp
  });
}

Key Benefits:

• ✅ One-time grant - User grants permission once, never asked again
• ✅ Autonomous execution - No manual approvals during emergency
• ✅ Gasless operations - Works even when wallet has no ETH
• ✅ Period limits - Built-in safety against abuse
• ✅ Session isolation - Separate account for rescue operations

---

📱 Social Media

Follow our project journey and see how MetaMask Advanced Permissions transformed emergency asset recovery:

Twitter: https://x.com/UShtein/status/2006080560037515749?s=20

Featuring @MetaMaskDev - showcasing the power of ERC-7715 for autonomous wallet protection

---

🚀 Quick Start

# Install
npm install

# Configure
cp .env.example .env
# Add your Pimlico API key

# Run
npm run dev

Requirements:

• MetaMask Flask (for ERC-7715 support)
• Safe multisig on Sepolia
• Some Sepolia ETH & USDC for testing

---

🧰 Tech Stack

Core:

• Next.js 16 + React 19
• Viem + Wagmi
• MetaMask Smart Accounts Kit (Hybrid)
• ERC-7715 Advanced Permissions

Infrastructure:

• Pimlico (Bundler + Paymaster)
• Safe (Multisig destination)
• Sepolia Testnet

---

📊 Key Features

Feature	Description
Real-time Monitoring	3-second balance checks
Smart Thresholds	ETH < 0.005 / USDC < 0.5
Autonomous Rescue	No user action required
100% Gasless	Pimlico Paymaster sponsorship
Safe Integration	Rescued funds to multisig
30s Cooldown	Prevents spam operations

---

🎮 Testing

1. Start Monitoring in dashboard
2. Click "SIMULATE ETH DRAIN" or "SIMULATE USDC DRAIN"
3. Follow modal instructions:
   • Open MetaMask Flask
   • Send assets from Protected Account
   • Watch automatic rescue happen!

---

🔐 Security

ERC-7715 Permissions:

• Period-based limits (0.1 ETH/hour, 100 USDC/hour)
• 30-day expiry
• Revocable anytime
• Session account isolation

Why Safe?

• Funds rescued to multisig (not another EOA)
• Requires multiple signatures for withdrawal
• Maximum security for recovered assets

---

🏗️ Architecture

Compromised EOA
    ↓ (grants ERC-7715 permission)
Session Account (Hybrid Smart Account)
    ↓ (monitors balances every 3s)
Dashboard (detects attack)
    ↓ (uses granted permission)
Automatic Rescue (gasless UserOp)
    ↓ (transfers assets)
Safe Multisig ✅

---

🌐 Configuration

Sepolia Network:

• RPC: https://ethereum-sepolia-rpc.publicnode.com
• USDC: 0x1c7D4B196Cb0C7B01d743Fbc6116a902379C7238
• Chain ID: 11155111

Thresholds:

• ETH Alert: 0.005 ETH
• USDC Alert: 0.5 USDC
• Monitoring Interval: 3 seconds
• Rescue Cooldown: 30 seconds

---

📝 Environment Variables

NEXT_PUBLIC_PIMLICO_API_KEY=pim_xxxxx
NEXT_PUBLIC_RPC_URL=https://ethereum-sepolia-rpc.publicnode.com

---

🎯 MetaMask Hackathon Submission

This project demonstrates:

✅ ERC-7715 Advanced Permissions - autonomous rescue operations
✅ MetaMask Smart Accounts Kit - Hybrid implementation
✅ Account Abstraction - ERC-4337 UserOperations
✅ Gasless Transactions - critical for compromised wallets
✅ Real-world Use Case - emergency asset recovery

---

🚧 Limitations

• MetaMask Flask required (ERC-7715 not in stable yet)
• Sepolia testnet only
• Tab must stay open for monitoring
• Session key stored in localStorage

---

📞 Info

GitHub: github.com/umeeSthein/aegis7715
Network: Sepolia Testnet
License: MIT