curated list of agent wallet and custody infrastructure. evaluated against five properties that define real agent custody.
any agent that holds real capital needs all five. if it is missing one, it is not custody. it is a hot wallet with extra steps.
- non-drainable. no single key compromise drains the wallet. threshold or split-key signing minimum.
- policy-bound. spend limits, allowlists, time locks enforced on chain. not in client code.
- attested. every action produces a verifiable proof. anchored to an immutable ledger.
- remembering. the agent carries context across sessions. decisions are traceable.
- killable. a human or risk system can halt the agent instantly. no override.
| project | non-drainable | policy-bound | attested | remembering | killable | privacy |
|---|---|---|---|---|---|---|
| shieldedvault | yes (FROST 2-of-3) | yes (Sui Move) | yes (ZAP1 mainnet) | yes (MemPalace) | yes | yes (Zcash shielded) |
| coinbase agentkit | no (custodial) | partial (server-side) | no | no | partial | no |
| trust wallet TWAK | no (single key) | no | no | no | no | no |
| privy agentic wallets | no (single key) | partial (policy API) | no | no | partial | no |
| crossmint agent wallets | no (custodial) | partial | no | no | partial | no |
| chimoney AI wallets | no (custodial) | no | no | no | no | no |
| lit protocol | partial (N-of-M) | partial (conditions) | no | no | partial | no |
| fireblocks | yes (MPC) | yes (policy engine) | partial (audit log) | no | yes | no |
| human.tech WaaP | partial (2PC-MPC) | partial (Sui Move) | no | no | partial | no |
| aeon protocol | partial (Ika MPC) | partial | no | no | partial | no |
tools that split keys so no single compromise drains funds.
- shieldedvault FROST CLI FROST(Pallas, BLAKE2b-512) with RedPallas. 2-of-3 threshold. keygen, sign, verify. Zcash native.
- zcash-ika 2PC-MPC split-key custody via Ika dWallets. 54 exports. BTC + ZEC + EVM signing.
on-chain rules that limit what the agent can do.
- shieldedvault Sui Move policy programmable spend limits, allowlists, time locks. deployed on Sui testnet.
verifiable proof of what the agent did.
- ZAP1 attestation protocol. BLAKE2b Merkle tree anchored to Zcash mainnet. 9 event types. verified on 5 EVM chains. ZIP-1243 under editor review.
persistent agent memory across sessions.
- MemPalace semantic search + knowledge graph. 19 MCP tools. ChromaDB + SQLite KG.
- coinbase agentkit MPC wallets, 60+ on-chain actions, multi-framework (LangChain, CrewAI, Vercel AI).
- hermes agent 37K stars. blockchain skills (Base, Solana, Zcash).
- zcash-mcp 22 tools for Zcash. blockchain queries, memo decoding, attestation verification. 2,480 downloads/month.
PRs welcome. add your project with an honest assessment against the five properties. no marketing copy. just facts.
CC0