Non-Custodial Design

n0ir is fully non-custodial. Your wallet (EOA) always owns the funds. The agent only acts with limited, revocable permissions.

Control Model

Role	Description	Permissions
SUDO Validator (User’s EOA)	Your wallet (MetaMask, Rainbow, etc.). Full control over the smart account.	Can withdraw, revoke, or execute any operation anytime.
REGULAR Validator (Agent)	Session key controlled by backend.	Limited to whitelisted vault, bridge, and withdrawal functions.

You can revoke the agent anytime or withdraw directly from your smart account.

Smart Account Structure (ZeroDev Kernel v3.2)

Each user deploys a smart account with two validators:

Smart Account (Kernel)
├── SUDO Validator -> User EOA (root owner)
│   - Full control
│   - Can revoke agent
│   - Can withdraw anytime
└── REGULAR Validator -> Agent session key
    - Limited permissions
    - 30-day expiry
    - Whitelisted functions only

Agent Permissions

Allowed Operations

Vault Deposits / Withdrawals (ERC4626) — Only to approved vaults on Base and Arbitrum.
USDC Approvals — For whitelisted vaults or Euler Vault Connector.
Euler Vault Ops — Through whitelisted EVC contracts.
CCTP Bridge — Cross-chain USDC transfers between Base and Arbitrum.
USDC Transfers — Only to the user’s EOA (for withdrawals).

Forbidden Operations

Withdraw to arbitrary addresses
Approve or call non-whitelisted contracts
Transfer NFTs or other tokens
Modify ownership or validators

Security Model

Backend compromise = no fund loss. Even if the agent key leaks, it can:

Move funds only between whitelisted vaults
Withdraw only to user’s EOA

Recovery Scenarios

Scenario	User Action
Agent malfunction	Use Emergency Withdraw — funds sent to EOA
Backend offline	Interact with vaults directly via your EOA
Frontend offline	Revoke session key on-chain or wait expiry
Everything offline	Use Etherscan/Web3 tools to redeem manually

Your EOA is always the root validator — full recovery guaranteed.

Technical Details

ZeroDev Kernel v3.2 — modular ERC-4337 smart account
Permission Validator — whitelisted calls only
Paymaster Support — gas-sponsored transactions
Base-Native — optimized for the Base ecosystem

No user private key or seed phrase is ever stored by n0ir.

Introduction Revenue Model

Overview

Yield Agent

LP Vaults

LP Agent

Tokenomics

Legal

Non-Custodial Design

Control Model

Smart Account Structure (ZeroDev Kernel v3.2)

Agent Permissions

Allowed Operations

Forbidden Operations

Security Model

Recovery Scenarios

Technical Details

​Control Model

​Smart Account Structure (ZeroDev Kernel v3.2)

​Agent Permissions

​Allowed Operations

​Forbidden Operations

​Security Model

​Recovery Scenarios

​Technical Details

Control Model

Smart Account Structure (ZeroDev Kernel v3.2)

Agent Permissions

Allowed Operations

Forbidden Operations

Security Model

Recovery Scenarios

Technical Details