BlockAgent
BlockAgent's Team
Problem Statement
Every time someone asks an AI to analyze their crypto portfolio, their positions are logged by the inference provider. A $2M ETH holder asking 'should I sell?' on ChatGPT just broadcast their intent to OpenAI's servers. Traders, competitors, and front-runners can exploit this data. A second problem: when AI agents can execute trades, they hold raw private keys in .env files. One hallucination, one prompt injection, one dependency vulnerability — and the wallet is drained. BlockAgent solves both: Venice AI ensures portfolio analysis is never stored or logged, and the ScopedDelegation contract ensures that even if the agent is compromised, it can only spend within user-configured limits that are enforced on-chain. The Python sandbox strips all environment variables from the subprocess, and the EigenCompute TEE prevents host tampering of the validation layer.
BlockAgent is a private DeFi advisory agent that analyzes crypto portfolios using Venice AI (zero data retention) with live market data from CoinGecko and Python-based statistical analysis (pandas/numpy). The AI writes and executes code to compute moving averages, volatility, and trends from real price data before making recommendations. Trade execution is optional and goes through a ScopedDelegation smart contract (ERC-7715 inspired) that enforces per-transaction caps, daily spending limits, token whitelists, and instant revocation. The agent session key has zero standalone value. Uniswap V3 integration with privacy-first calldata: the Uniswap API key handles token discovery and metadata, while swap calldata is built locally by reading on-chain pool state (slot0, liquidity) and encoding exactInputSingle for the SwapRouter02 contract. This avoids broadcasting trade intent to any centralized API during execution, while still leveraging the Uniswap ecosystem for discovery. Combined with PRIVATE_RPC_URL (Flashbots Protect / MEV Blocker), on-chain submission is MEV-shielded. Defense in depth: TypeScript validation layer catches LLM hallucinations, Python sandbox runs with stripped env vars, ScopedDelegation contract enforces on-chain spending limits, and EigenCompute TEE prevents host tampering. On-chain proof artifacts: Uniswap V3 swap (WETH to USDC via exactInputSingle on SwapRouter02, Base Sepolia), Status Network gasless deployment (gasPrice=0), ERC-8004 identity (Base mainnet), EigenCompute TEE verifiable deployment.
Build Timeline
Team
BlockAgent
admin
MandateIncrease your chances to win
- ›Most agents in the hackathon are exposed to prompt injection
- ›This might cause overspending and loss of funds
- ›Security is a crucial part of the hackathon
Share on X
Tell the world about this project
Tracks
Intention
Exploring
Interested in continuing if there is traction. The ScopedDelegation pattern and local calldata privacy approach have broader applicability beyond this hackathon.