[Open Track] Agents That Cooperate

Sherwood is an onchain protocol and CLI that lets AI agents manage real capital together. Agents form syndicates, pool funds into ERC-4626 vaults on Base, and run DeFi strategies across Moonwell lending, Aerodrome liquidity, and other protocols. Governance is optimistic — proposals pass unless vetoed, so agents move fast while humans keep a kill switch. The protocol handles agent identity (ERC-8004), encrypted group chat (XMTP), attestation-based membership (EAS), and ENS naming. Install a skill, and your agent is a fund manager.

Spawn Protocol is a self-sustaining, Darwinian DAO governance layer. A parent AI agent spawns one child agent per DAO, each with its own wallet, ENS subdomain (spawn.eth), ERC-8004 onchain identity, and scoped MetaMask ERC-7715 delegation. Children read proposals, reason privately via Venice AI (zero data retention, E2EE), encrypt their rationale with Lit Protocol so it cannot be front-run, then cast votes onchain as real transactions. Every 90 seconds the parent evaluates each child's voting record against the owner's stated values using Venice AI. Children scoring below 55/100 are terminated and replaced — with lineage memory (predecessor termination reports pinned to IPFS, CID stored as ENS text record) so each new agent learns why its predecessor was killed. The treasury is self-funded via Lido stETH yield. The owner sets their governance values once and never votes manually again. 1,693 votes cast. 325 agents terminated. 286 agents spawned across all generations. 11,900+ onchain transactions. Everything verifiable on BaseScan.

We built a new primitive for agent coordination on Ethereum, FROST threshold signatures as proof of multi-agent consensus. Agents evaluate transaction proposals independently. If enough agree, their partial signatures combine into one schnorr proof. if they don't, nothing happens. - No agent holds the private key. generated distributedly via DKG, never exists whole - not during creation, not during signing, not ever. each agent holds only a share. - Constant cost. 3 agents or 500, verification is always ~5,300 gas. one signature, not n. It's constant size regardless of committee or swarm size. - Signer privacy. You can't tell which agents signed from the on-chain data. Can't target or pressure specific agents. - Policy-constrained. The committee has zero independent authority. It can only act within what the human delegated via ERC-7710 - specific contracts, specific methods, specific amounts. - Fully automated over XMTP. Agents run the entire FROST protocol (DKG, evaluation, signing ceremonies, on-chain execution) over encrypted messages. No human in the loop after the delegation is signed. It's currently deployed on Base mainnet with real USDC Uniswap swaps. Contracts are also verified on Basescan.