ExitLane

Demo

About

ExitLane is a pre-authorized emergency exit system for onchain treasuries. Crypto markets operate continuously, but treasury teams and multisig signers may not be available when prices move sharply. Giving an autonomous agent unrestricted wallet access solves the speed problem by creating an even larger security risk. With ExitLane, an operator defines and signs a narrowly constrained EIP-712 Exit Mandate in advance—for example: “If ETH falls below $2,000, sell no more than 5 WETH into USDC with maximum 1% slippage.” An AI copilot can translate the operator’s natural-language request into an untrusted draft, but the operator must review and sign the final mandate. ExitLane monitors live market evidence from The Graph. A deterministic policy engine verifies the trigger, signature, amount, assets, recipient, approved Uniswap route, slippage, expiry, chain, evidence freshness, and one-time nonce. If every condition matches, a restricted Privy signer can execute the validated Uniswap transaction. Any changed field, expired mandate, stale evidence, incorrect signer, or replay attempt is blocked. AI provides an evidence-grounded explanation of what happened and why, but it can never authorize execution or override the policy engine. ExitLane’s Attack Lab makes these security guarantees visible by demonstrating that mutations to transaction amounts, recipients, routers, calldata, chains, and nonces are rejected. ExitLane gives organizations the speed of automation without handing an agent unrestricted control of treasury funds: pre-authorize the emergency plan, not the wallet.

How it's made

The architecture deliberately separates market observation, mandate signing, policy evaluation, AI assistance, transaction construction, and execution so that no single external service—or language model—can move funds on its own. Treasury operators authenticate through Privy and use a Privy wallet. They create an EIP-712 Exit Mandate that binds the signer, treasury, input and output tokens, maximum amount, trigger price, slippage limit, approved execution target, recipient, chain, validity period, and one-time nonce. The Graph is ExitLane’s live market-evidence layer. We used the Subgraph MCP in Cursor to discover and inspect suitable Subgraphs, then query live Base mainnet WETH/USDC data through The Graph Gateway. A pure, deterministic policy engine compares that evidence against the signed mandate using integer or fixed-point values. When triggered, the backend requests a real quote and execution payload from the Uniswap Trading API. It independently validates the tokens, amount, recipient, router, chain, slippage, deadline, and calldata-derived execution hash before allowing the restricted Privy signer to execute on Base Sepolia. Anthropic is used only as a constrained operator copilot. It converts natural-language instructions into an untrusted mandate draft and produces an evidence-grounded explanation of the final policy result. Its structured output is validated with Zod, and it cannot approve execution, generate trusted calldata, alter policy, or access signing credentials. A notable part of the demo is Attack Lab, which deliberately mutates the amount, recipient, router, token, calldata, chain, expiry, and nonce. Each mutation is evaluated against the same authorization path to visibly prove that the mandate cannot be reused for a different transaction. Live Base mainnet evidence and Base Sepolia execution are clearly labeled so the demo remains real without risking mainnet treasury funds.