How Deploy.Finance Uses Account Abstraction to Make Self-Custody Simple and Secure


Account abstraction is quickly transforming the Web3 ecosystem, and Deploy.Finance is at the forefront of this evolution. By combining streamlined user experiences with uncompromising security, Deploy.Finance delivers a revolutionary approach to decentralized finance (DeFi) that empowers users to retain full control over their assets—without the steep learning curve typically associated with self-custody.

What Is Account Abstraction and Why Does It Matter?

At its core, account abstraction is a paradigm shift in how blockchain wallets operate, breaking away from the traditional model where users must directly manage private keys and complex blockchain interactions. Instead, it decouples user authentication from transaction authorization. This makes it possible to control high-functionality wallets using familiar login methods, such as an email address.

Deploy.Finance implements this model in partnership with Privy.io, a leading provider of authentication and wallet infrastructure that supports over 50 million users across more than 900 teams. Through this collaboration, users can generate powerful, secure wallets using only an email login, while maintaining full control of their private keys.

Dual Wallet Architecture: Balancing Security and Functionality

To deliver both intuitive usability and ironclad security, Deploy.Finance relies on a dual-wallet system consisting of Funding Wallets and Agent Wallets.

Funding Wallets: Your Trusted Control Center

When a user signs up with Deploy.Finance using their email address, a Funding Wallet is automatically created. The associated private key governs this wallet, which acts as the central hub for managing transactions, including the deployment and revocation of trading agents.

This wallet is tied to a public receiving address visible on major blockchain explorers like Arbitrum and HyperLiquid, providing complete transparency across the ecosystem. All signature operations and fund custody originate from the Funding Wallet, ensuring that the user retains full control at all times.

Agent Wallets: Secure, Limited Autonomy

While the Funding Wallet oversees all permissions and operations, actual trading activities take place in delegated Agent Wallets. Created through Deploy’s internal delegation process, Agent Wallets are assigned explicit, limited permissions—restricted solely to executing trades and checking balances.

Crucially, these wallets lack the capability to transfer or withdraw funds. This limitation is built into the protocol itself, creating a secure execution environment for autonomous trading strategies without compromising user control.

Embedded and Smart Wallets: A Hybrid Framework

Deploy.Finance further enhances usability and programmability by integrating both Embedded Wallets and Smart Wallets in a hybrid structure that caters to a range of user needs and technical capabilities.

Embedded Wallets: Simple, Self-Custodied EOAs

Embedded Wallets (EWs) are user-operated externally owned accounts (EOAs) that abstract away the complexity typically associated with private key management. These wallets can be created through simple email-based authentication and offer baseline functionalities required for asset custody.

Although they are not inherently programmable beyond traditional EOA capabilities, Embedded Wallets are fully secure and under user control, forming the foundation for more advanced operations.

Smart Wallets: Advanced Features Through Programmability

After creating an Embedded Wallet, users gain access to Smart Wallets (SWs)—contract-based wallets automatically generated from the EW. These wallets unlock powerful features like:

  • Multi-signature support

  • Key rotation

  • Social recovery

  • Custom transaction logic

All Smart Wallet activities are managed by the private key from the user’s Embedded Wallet, meaning even advanced features remain tethered to secure, user-controlled access.

This dual-wallet configuration allows users the best of both worlds: easy onboarding with robust programmability and security baked in.

Cutting-Edge Security Infrastructure

Deploy.Finance’s account abstraction model does more than streamline DeFi interaction—it also sets a new bar for self-custody security.

Secure Key Generation via Cryptographic Standards

The platform employs well-established standards like BIP-39 and BIP-44 for generating secure private keys. To safeguard these keys, Deploy.Finance employs Shamir’s Secret Sharing (SSS), which splits each key into multiple encrypted segments stored separately. This decentralized key storage model ensures there is no single point of failure.

Multi-Party Computation for Key Control

Deploy.Finance uses three distinct types of cryptographic shares:

  • Device/Enclave Shares: Stored securely on the user’s device

  • Auth Shares: Stored by Privy.io

  • Recovery Shares: Held by the user and used for account restoration

Private keys are only reconstructed within secure execution environments and only when exactly two of the three shares are present. This architecture ensures hardened resistance against unauthorized access.

Session Key Management for Controlled Automation

For autonomous trading, the system generates session key pairs inside Trusted Execution Environments (TEEs). These keys are scoped to provide only specific permissions—such as executing trades on approved protocols. They cannot move funds, interact with unapproved platforms, or perform any withdrawal-related operations.

This session-based model allows agents to act autonomously without ever compromising the user's full custody of their funds.

Standards-Based Architecture and Ecosystem Compatibility

Deploy.Finance aligns with critical blockchain standards to remain interoperable and secure. It supports:

  • ERC-4337 for Ethereum-compatible smart contract wallets

  • EIP-7702 for advanced EOAs that support programmability

Supported trading protocols currently include:

  • On Ethereum and Base: Uniswap and 1inch

  • On Solana: Jupiter, Raydium, and Orca

By whitelisting these trusted protocols, the platform ensures that agent activities are tightly controlled, minimizing exposure to bad actors or compromised DeFi applications.

Absolute User Ownership and Portability

Perhaps the most compelling feature of Deploy.Finance’s account abstraction model is its unshakable commitment to user sovereignty. At any time, users can export their private keys and migrate to third-party wallets like MetaMask if desired.

Even in the hypothetical event that Deploy.Finance or Privy.io ceased operations, users would retain uninterrupted access to their assets. Authentication supports familiar mechanisms like email-based login with optional two-factor configuration, while privileged actions—like fund delegation—require explicit cryptographic proof and user consent. Agent access can be revoked instantly with a single click via the user dashboard.

Enabling the Future of Accessible DeFi

Account abstraction is more than a technical advancement—it’s a fundamental reimagining of what financial autonomy in DeFi can look like. Deploy.Finance has transformed an otherwise complex process into a friendly, intuitive system that combines institutional-grade security with effortless onboarding.

In doing so, the platform achieves a rare technical trifecta:

  • Complete self-custody of funds

  • Sophisticated autonomous trading strategies

  • Accessible user experience requiring no prior crypto knowledge

Deploy.Finance envisions this technology as the foundation of a broader financial ecosystem—one where users can grow, invest, and transact freely, all without relinquishing control to third parties. In an era where centralized institutions often fail to deliver transparency or accountability, account abstraction offers a clear path forward: one of simplicity, security, and complete ownership.


Ready Deploy Grow
Your funds, your ownership.

Ready Deploy Grow
Your funds, your ownership.

Ready Deploy Grow
Your funds, your ownership.