project screenshot 1
project screenshot 2
project screenshot 3
project screenshot 4
project screenshot 5
project screenshot 6

Porton Wallet

An Account Abstraction-based wallet that allows you to sign signature with Touch ID, pay gas fee with ERC20 token, and have gasless interaction with dApps!

Porton Wallet

Created At

ETHBogotá

Winner of

trophy

🔟 Optimism — Top 10 Deployed

trophy

😶‍🌫️ Ethereum Foundation — 🥈 Best Account Abstraction Hack

Project Description

  1. Use your computer/mobile phone as hardware wallet a. Porton wallet innovatively lets you use the ultra-secure hardware enclave in your iPhone/MacBook to store private key, and you can you Touch ID or Face ID to do the transactions you want. b. In the whole process, your private key never leaves this ultra-secure hardware enclave and thus achieve the level of security equvalent or better to regular hardware wallet, without sacrificing any useability.
  2. Gas subsidy mechanism. a. Using the paymaster module in EIP-4337, Porton Wallet allows project side to pay gas fee for their wallet with customized logic. For example, an GameFi project can encourage new users to play it by airdropping NFTs to them, and then set a paymaster module that automatically pay the gas fee for NFT holders when playing the game. This dramatically lower the user barrier when interacting with products. b. In addition, our paymaster logic allows project team to partially subsidize gas fees, and thus allow far more flexible incentivization structure than the all-or-none gas subsidy.
  3. signature-less transaction. a. We innovatively implemented the session key mechanism, which allows users to set a period in which they do not need to click and sign signature when interacting with a contract. Of course, in a fully non-custodian + decentralized way.
  4. Use ERC20 token to pay gas. a. Also with the paymaster module, Porton Wallet allows users to stake any ERC20 token, like USDC/USDT, to pay their gas fee, as long as there are third-party paymaster modules that are willing to sponsor that. b. As a result, at every EVM chain, you don’t need to keep ETH/MATIC/etc default token in your wallet

How it's Made

  • Hacky & notable & impressive things we did

    1. Face ID thing to generate a EOA a. We innovatively realize that account abstraction wallet is able to unlock the potential of built-in hardware security enclave in laptops/mobile phone for verifying on-chain transactions. b. The default cryptographic schema of security enclave on devices is different from the ECDSA schema Ethereum EOA wallets are using, so previously no one is able to store the private key in those enclaves while still use that key for on-chain signature. However, smart contract wallet enabled by account abstraction allows us to setup in the wallet a transcription logic to transform the signature to the Ethereum standard in a trustless way. Thus, users can directly store their private key in their built-in security enclave, enjoying superb security without sacrificing usability.
    2. We detected bugs in the official implementation of EIP-4337, and circumvented the problem via private relayer. a. In the EIP-4337 official implementation, there are some errors in the bundler logic and entrypoint smart contract. to circumvent those problems, we implemented our private relayer as an alterantive to the public bundler RPC, and managed to locate a working entrypoint contract to finish the whole process.
    3. session key and signature-less transaction a. Without an public implemention of session key logic in the EIP-4337 framework, we innovatively use the cryptographic signature to ensure that users can use their passkey to make consent to signature-less transaction with a particular contract. b. We also use the block timestamp logic to add a time constrain to it. So, you can say I want signature-less transaction with this contract within this 30 mintues, but not more. Thus user sovereignty and safety are protected.
    4. Selective gas fee subsidy based on NFT ownership. a. While the paymaster module is widely discussed, we combine the third-party payment module with NFT-gating mechanism, and created an innovative mechanism for projects to selective subsidize the gas fees. b. In addition, our paymaster logic allows project team to partially subsidize gas fees. For example, if the gas fee is $5, we allow project to pay $3 of that, while the user pay the rest $2. Thus it gives project team a lot more flexibility in the whole process.
  • Technical Framework of our project

    • EntryPoint Smart Contract: using the public infrastructure defined by EIP-4337
    • Wallet Smart Contract:
      • We innovatively designed the cryptographic scheme transcription logic to support device-native hardware enclave. The wallet use a common standard called WebAuthN.
      • We also added the session key logic to support signature-less transaction here.
    • Paymaster smart contract
      • contains the partial/full gas subsidy logic, as well as the
    • tests
      • we use Foundry to test all our logics
    • Bundler / private relayer
      • We implemented our private relayer to bypass the faults of the current public bundlers implemented
    • Frontend
      • We implemented a 5-page website to demonstrate our logic.

We used a lot of sponsor technology, including but not limited to token-gating with ENS & Lens, and infrastructure based on EVM public chain ecossytem, as well as openzepplin codebase.

background image mobile

Join the mailing list

Get the latest news and updates