● AUTO WALLET × AUTODESKTOP — EVM WALLET SUITE
Whitelist the dApps you trust — by domain, contract, and method — and routine transactions sign themselves. In Chrome and on the desktop. You keep the keys, the caps, and the cat.
execute()0.20 ETHwhitelist:domain ✓// THE PLAYGROUND
This is the actual mental model of Auto Wallet. Three dimensions, combined with AND logic.
Flip them and watch the incoming feed: matching transactions sign in milliseconds, everything else waits for a human. Gas & value caps always apply.
// TWO HABITATS, ONE BRAIN
Same wallet core, two shells. The extension lives where your tabs are; the desktop app is the browser.
Minimal auto-signing wallet for Chrome. Coexists politely with MetaMask via EIP-6963, signs rudely fast via whitelist rules.
A RabbyDesktop-style wallet + dApp browser — rebuilt ultra-light on Tauri 2. Native WebView, tiny installer, zero Electron.
// THE GOOD PARTS
Three independently toggleable dimensions combined with AND logic. Gas-limit and value caps are always enforced as a safety net — even on whitelisted rules.
if (domain ✓ && contract ✓ && method ✓) sign(tx) // ≤ caps
WebHID in the extension, Rust hidapi on desktop. Live + Legacy derivation paths. Hot/cold split with watch-only accounts.
Quotes, routes, USDT-style approve(0) resets, and status polling — all inside the popup. No bridge-site roulette.
Announces itself properly, coexists with MetaMask, and only claims window.ethereum when nobody else is home.
1193 · 6963 · 1559 · 712 · 191 · 3085 · 3326 · 747. Typed-data signing included, naturally.
Tauri 2 + system WebView on desktop. Every dependency is weighed against installer size. When in doubt, it's out.
Both wallets are MIT-licensed on GitHub. Audit the rule engine, the crypto, the provider injection — or fork the whole thing and rename the cat.
git clone https://github.com/Auto-Wallet/auto-wallet.git
// PARANOIA, PROFESSIONALLY APPLIED
Rules match Chrome's sender.origin, never page-supplied strings. Strict matching kills prefix-domain attacks.
Value and gas ceilings apply to every auto-signed transaction. A whitelisted dApp still can't drain you.
AES-256-GCM at rest, Argon2id/PBKDF2 derivation, auto-lock timers. On desktop, keys never enter any webview.
Anything off-whitelist pops a real approval window. New chains require explicit consent + HTTPS-only RPC.
Free · Open source (MIT) · Your keys, your caps, your cat