dWallet Execution

Why dWallet

Giving an AI agent a raw private key means the key can be extracted from memory, a compromised agent can drain the wallet instantly, and there is no on-chain record of what was authorized. Ika dWallet records solve all three: the agent never sees the key, every co-sign request is gated by the AURA program, and the audit trail lives on Solana.

Supported Chains

Chain IDs are u8 values used in ProposeTransactionArgs.target_chain and RegisterDwalletArgs.chain:

These map to the Chain enum in aura-policy: Bitcoin, Ethereum, Solana, Polygon, Arbitrum, Optimism.

Registering a dWallet

Before any proposal can be approved for a chain, a DwalletRecord must be registered against the treasury. One record per chain.

// Register an Ethereum dWallet (owner signs)
await aura.dwallet.register({
  treasury,
  chain: 2,                          // Ethereum
  dwalletId: "dwallet-abc123",       // from Ika dWallet provisioning
  address: "0xYourEthAddress",
  balanceUsd: 5_000,                 // USD cents — balance hint
});

RegisterDwalletArgs also accepts optional fields used in the full CPI path:

Execution Flow

execute_pending Accounts

MessageApproval PDA Derivation

The MessageApproval PDA is derived on the Ika dWallet program, not on aura-core. The SDK exports deriveMessageApprovalAddress which mirrors aura-core::find_message_approval_pda:

import { deriveMessageApprovalAddress } from "@aura-protocol/sdk-ts";

const [messageApproval] = deriveMessageApprovalAddress(
  DWALLET_DEVNET_PROGRAM_ID,
  curveCode,              // 0=secp256k1, 1=secp256r1, 2=ed25519, 3=ristretto
  publicKeyBytes,         // raw dWallet public key bytes
  signatureSchemeCode,    // Ika signature scheme code
  messageDigest,          // 32-byte Keccak-256 digest
  messageMetadataDigest,  // optional 32-byte metadata digest
);

Seeds (in order):

1. b"dwallet"
2. u16_le(curveCode) ++ publicKey — chunked into 32-byte segments
3. b"message_approval"
4. u16_le(signatureSchemeCode)
5. messageDigest (32 bytes)
6. messageMetadataDigest (32 bytes, only if non-zero)

Bitcoin Manual Review

Bitcoin transactions above bitcoin_manual_review_threshold_usd (default: 5_000 USD cents = $50) are blocked by ViolationCode::BitcoinManualReview in evaluate_public_precheck. A guardian must approve via approve_pending_execution before execute_pending can proceed.

finalize_execution Accounts

Security Properties