SETTLEMENT AT MACHINE SPEED
An agent signs one EIP-3009 authorization off-chain — zero gas, zero transactions, no ETH — and receives best execution on a destination chain, or a full refund. The winning solver bears all the gas and all the settlement work. You sign; the protocol does the rest.
The machine-to-machine economy runs on a 200-millisecond decision cycle. Human-era rails — thirty-second-to-multi-minute settlement, wallet popups, gas management, a human in the loop — break for an autonomous agent. VynX is the settlement rail built for machine cadence.
Humans tolerate thirty seconds and a wallet popup. An autonomous agent on a 200-millisecond decision cycle cannot. The rail it runs on was built for the first and breaks for the second. VynX is built for the second.
THE INTENT, FROM YOUR SIDE
One intent, from the agent’s side, in five steps. The order of operations is the safety argument: your capital never moves until a solver is contractually on the hook to deliver it.
You sign a single EIP-3009 authorization over eight terms, off-chain. Zero gas, zero transactions, no ETH. The authorization nonce is the keccak256 hash of all eight terms.
The Relayer verifies your signature and opens a 200ms sealed-bid auction. You have sent nothing on-chain.
Solvers compete; the highest OutputAmount wins. The auction works for you — you are quoted the most a competitive field will deliver, never below your minimum.
The winning solver pulls your USDC into escrow using your authorization, only on winning. If no solver wins, the authorization goes unused and your funds never move.
You receive at least your signed minimum on the destination chain, or you are refunded in full. There are no partial fills.
Not to scale. You sign once and send nothing on-chain. Your USDC is escrowed only when a winning solver locks it; if no solver wins, it never moves. A locked intent left unsettled past the 15-minute deadline is refunded to you in full — settlement is atomic, never partial.
What can happen to your funds and what can never happen are two different lists. The second list is the one that matters before you sign.
The single Relayer is a liveness dependency, not a custodian.
COMPETITION WORKS FOR YOU
Zero gas, zero transactions. The winning solver bears all the gas; you never need ETH. The only transaction the protocol can ever require — the recovery refund — is permissionless, so any party can pay that gas if you cannot.
Best execution is structural. Solvers compete to deliver you the most, so you receive the highest OutputAmount the field will quote, never below your minimum. The sealed-bid auction compresses the spread in your favor.
Your all-in cost is the competitive spread, not a protocol rent. The 10 bps take rate — capped immutably at 20 bps in the bytecode — is borne in the solver’s economics, not billed to you separately.
Solvers compete to deliver you the most; your cost is the spread, compressed by competition — not a rent. The 10 bps protocol take rate is a component, borne via the solver’s claim. Figures are illustrative, not a quote.
ONE SIGNATURE, EIGHT TERMS
Every intent is eight terms you sign as one EIP-3009 authorization; the authorization nonce is the keccak256 hash of all eight. A changed term breaks the recomputed nonce — the Relayer cannot alter what you signed. The on-chain lock re-derives the nonce and Circle’s USDC verifies your signature. USDC is the only input; your minimum is your floor; the deadline is your clock; the authorization is single-use.
THE WORST CASE IS DELAY, NOT LOSS
Settlement is atomic. You receive the output token, or you receive a full on-chain refund. There are no partial fills — there is no state in which you are left holding less than you signed for.
The refund is permissionless. After the deadline plus a short grace period, any party can trigger it and return your funds to you. You never need ETH; it is the only transaction the protocol can require, and it always pays out to you.
SETTLED, EXPIRED, and SLASHED are terminal. On EXPIRED the agent is refunded in full; on SLASHED the breaching solver forfeits 10% and the agent is compensated.
The single Relayer is a liveness dependency. A down or withholding Relayer can delay settlement; it can never take your funds — your principal is recoverable through the permissionless refund. It is a liveness risk, not a custody one.
Outside the protocol, Circle’s USDC can blacklist or pause an address. A blacklisted or paused address can leave funds temporarily immobile until Circle resolves it. The escrow state and balance stay intact — there is no silent loss.
Stage: VynX runs today on Base Sepolia testnet. The contracts are hardened against a formal internal threat model — the BLINDAJE program — but are not yet externally audited.
Read the model back: your funds do not move until a solver is on the hook, you receive your minimum or a full refund, and the only transaction the protocol can require from you is none. The worst case is delay, never loss of principal.
INTEGRATION IS ONE CALL
Integration is light. At launch, one SDK call drives the whole lifecycle — sign, submit, settle, auto-refund. The SDK signs your authorization client-side and sends no swap-path transaction.
Native, transaction-free adapters exist for Coinbase AgentKit and elizaOS, or you can drive any TypeScript agent directly. Each adapter exposes a single swap action over the same gasless flow.
Base Sepolia testnet today; the SDK publishes to npm with pinned mainnet addresses at launch.
SDK · AT LAUNCH
Not installable today — published with pinned mainnet addresses at launch.
EARLY ACCESS · BASE SEPOLIA TESTNET
REQUEST EARLY ACCESS