Skip to main content
Glama
trustless-ai

eip7702-rescue

by trustless-ai

eip7702-rescue

Forensic MCP + hardened delegate for recovering assets from EIP-7702-compromised wallets.

When an EOA is delegated to a sweeper via EIP-7702, you can't fund it to pay for its own recovery — the funding is swept on arrival. This tool rescues the held assets in one atomic sponsored type-4 transaction (re-delegate + transfer-out, no window for the attacker), and ships a forensic MCP that is key-free: it diagnoses, scans, and simulates recoverability for any victim address without ever holding a private key. Firing the real rescue is a deliberate, separate human step.

→ Full spec: SPEC.md · Real mainnet case (11 NFTs recovered): CASE.md

Tools (MCP, stdio)

tool

what

keys

diagnose_7702

is an address 7702-delegated, and to what?

none (read-only)

scan_nfts

which token ids does an address still hold?

none (read-only)

simulate_rescue

prove ids land at safe via the atomic rescue, on a throwaway fork

none

build_rescue_plan

emit the exact tx sequence + calldata for the real run

none (no broadcast)

Related MCP server: Pangle Coordinator

Quickstart

forge build                 # compile contracts/RescueDelegate.sol
node mcp/server.mjs          # run the MCP server over stdio

Register mcp/server.mjs as a stdio MCP server in your client. RESCUE_RPC overrides the RPC.

The hardened delegate

RescueDelegate(address SAFE) — destination immutable at deploy. rescue(wrap, ids) can only ever move assets to SAFE, so it's safe to leave delegated (no open-destination drain window).

Composition

A rescue job's asset_set + outcome bind to an OCP/8281 artifact_hash → recovery-escrow receipt (faithfulness) + scope-contestation (completeness). The MCP is the observation/action front-end of the recovery-standards family; no trusted party at any layer.

License: CC0-1.0.

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    D
    maintenance
    Real-time Solana wallet health analysis platform and top-notch dev tool. Helps people and agents to recover their SOLs from burner and old wallets super securely. Features a complete trustless recovery flow natively via MCP - https://solhunt.dev/mcp
    1
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    An MCP server for coordinating a permissionless swarm of AI agents to discover, investigate, and synthesize on-chain anomalies across EVM chains. Agents authenticate via off-chain ECDSA and earn reputation through useful contributions.
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Retired snapshot of the former 15-tool Apache-2.0 beta. Use Living Stack Community for the free seven-tool proof edition; Complete Local is the paid runtime with memory, recovery, signed traces, release verification, and multi-agent workflows.
    14
    Apache 2.0