Passkeys & Account Abstraction: How We Removed Seed Phrases Without Sacrificing Self-Custody

For the first fifteen years of cryptocurrency and Web3, the onboarding experience was notoriously unforgiving. Users were forced to write down 12 or 24 random mnemonic words on a piece of paper, hide it under a mattress, and live in constant fear: lose the paper, lose your life savings; click a malicious phishing link, watch your entire wallet drained in seconds. Mainstream users and enterprise finance departments understandably refused to tolerate such an archaic security model. In late 2026, Wullut has permanently dismantled this barrier by deploying **Passkey-Driven Smart Contract Accounts**, combining FIDO2 biometric authentication with ERC-7579 modular account abstraction. ---

Why Legacy Seed Phrases Failed Users

The core flaw of Externally Owned Accounts (EOAs)—the default wallet structure of early Ethereum and Bitcoin—was that the cryptographic key pair was directly tied to the account itself: 1. **Zero Key Rotation**: If a private key was ever exposed, the account could never be salvaged. 2. **All-or-Nothing Permissions**: A single signature granted total control over every token in the wallet. 3. **No Social or Enterprise Recovery**: Losing access to the seed phrase meant absolute, permanent financial loss. ---

The Wullut Architecture: Passkey Modular Accounts

By moving from EOAs to programmable smart contract accounts backed by WebAuthn passkeys, Wullut transforms security from a fragile secret into a multi-layered, recoverable system: ``` ┌─────────────────────────────────────────────────────────────┐ │ User Mobile Device / PC │ │ Touch ID / Face ID / Windows Hello Authentication │ └──────────────────────────────┬──────────────────────────────┘ │ WebAuthn FIDO2 P-256 Elliptic Curve Signature │ ▼ ┌─────────────────────────────────────────────────────────────┐ │ Wullut Smart Contract Account (ERC-7579) │ │ │ │ ┌───────────────────────┐ ┌─────────────────────────┐ │ │ │ P-256 Verifier Module │ │ Spending Limit Policy │ │ │ │ (Hardware Passkey) │ │ (Auto-approve < $500) │ │ │ └───────────────────────┘ └─────────────────────────┘ │ │ ┌───────────────────────┐ ┌─────────────────────────┐ │ │ │ Social / MPC Recovery │ │ Session Keys for DApps │ │ │ │ (Trusted Quorum) │ │ (Zero gas popups) │ │ │ └───────────────────────┘ └─────────────────────────┘ │ └─────────────────────────────────────────────────────────────┘ ```

1. Hardware Secure Hardware Enclave (P-256 Curve)

Your phone or laptop hardware enclave directly signs transaction intents using the industry-standard `secp256r1` (P-256) curve supported by Apple, Google, and Microsoft. Private keys are generated inside the silicon chip and never leave the device, rendering phishing websites entirely impotent.

2. Programmable Spending Rules & Gas Sponsorship

Users no longer need to hold native blockchain tokens (like ETH or SOL) to pay unpredictable gas fees. Wullut's paymaster infrastructure automatically sponsors network gas or allows users to pay transaction fees in the stablecoin of their choice (e.g., USDC or EURC). Furthermore, customizable policies permit daily micro-transfers without requiring biometric authentication every single time.

3. Guardian Quorum & Dead-Man Switch Recovery

If a phone is dropped in the ocean, your funds are completely safe. Accounts can be recovered using a customizable guardian network—such as trusted family members, corporate board members, or an encrypted cloud escrow shard—without ever exposing your funds to a centralized custodian. ---

Enterprise-Grade Peace of Mind

For corporate treasuries, the modular architecture enables role-based access control: * An accounts payable manager can initiate vendor payouts up to \$50,000 using their passkey. * Transfers exceeding \$100,000 automatically trigger a 3-of-5 executive passkey signature requirement. * Stolen laptop credentials can be revoked immediately from the admin console without having to migrate funds to a brand-new wallet. Self-custody shouldn't require an advanced degree in cryptography. By pairing biometric simplicity with cryptographic rigor, Wullut is delivering the wallet experience that billions of users have been waiting for.