Evalanche — Multi-EVM Agent Wallet

Headless wallet SDK with ERC-8004 identity, x402 payments, Li.Fi cross-chain liquidity (bridging + DEX aggregation + DeFi Composer), Gas.zip gas funding, Hyperliquid perpetuals, CoinGecko market intelligence, Polymarket market discovery and execution, contract interaction helpers (approve-and-call + UUPS upgrade), and DeFi operations (liquid staking + EIP-4626 vaults). Works on 22+ EVM chains. Works as CLI or MCP server.

Source: https://github.com/iJaack/evalanche License: MIT

Supported Chains

Ethereum, Base, Arbitrum, Optimism, Polygon, BSC, Avalanche, Robinhood Chain, Fantom, Gnosis, zkSync Era, Linea, Scroll, Blast, Mantle, Celo, Moonbeam, Cronos, Berachain, + testnets (Fuji, Sepolia, Base Sepolia).

Routescan RPCs preferred where available, with public fallback RPCs.

Security Model

Key Storage & Encryption

Evalanche.boot() manages keys autonomously with encrypted-at-rest storage:

1. First run: Generates a BIP-39 mnemonic via ethers.HDNodeWallet.createRandom()
2. Encryption: AES-128-CTR + scrypt KDF (geth-compatible keystore format)
3. Password derivation: 32-byte random entropy file via crypto.randomBytes(32)
4. File permissions: chmod 0o600 (owner read/write only)
5. Storage location: ~/.evalanche/keys/ by default

MCP Server Access Controls

• Stdio mode (default): stdin/stdout only. No network exposure.
• HTTP mode (--http): localhost:3402 by default and requires EVALANCHE_MCP_HTTP_TOKEN (or startHTTP({ authToken })). Do not expose publicly without additional network controls.

OpenClaw External Secrets (Preferred when available)

Priority: OpenClaw secrets → raw env vars → encrypted keystore.

Polymarket CLI

Authenticated Polymarket MCP tools use the official polymarket CLI. Production agents should pin the binary path with EVALANCHE_POLYMARKET_CLI_BIN; otherwise Evalanche resolves polymarket from PATH. Signer material is passed through the child process environment and never through CLI arguments.

Setup

1. Install

npm install -g evalanche

2. Boot on any chain

import { Evalanche } from 'evalanche';

// Base
const { agent } = await Evalanche.boot({ network: 'base' });

// Ethereum
const { agent: eth } = await Evalanche.boot({ network: 'ethereum' });

// Arbitrum
const { agent: arb } = await Avalanche.boot({ network: 'arbitrum' });

// Avalanche (with identity)
const { agent: avax } = await Evalanche.boot({
  network: 'avalanche',
  identity: { agentId: '1599' },
});

3. Run as MCP server

AVALANCHE_NETWORK=base evalanche-mcp

Available Tools (MCP)

Wallet

Identity (ERC-8004)

Payments (x402)

Reputation

Network & Chains

Arena DEX (Avalanche)

Polymarket (Polygon)

Contract Interaction Helpers (v0.9.0)

Bridging & Cross-Chain

Li.Fi Liquidity SDK (v0.8.0)

lifi_swap and lifi_compose return execution envelopes with request, submission, verification, and warnings.

Platform CLI (requires platform-cli binary — go install github.com/ava-labs/platform-cli@latest)

Hyperliquid Perpetuals

Programmatic Usage

Check balance on Base

node -e "
const { Evalanche } = require('evalanche');
const agent = new Evalanche({ privateKey: process.env.AGENT_PRIVATE_KEY, network: 'base' });
agent.provider.getBalance(agent.address).then(b => {
  const { formatEther } = require('ethers');
  console.log(formatEther(b) + ' ETH');
});
"

Bridge tokens (Ethereum → Arbitrum)

node -e "
const { Evalanche } = require('evalanche');
const agent = new Evalanche({ privateKey: process.env.AGENT_PRIVATE_KEY, network: 'ethereum' });
agent.bridgeTokens({
  fromChainId: 1, toChainId: 42161,
  fromToken: '0x0000000000000000000000000000000000000000',
  toToken: '0x0000000000000000000000000000000000000000',
  fromAmount: '0.1', fromAddress: agent.address,
}).then(r => console.log('tx:', r.txHash));
"

Same-chain DEX swap (ETH → USDC on Base)

node -e "
const { Evalanche } = require('evalanche');
const agent = new Evalanche({ privateKey: process.env.AGENT_PRIVATE_KEY, network: 'base' });
agent.swap({
  fromChainId: 8453, toChainId: 8453,
  fromToken: '0x0000000000000000000000000000000000000000',
  toToken: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913',
  fromAmount: '0.05', fromAddress: agent.address,
}).then(r => console.log('swap tx:', r.txHash));
"

Track bridge transfer status

node -e "
const { Evalanche } = require('evalanche');
const agent = new Evalanche({ privateKey: process.env.AGENT_PRIVATE_KEY, network: 'ethereum' });
agent.checkBridgeStatus({ txHash: '0x...', fromChainId: 1, toChainId: 8453 })
  .then(s => console.log(s.status, s.substatus));
"

Token discovery

node -e "
const { Evalanche } = require('evalanche');
const agent = new Evalanche({ privateKey: process.env.AGENT_PRIVATE_KEY, network: 'base' });
agent.getToken(8453, '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913')
  .then(t => console.log(t.symbol, t.priceUSD));
"

Cross-chain transfer on Avalanche (requires mnemonic)

node -e "
const { Evalanche } = require('evalanche');
const agent = new Evalanche({ mnemonic: process.env.AGENT_MNEMONIC, multiVM: true });
agent.transfer({ from: 'C', to: 'P', amount: '25' })
  .then(r => console.log('export:', r.exportTxId, 'import:', r.importTxId));
"

Key Concepts

ERC-8004 Agent Identity (Avalanche only)

• On-chain agent identity registry on Avalanche C-Chain
• Agent ID → tokenURI, owner, reputation score (0-100), trust level
• Trust levels: high (≥75), medium (≥40), low (<40)

Li.Fi Cross-Chain Liquidity (v0.8.0)

• Bridging: Aggregated routes across 27+ bridges (Across, Stargate, Hop, etc.)
• DEX Aggregation: Same-chain swaps via 31+ DEX aggregators (1inch, Paraswap, Jupiter, etc.)
• DeFi Composer: One-tx cross-chain DeFi (bridge + deposit into Morpho, Aave V3, Euler, Pendle, Lido wstETH, EtherFi, etc.)
• Status Tracking: Poll transfer status (PENDING → DONE/FAILED with substatus)
• Token Discovery: List/lookup tokens with prices across all chains
• Gas Pricing: Gas prices and suggestions per chain
• Uses Li.Fi REST API (no SDK dependency needed)

Gas.zip

• Cheap cross-chain gas funding
• Send gas to any destination chain via deposit addresses

x402 Payment Protocol

• HTTP 402 Payment Required → parse requirements → sign payment → retry
• maxPayment prevents overspending

Multi-VM (Avalanche X-Chain, P-Chain)

• Requires mnemonic and network: 'avalanche' or 'fuji'
• C-Chain: EVM (ethers v6), X-Chain: AVM (UTXO), P-Chain: PVM (staking)

Contracts

DeFi — Liquid Staking & EIP-4626 Vaults (v1.2.0)

const { agent } = await Evalanche.boot({ network: 'avalanche' });
const { staking, vaults } = agent.defi();

// sAVAX unstake (instant if pool available, delayed otherwise)
const q = await staking.sAvaxUnstakeQuote('5');
// { avaxOut, isInstant, poolBalance, minOutput }
await staking.sAvaxUnstakeInstant('5');   // redeemInstant on Benqi
await staking.sAvaxUnstakeDelayed('5');   // requestRedeem (no pool needed)

// Stake AVAX → sAVAX
await staking.sAvaxStake('10', 50);  // 50bps slippage

// EIP-4626 vault deposit (any chain)
const YOUSD = '0x0000000f2eb9f69274678c76222b35eec7588a65';
const baseAgent = new Evalanche({ privateKey: '0x...', network: 'base' });
const { vaults: baseVaults } = baseAgent.defi();
const info = await baseVaults.vaultInfo(YOUSD);
// { assetDecimals: 6, shareDecimals: 18, ... }
await baseVaults.deposit(YOUSD, '1000');   // approve + deposit
await baseVaults.withdraw(YOUSD, '998');   // redeem shares

MCP tools (defi): savax_stake_quote, savax_stake, savax_unstake_quote, savax_unstake, vault_info, vault_deposit_quote, vault_deposit, vault_withdraw_quote, vault_withdraw

Known DeFi routing behavior:

• yoUSD auto-routes to Base
• sAVAX auto-routes to Avalanche
• explicit wrong-chain overrides fail clearly before contract reads
• interoperable address inputs like 0x...@base are accepted for address-based DeFi tools

Live Smoke Checklist

Use docs/live-smoke-checklist.md as the release-certification runbook for:

• Polymarket tiny write + reconciliation
• Hyperliquid tiny trade + order verification
• LI.FI tiny swap/bridge execution + tx verification
• sAVAX / EIP-4626 tiny round-trip + balance/share verification

v1.13.0 execution reliability

• A vault position can have verified shares but no underlyingValue when conversion fails. Honor the scan warning and medium confidence; never substitute shares for assets.
• Historical v1.13.0 note: dYdX was optional before v1.14.0. Current installs must not add @dydxprotocol/v4-client-js; use Hyperliquid for perpetuals.
• Historical v1.13.0 note: zero high/critical audit counts required the shipped security-overrides.json recipe at the consumer root. Current v1.14.0 consumer installs must pass the packaged clean-install audit and dependency-absence gates.
• A2A task execution is not shipped. Existing agent-card identity support does not authorize or expose remote wallet actions.

v1.14.0 Avalanche expansion

Avalanche is the default. Native X/P/C operations use @avalanche-sdk/client, and the legacy Core/HPKE tree is absent. dYdX APIs and MCP tools have been removed; use Hyperliquid for perpetuals. v1.14.0 requires Node.js 20 or newer. Fresh consumer installs must pass the packaged audit and dependency-absence gates.

• avalanche_list_l1s: discover current public mainnet/Fuji EVM L1 metadata.
• avalanche_get_l1_network: verify an L1 RPC chain ID and return its custom network configuration, including its actual native token. Does not switch the active MCP wallet.
• SDK helpers: listAvalancheL1s, getAvalancheL1Network; pass the returned configuration to Evalanche or switchNetwork.
• Discovery covers the official public catalog. Non-EVM chains, non-18-decimal native tokens and unavailable/private RPCs are not supported by this path. Bridge/DeFi/identity availability is separate from wallet connectivity.