This content originally appeared on DEV Community and was authored by Manav
Most so-called “autonomous DeFi agents” today are not that autonomous.
They still rely on:
- A dev holding the private key.
- A server running off-chain logic.
- A multisig or smart account that could be drained.
- Public tx logic that anyone can front-run.
If you squint hard enough, they’re just bots with a branding layer.
But WT3 is different. It’s not an idea. It’s a live, verifiable, privacy-preserving agent running in the Oasis TEE cloud.
Let’s unpack what that actually means because this might be the most practical example we’ve got of how to build trustless DeFi agents with real autonomy.
WT3’s Job: Trade Autonomously, Trustlessly
WT3 is a DeFi trading agent that:
- Manages its own keys (devs can’t touch them).
- Keeps its strategy private.
- Acts based on real-time market data.
- Verifies all decisions onchain.
No scripts. No hot wallets. No one holding the leash.
It uses confidential compute to operate like a black box:
- Logic goes in.
- Trades come out.
- But no one sees the logic or has signing access.
What Powers WT3?
ROFL (Runtime Offchain Logic)
A framework to run agent logic in TEEs:
- Code runs in Intel SGX enclaves.
- Remote attestation proves it’s untampered.
- Input/output is sealed.
- Logs are published onchain.
- All cryptographic keys are enclave-internal.
Sapphire (Confidential EVM on Oasis)
Contracts interacting with WT3 live on Sapphire:
- Same Solidity you already know.
- Supports
randomBytes, confidential storage, secure signing. - Agents interact via confidential smart contracts.
Decentralized Key Management
WT3 creates its signing keys inside the enclave:
- No dev or node can export them.
- No secrets ever hit disk or RAM unprotected.
- Keys persist securely and are rotated inside the TEE.
This fixes the biggest problem in agent design: who actually controls the wallet?
With WT3, the answer is: the agent itself and no one else.
Trading Stack Integration
WT3 isn’t just sitting in a sandbox. It trades on:
- Hyperliquid (cross-chain, high-speed DEX infra)
- Other platforms coming soon
It also pulls alpha from Predictoor a crowd sourced signal platform and mixes it into its private models.
All of this runs in near real-time, inside verified hardware, with tx output going to the chain.
And yes there’s a treasury. WT3 starts with a $100K allocation and will eventually support:
Buybacks + burns of $ROSE.
Yield sharing via staking contracts.
Clonable templates so devs can deploy their own WT3-style agents.
What Devs Can Learn from WT3
WT3 isn’t just a bot. It’s a reference implementation of:
- Confidential agent logic in production.
- Enclave-based key management.
- Verifiable compute with private inputs.
- Onchain governance hooks for agent upgrades.
- ROFL architecture + secure memory handling.
If you’re building:
Auto-yield strategies.
Agents with AI logic or market inference.
Modular bots that need privacy.
MEV-aware DeFi logic.
Shared governance over autonomous wallets.
Then you should absolutely look at what WT3 is doing.
Where to Start
Want to start building with the same stack?
You don’t need custom hardware. You don’t need to reinvent agent architecture.
You just need to use the right execution layer.
Final Take
If your agent depends on a dev not rugging, it’s not autonomous.
If your strategy leaks every transaction, it’s not private.
If your wallet keys live on a VPS, it’s not trustless.
WT3 is the start of a different approach:
- Agents that manage themselves.
- Infra that verifies, not trusts.
- Logic that’s invisible but provable.
- And value flows that benefit the ecosystem.
Keep an eye on WT3. Better yet build one yourself.
This content originally appeared on DEV Community and was authored by Manav