defiloops @defiloops

An AI agent needs a keycard, not a private key. One $USDC strategy on Base, Arbitrum and Ethereum is 7 steps by hand. An agent is tempting. Ours gets the keycard. It can't pick the recipient, it only runs what's switched on, and limits in the account cap it.

Moving a loan from @aave to @Morpho: one click. By hand, it's impossible in one transaction, so it takes round after round of withdraw, supply, borrow and repay. DeFiLoops: one step. From the app or a prompt, all of it happens, or none of it does.

DeFiLoops: an agent plans DeFi strategies and runs them. By hand, a buy like $100 $USDC on Base into $XAUt on Ethereum is 4 transactions. Here it's one sentence: our agent lays out every step, the bridge included, and spends nothing until Run.

defiloops.com/how-it-works

Every strategy lays out the steps before it spends. Type the outcome into DeFiLoops. Each step shows the action, the chain, the exact amount, and where value goes next. Press Start when the steps look right. Until then, nothing moves $USDC on Base.

You still write the rule. The threshold, the signal and the level are yours. Automation makes a rule fire on time. It does not make the rule right, and a wrong one now fires with nobody in the room to hesitate.

When you do want it off properly, deleverage operations cover Aave v3 and Morpho on Arbitrum, Base and Ethereum, and Aave v4 on Ethereum. A schedule or a price trigger runs the plan while you are asleep.

Most leverage rules fail after the signal, not at it. Cutting back by hand means repay, withdraw, sell. Then the reverse when the rule flips again. Six transactions to change your mind twice, so people just hold the leverage through everything instead.

We wrote up the whole thing — what happened, why Safe wasn't at fault, and why this class of attack can't be expressed against a DeFiLoops account: defiloops.com/blog/the-execu…

This is one of the most common ways a smart account gets emptied, and the broken part always looks correct. The fix isn't a better check. It's never handing the agent a target to aim in the first place.

A hacker tried to drain $7.8M from a wallet last week. An MEV bot front-ran the exploit and took it first. The victim lost the money. The attacker lost the prize. The bot kept it. But the twist isn't the lesson. 🧵

Don't take my word for it. The whole plan is public — every step, both bridges, every amount: app.staging.defiloops.com/shared/2a86b7c… This is what you approve before anything runs.

Try it: app.staging.defiloops.com Forked mainnet — real protocols, real prices, fake money. Can't touch your wallet. Google sign-in → Fund on Accounts → type a sentence.

One sentence in: "take $1000, buy cbBTC, collateralise, borrow $500, buy WETH, collateralise, borrow $250, buy XAUt, collateralise, borrow $75, buy 7 property tokens" 13 steps out. It bridged to Ethereum on its own — XAUt only lives there. defiloops.com