Warden by drinkerlabs in development

Warden · smart-account wallet for Solana

Not ready yet.Here’s exactly how far.

Warden is a Solana wallet where a passkey holds root authority, everyday signing runs on scoped session keys, and the rules protecting your funds are enforced by an on-chain program — not by the interface asking you to click. It isn’t live. The receipt here is the real build ledger, printed from the repository.

building in the open· not live· not externally audited

BUILD RECEIPT phase 1B as of 23 Aug 2026

Solana program · counts read from the repo

  • security invariants56 / 88 covered
  • adversarial review rounds98
  • findings logged227
  • — of those, critical16
  • program tests659 passing
  • client tests301 passing

still open

  • external security auditnot started
  • mainnet deploymentnot deployed
  • browser extensionin progress

Every finding above was written down — including the ones found in our own fixes. None of it is a substitute for an external audit.

Counts taken from the repository’s invariant and review ledgers. A number that goes down is as publishable as one that goes up.

What we’re building

A default keypair wallet is one signature from empty.

One hot key signs everything, every approval is all-or-nothing, and the only thing between a dApp and your balance is a popup you’ve learned to click through. Warden moves custody into the place the funds actually live.

Root authority

Your passkey is the key

Root actions are authorized by a signature your device makes and the chain verifies. The account is designed so no single hot key can drain it.

Everyday signing

Session keys that expire

Routine activity runs on scoped keys with their own limits and lifetime, so a compromised session is a bounded loss instead of the whole balance.

Enforcement

Policy lives on-chain

Spending limits and refusals are enforced by the program itself. An interface can promise anything; a program has to be argued with in code.

Watch it get built.

There’s no waitlist and nothing to sign up for. The repository, the invariant ledger, and every review round are public — the same evidence we use to decide whether it’s ready.