Ledger announced on July 16, 2026, that it is open-sourcing its Agent Stack toolkit, a system that forces automated crypto agents to get hardware-based human approval before executing transactions. The move targets a growing problem in decentralized finance: bots and scripts that blindly sign transactions, often leading to drained wallets or unintended approvals.
How Agent Stack Works
The toolkit lets developers define policies as code — safe actions like transfers under a certain amount or interactions with known contracts can proceed automatically. Anything outside those boundaries, such as an unknown contract address, a large value transfer, an unlimited allowance, a bridge to an unapproved chain, or a contract that has changed since last interaction, gets flagged. The agent proposes the transaction, but the user must confirm it on a Ledger device with a trusted display. The hardware enforces the policy, so the agent never gets raw key access.
This setup eliminates the common practice of copy-pasting transaction details from a browser wallet to a hardware wallet, a step where many users get tricked. It also prevents agents from signing anything they want — a risk that has led to exploits in the past.
Third-Party Integrations and Hackathon Results
At launch, third parties including MoonPay and Shisa.ai have already integrated or support Agent Stack. The toolkit was also tested during Ledger's N3XT Build & Show hackathon, where 50 submissions from 38 universities across 8 countries shipped 46 public repos using Agent Stack components like DMK and Wallet CLI. That shows the tooling works for developers outside Ledger's own team.
Developer Setup and Security
Setting up Agent Stack means routing all signing to the Ledger device and never handing the agent a private key. The policy model lets developers predefine safe actions and limits; out-of-policy actions are surfaced for manual approval on hardware. The goal is to reduce blind approvals without giving agents raw key access — a balance between automation and security.
The open-source release means anyone can inspect the code, modify it, or build their own integrations. Ledger is betting that hardware-gated automation becomes a standard for high-value or sensitive crypto operations.
The toolkit is available now for developers to integrate into their own projects.
