DEX Executor
The Chatito DEX Executor is a Smart Policy for swaps: a signed, capped rule that can trade for you without taking your tokens.
Your wallet stays the wallet. The policy records who opened the grant, which token it may pull, how much is left, and when it expires. When a buy runs, one transaction pulls, swaps, and sends 100% of the output back to you.
This is the DEX analog of a trade-only exchange API key. It is not a vault. It is not "deposit into a smart contract." You stay the custodian.
Why We Built It This Way
Most "leave it running" DEX products pick one of the bad options. We refused them.
| Shortcut | Why we will not do it |
|---|---|
| Deposit into a company vault | That is custody. Chatito is not a bank. |
| Unlimited token approve | Blast radius is your whole balance. |
| Paste a private key or seed | Never. Not for Live. Not for support. |
| Tiny dedicated hot wallet | Extra wallet, extra drain risk, extra trust. |
Instead you sign a Smart Policy: a capped, expiring spend grant. Chatito may then spend only inside that policy, and only send the result to your address.
How A Swap Works
You (once per strategy)
sign a Permit2 allowance to the Executor
+ open a grant (token, cap, expiry)
|
v
Tokens stay in YOUR wallet.
The Smart Policy stores the rule. Nothing to withdraw later.
|
When the strategy wants a buy
|
A Chatito keeper calls executeSwap
|
Same transaction:
pull the grant amount
swap on an allowlisted router
send every output token (and leftover) to YOU
If the swap reverts, nothing is left sitting in the policy.
Hard Rules (On Purpose)
These are product rules, not marketing.
- No deposit. There is no "send tokens to Chatito" step.
- No withdraw-to-Chatito. Admin cannot sweep user assets.
- Not an upgradeable vault. A Smart Policy is a thin rule, not a proxy you have to trust forever.
- Recipient is you. The wallet that opened the grant is the immutable recipient.
- Rescue only to the owner. If something lands by accident, it can be sent only to the grant owner.
- Routers are gated on-chain. The keeper cannot call a random contract.
- On-chain remaining + expiry. Our database is a cache for the UI. The lock lives on the chain.
Grant Is Not Live
Opening a grant does not arm the strategy.
Live is a separate, human-only switch. Wizards, AI Lab, and agent keys cannot turn Live on for you.
You can revoke the grant (or wait for expiry). After that the bot cannot spend. Tokens never left your wallet in the first place.
Revoke does not turn Live off. The strategy stays Live (if it was) and falls back to manual Sign — you Sign each action yourself.
Where The Policy Lives
These are Chatito-owned executor contracts. One per chain, shared. Grants are per strategy. Do not send tokens to these addresses.
| Chain | Address |
|---|---|
| Base | 0x34464334F45a24B857fc825F00De52CE8503ceCD |
| BNB Smart Chain | 0x858B6CCC5BaF112931aDe314ca298d79748F0643 |
| Arbitrum One | 0x858B6CCC5BaF112931aDe314ca298d79748F0643 |
| Ethereum | 0x858B6CCC5BaF112931aDe314ca298d79748F0643 |
Machine facts and deploy hashes: chatito.ai/executor.md. Solana is not public as deployed.
A listed contract is not a claim that Live or Sign is open for every account on that chain. Trust the app.
What You Control
| You set | Meaning |
|---|---|
| Cap | Maximum the grant can spend |
| Expiry | After this time the grant is dead |
| Token | What the grant may pull from your wallet |
| Revoke | Instant stop. Remaining goes to zero. |
One grant per strategy. Revoking book A does not kill book B.
DEX practice is open in the app. Trust the app, not this page, for whether Live is on.
What This Is Not
- Not a place to send tokens
- Not a seed-phrase product
- Not a promise of profit
- Not "set and forget forever" without your revoke and Live switch
- Not a claim that DEX Live is open for every account today
Related
Ready to run a strategy?
Open App