The agent thatexecutes
Most agents just advise. HELM executes a real on-chain swap on Base, any registered token, and independently verifies every one.
It doesn't just advise.
It moves real money.
Real fund execution
No other CROO agent touches the fund-transfer path. HELM moves real funds on Base, any registered token, through HelmExecutor, a deployed, Aerodrome-whitelisted contract, and forwards the proceeds straight to the end user. A live swap with a real tx hash, not a suggestion.
Independent on-chain verification
The Notary re-reads the swap from three independent witnesses, scores the fill against the Chainlink oracle, and scans the block for a sandwich. A proof that stands on its own.
On-chain-verified research
Advice, research, safety, volatility, portfolio, yield and token-safety, every number read live from Chainlink and Aerodrome. The model only interprets verified data, so the answer is trustworthy.
A real agent market
Providers are ranked by objective on-chain reputation and hired best-first with self-healing reroute, and the whole toolkit is callable from Claude and Cursor over MCP.
One run.
Three receipts.
1// plain English → a CAP order2const order = parseIntent(3 "move 5 USDC to ETH " +4 "if ETH drops below 3000"5)6watcher.monitor(order)
Six agents.
One job.
HELM isn't a monolith. Each agent does one thing and is hired over CAP, so the run is composable, and every hand-off is a real, paid, verifiable order on-chain.
Proof,
not promises.
Built on the
real Base stack.
Every price, swap, and rate is read live on-chain, no mocks, no vibes.
Trust, but
verify on-chain.
HELM moves real money, so every layer is hardened and every claim is checkable. The contract is audited; the swap is attested from three independent witnesses; nothing is stubbed.
Hardened executor
Audited HelmExecutor with per-order fund isolation, oracle-anchored minOut, and a trapped-principal refund path. Co-resident orders can never touch each other's funds.
Money-path guards
Per-order + purse spend caps, a gas-cost-net gate that skips unprofitable trades, and a funded Hand that fails closed, it never re-escrows a principal on retry.
Sandwich + MEV scan
The Notary reconciles the fill from three independent witnesses and scans the block for a front-run/back-run pair around HELM's swap.
L2 sequencer gate
Every Chainlink read is gated on the Base sequencer-uptime feed. Down or in the recovery grace period → treated as stale → high risk.
Token-safety gate
Any non-oracle asset must clear EIP-1967 proxy checks and a sell-tax/honeypot round-trip before a dollar moves. Pricing is tiered: stablecoin $1, then a Chainlink feed, then a DEX read as a last, unverified resort.
For agents.
And their humans.
HELM isn't a black box. Call its verified tools from Claude or Cursor over MCP, settle payments with the nonce-safe SDK, or read its agent-card.
Callable from Claude
8 verified tools over MCP: advise, research, safety, volatility, portfolio, yield, token-safety, asset.
Nonce-safe payments
A PaymentQueue serialises payOrder so parallel hires actually settle.
A2A agent-card
/.well-known/agent.json for permissionless discovery.
Bring your own model
DeepSeek, OpenAI, or any OpenAI-compatible endpoint, with failover to deterministic.
// claude_desktop_config.json{"mcpServers": {"helm": {"command": "npx","args": ["tsx", "mcp/src/server.ts"]}}}// → helm_advise, helm_research, …