GasTanker

Automation with a bounded blast radius.

GasTanker is allowed to move money automatically, so every automatic action is constrained, verified, and recoverable.

Your private key is not part of the product.

GasTanker never asks for:

  • Private keys
  • Seed phrases
  • Wallet recovery phrases

Automation uses supported custody and treasury integrations with scoped, revocable authority.

GasTanker cannot spend without limits.

Automatic funding passes through independent controls.

Per operation

No single top-up exceeds the maximum you configured.

Per wallet

One runaway wallet cannot consume the whole treasury.

Velocity

A wallet funding unusually often can be stopped before repeated automation becomes a drain.

Organization-wide

Aggregate funding across many wallets still respects a global business limit.

Platform emergency controls

Operations can be paused by network, provider capability, or globally when required.

Funding destinations cannot silently change.

Automatic destinations can be verified before GasTanker sends funds.

Once a destination is verified, changing the address means registering a new wallet.

That prevents a compromised session from quietly redirecting an existing funding policy to another address.

Machine access stays narrower than human administration.

API keys can be scoped to the operations a system needs.

A key cannot grant itself more authority.

Sensitive changes require a human session and re-authentication.

  • Creating API keys
  • Raising spending limits
  • Weakening wallet verification
  • Changing treasury sources
  • Changing high-privilege roles

When we're not sure, we stop.

A provider returning success is not enough.

A timeout is not automatically a failure.

A temporary zero balance is not automatically a reason to spend.

GasTanker resolves uncertainty before taking another value-moving action.

  • Ambiguous transferResolve before retrying
  • Suspicious balance dropConfirm with another read/source
  • Repeated chain failuresPause new funding
  • Destination mismatchStop and escalate

Every execution plan is validated before it is signed.

For supported on-chain swaps and execution routes, GasTanker validates:

  • Network
  • Destination
  • Token
  • Amount
  • Minimum received
  • Transaction expiry
  • Approved contract or router
  • Spending authority

Token approvals are bounded to what the operation requires by default.

Every sensitive action leaves evidence.

GasTanker records:

  • Who changed a policy
  • Who raised a limit
  • Which wallet was funded
  • What route was used
  • What amount moved
  • What it cost
  • What settled
  • When it happened

A completed operation should always be explainable after the fact.

Start with monitoring, free.

No private keys. No custody migration. No sales call.

Start monitoring free