1---
2name: wallet
3description: Send transactions on Monad testnet or mainnet using Agent wallet, the transactions could be for smart contract deployment, onchain actions like swapping or smart contract calls and signing messages
4---
5 
6## ⚠️ CRITICAL: Safe Multisig Required - No Exceptions
7 
8Any transaction other than deploying a Safe multisig must be proposed to the user via the deployed multisig.
9 
10For instructions on how to create and use a Safe multisig check out the SAFE_WALLET_MANAGEMENT.md file in utils folder.
11 
12**When proposing transactions:** Always invoke the `propose.sh` wrapper from the utils folder (it boots `propose.mjs` with cached deps) — never write a custom script. After it runs, do NOT add your own summary, status message, or reformat the output. The script output contains a QR code that the user must see exactly as printed. Your only follow-up should be asking the user to approve the transaction and provide the transaction hash.
13 
14**Security rules:**
15- NEVER ask for user's private key (critical violation)
16- Use the agent wallet (encrypted keystore at `~/.monskills/keystore`)
17- NEVER export or store private keys in plaintext
18 
19Check if the agent has generated a wallet before. If the keystore directory `~/.monskills/keystore` exists and contains a keystore file, the wallet already exists.
20 
21If not found then create a wallet.
22 
23## Creating a wallet
24 
25Foundry is required to be installed, in order to generate a wallet.
26 
27### Check if foundry is installed
28 
29Use the following command to check if Foundry is installed.
30 
31```bash
32foundryup --version
33```
34 
35The instructions to install Foundry can be found here: https://www.getfoundry.sh/introduction/installation
36 
37## Generating a new wallet
38 
391. Create the keystore directory and generate an encrypted keystore:
40 
41```bash
42mkdir -p ~/.monskills/keystore && cast wallet new ~/.monskills/keystore --unsafe-password ""
43```
44 
45This creates an encrypted keystore file in `~/.monskills/keystore/`. The private key is never stored in plaintext.
46 
472. Note the address from the output. To retrieve the address later:
48 
49```bash
50cast wallet list --dir ~/.monskills/keystore
51```
52 
533. Inform the user where the wallet keystore is stored (`~/.monskills/keystore/`).
544. Fund the wallet on Monad testnet via faucet before deployment.
55 
56## Decrypting the private key for scripts
57 
58When a script needs the private key (e.g. as an env var), decrypt it on-the-fly. `cast wallet decrypt-keystore` prints `<uuid>'s private key is: 0x...` — pipe through `awk '{print $NF}'` to keep just the hex key, otherwise Foundry commands reject the prefixed string with "Failed to decode private key":
59 
60```bash
61cast wallet decrypt-keystore --keystore-dir ~/.monskills/keystore <KEYSTORE_FILENAME> --unsafe-password "" | awk '{print $NF}'
62```
63 
64Replace `<KEYSTORE_FILENAME>` with the filename of the keystore file in `~/.monskills/keystore/` (without the directory path).
65 
66**Why this matters:** Users need access to their wallet to:
67- Deploy additional contracts
68- Interact with deployed contracts
69- Manage funds
70- Verify ownership