Pre-auditThree days of senior audit time for $1,500, credited in full toward your Zealynx audit.3 audit days, credited toward your auditSee how →

Wallet Module

An extra contract that a smart wallet's owners enable so it can act for the wallet, such as moving its tokens or managing a position, without the owners signing each transaction.

Smart wallets, such as Safe multisigs, let their owners enable modules. A module is a separate contract that the wallet allows to execute transactions for it. Teams use modules to automate work the owners would otherwise sign by hand: rebalancing liquidity, paying recurring costs, or letting a keeper manage a position.

Why modules matter for security

An enabled module can move the wallet's assets without the owners' signatures. The wallet's own security, its signers and threshold, no longer protects whatever the module is allowed to do. The module's own access checks become the wallet's security for that path.

Modules often trust one more contract in turn, such as a helper or a multicall that keepers drive. Every link in that chain needs a caller check. If any link lets anyone through, anyone can drive the module, and the wallet's funds with it.

What to check

  • List every enabled module, and every contract each module trusts.
  • For each, find who can call it, and test it from a random address.
  • Limit what a module can do: which tokens, which destinations, how much.

Need expert guidance on Wallet Module?

Our team at Zealynx has deep expertise in blockchain security and DeFi protocols. Whether you need an audit or consultation, we're here to help.

Get a Quote