Remove the weakest link, then remove the next

OKcontract Labs advances research in verifiable interfaces, transaction security, and resilient software.

  • We make critical operations inspectable and enforceable even when an interface, backend, or administrator fails.
  • Our long-term view is that blockchains can become a fortified execution layer for onchain actions first, and eventually for critical operations across the internet.
See the workRead our research
Round 01/04
Cut cloud path
4 open

A cloud account can edit the rule that decides who may act.

Onchain execution

Choose a weak link

Chainwall

Approve what should happen. Execute only that.

Treasury, protocol, vault, and smart-account teams define who can act, which contracts and assets they can use, and what approval each action requires. Chainwall stores those settings in contracts and reads the current state again at execution.

The submitted function, arguments, value, deadline, operator, and account must match the approved action before a protected account calls the protocol. Smart contracts make the final decision. Cells powers the console's live application state. LambdaScript is the typed authoring layer for formulas and programs. MiniScript is the compact onchain workflow language that Chainwall executes.

Explore Chainwall
Chainwall transaction execution pathOperators, interfaces, and automation prepare an action. Chainwall checks current approved settings, the exact action, allowed calls, and the protected account before the protocol call runs. Select any part for an explanation.PREPARECHECKED ONCHAINEXECUTEPERSONOperatorINTERFACEChainwallweb portalSDK / BOTAutomationAPPROVED CATALOGOnchain registryLIVE APPROVALExact action+ policyALLOWED CALLSApproved workflowBYPASS BLOCKEDProtected accountSMART ACCOUNTSafe orvaultTARGETProtocolall checks passed

Approved catalog

Define precisely what is allowed

Create trusted, programmable onchain action templates for protocol calls, transfers, governance actions, and vault operations.
Chainwall transaction execution path. Helpful tools prepare an action. Contracts check the current approved catalog and policy before the protected account calls the protocol.
Vitalik Buterin speaking about OKcontract at Ethereum Community Conference
“A more specialized and more focused way to secure onchain interactions.”

Vitalik Buterin

Cells

Async state is a graph. Write it that way.

Cells is the 10 kB TypeScript dataflow runtime behind our products, starting with Chainwall. A Sheet connects writable and computed values, waits for promises, propagates errors, ignores obsolete results, and follows dependencies that change at runtime.

Open the full demoGitHub

Graph settled

Change either value.

Cells waits 620 ms after typing stops, then resolves the sum after 240 ms. The last stable result remains readable while the next one runs.

Delayed sum
30

Published after the graph settled

debouncer(620) → delayed(a + b, 240)

LambdaScript

Turn a formula into a live, typed part of your application.

LambdaScript is the core language for customizing Chainwall policies and interactions. It compiles formulas written by users or loaded from configuration into Cells, so each result stays connected to every input that can change.

Open the full demoGitHub
λscript

Compiling typed graph

Compiling the expression into Cells…

Start with the call that must be allowed

A security claim is useful when another team can inspect the rule, reproduce the test, and see what remains outside the check.

  1. 01

    Write down the exact call.

    Name the contract, function, arguments, value, account, deadline, and the person or program allowed to request it.

  2. 02

    Put the decisive check near execution.

    Use deterministic code or a smart contract so an interface, backend, or operator cannot replace the approved call before it runs.

  3. 03

    Publish what passed and what remains.

    Share the tests, assumptions, and known failures. Name every person, service, contract, and dependency that users must still trust.

Start with the failure. Follow it to the code.

Incident reports trace what failed. Engineering notes show what we built, how it behaves, and where its guarantees stop.

See every article
Supported by
NVIDIA InceptionProtocol LabsLongHash VenturesSparkle VenturesOptimismStarknetCompoundNVIDIA InceptionProtocol LabsLongHash VenturesSparkle VenturesOptimismStarknetCompound