Orchestra: Talk to your crypto. An AI agent for seamless swaps and sends with Ledger security.
Orchestra is an autonomous AI financial assistant designed to bridge the gap between complex onchain operations and intuitive natural language. It allows users to manage their decentralized portfolios, performing swaps, sending assets, and checking balances, simply by chatting.
The project leverages a sophisticated multi-agent architecture powered by 0G’s decentralized AI and storage stack to ensure that financial planning and risk assessment are transparent, persistent, and verifiable.
Orchestra solves the "convenience vs. security" trade-off in crypto:
Unlike traditional bots that rely on centralized APIs, Orchestra utilizes:
The system is fully integrated with Uniswap for optimized trade routing and Permit2 for gas-efficient token approvals. The frontend, built with Next.js 16, provides a "Futuristic Notebook" interface where users can watch the AI's step-by-step reasoning (the "Chain of Thought") as it prepares to execute their financial commands.
Orchestra is a multi-layered AI agent system built for ETHGlobal Cannes 2026. It combines decentralized AI inference, smart contract custody, and hardware-grade security into a single autonomous financial agent.
The backend runs on Node.js/TypeScript with a custom agent runtime following a "Provider → LLM → Action" loop. Three specialized agents work in sequence: a Planner that parses natural language into structured JSON action plans using Groq or 0G Compute inference, a Gatekeeper that pulls user profiles and spending limits from 0G Storage to decide whether a transaction can auto-execute or needs hardware approval, and a Watcher that monitors portfolio health in the background.
For partner technologies: 0G serves as the project's "decentralized memory." User profiles, risk assessments, trade history, and action plans are all persisted to the 0G Storage network via their TypeScript SDK. We also integrated 0G Compute so users can toggle between centralized (Groq) and decentralized LLM inference directly in the UI, the same agent pipeline runs on both, with TEE-verified responses from 0G. Safe smart accounts hold all user assets. We use the AllowanceModule to enforce on-chain spending limits, if a transaction is within the user's limit, the agent wallet (a delegate with threshold-1 signing) executes it autonomously; if it exceeds the limit, it requires Ledger co-signature. This is defense-in-depth: even if the AI agent is compromised, the on-chain module caps what it can spend. Ledger integration uses the Device Management Kit (DMK) for browser-based Bluetooth connectivity, ensuring high-value transactions and spending limit changes are only valid when signed on a physical device. Uniswap handles all trade routing via their API with Permit2 support for gas-efficient token approvals.
Notable hacky implementations: To bridge server-side AI agents with a client-side hardware wallet, we built a custom WebSocket bridge. When the Gatekeeper flags a transaction as NEEDS_APPROVAL, it pushes a request through a WebSocket to the Next.js frontend, which pops up an approval card prompting the user to connect their Ledger and sign. For spending limit updates, we manually encode Safe's execTransaction with a MultiSend payload, packing three setAllowance calls (ETH, USDC, WETH) into a single Ledger-signed transaction using the owner pre-approved signature ormat (v=1). For 0G Storage, we maintain a local storage-index.json mapping human-readable keys to content-addressable root hashes, enabling fast batch reads over decentralized storage without querying the indexer for every key.

