problem · social recovery smart wallets

social recovery smart wallets

Recovery shouldn't be one phrase to lose.

EOA LSP·6

Express recovery as a permission graph — guardians, thresholds, time locks — not a seed.

EOA seed phrase
single point of failure
LSP·6 controllers + recovery policy
guardian set threshold time lock
LUKSO route

If you're dealing with social recovery smart wallets, the LUKSO route is LSP6. A Universal Profile is one account with many controllers. LSP6 lets you register a recovery controller (or a recovery contract enforcing a threshold or delay) with exactly the permissions it needs — typically the ability to add and remove other controllers.

Why this breaks

An EOA has one private key. Lose it, lose everything. There is no social fallback, no time-locked recovery, no rotating authority — those are product problems wallet vendors have to solve outside the account.

Smart-account recovery is possible, but every model encodes its own rules and most are non-interoperable. Migrating recovery from one wallet to another usually means migrating the whole account.

What people try

Argent guardians

Guardian set signs a recovery request. Time-locked. Custom contract logic. The reference implementation, hard to port.

Safe owner rotation

Multisig owners vote to add or remove owners. The multisig is the recovery primitive.

ERC-4337 recovery modules

Validator modules attached to an ERC-4337 account expose recovery flows. Module-by-module, not a shared vocabulary.

Custodial recovery

Privy, Magic, Web3Auth. Reset-password UX. Trades some self-custody for predictability.

How LSP solves it

A Universal Profile is one account with many controllers. LSP6 lets you register a recovery controller — or a recovery contract that enforces a guardian threshold, a delay, or a voting policy — with exactly the permissions it needs. Typically: the ability to add and remove other controllers.

Recovery becomes a design choice expressed as permissions, not a hardcoded wallet feature. Day-to-day controllers stay narrow. The recovery controller stays cold. If a daily key is lost, the recovery controller adds a new one and removes the old one. The account address never changes.

continue at the source