MoonPay has introduced native Ledger hardware-wallet support for its MoonPay Agents, aiming to solve one of the biggest trust problems around autonomous crypto tools. The new setup is designed to keep private keys inside a physical Ledger device while still allowing agents to identify and prepare transactions across multiple blockchain networks.
The company’s core message is clear: automation should not come at the expense of custody. MoonPay says the integration preserves human control by requiring physical confirmation on the Ledger device before any irreversible on-chain transaction can be signed and executed.
A Security Model Built Around Human Approval
MoonPay integrated a Ledger signer into its command-line MoonPay Agents platform so that private keys are generated on the connected Ledger device and never leave it. In practice, that means agents can analyze markets and propose swaps, bridges, and portfolio rebalances, but they cannot complete those actions on their own.
Instead, the process follows a strict approval chain. The agent proposes the transaction, the user verifies it on the Ledger hardware wallet, and only then does the device produce the signature needed to send it on-chain. MoonPay has framed that structure as an “Agents Propose, Humans Sign” workflow.
The system also includes automatic Ledger app switching to support activity across multiple networks without exposing keys. MoonPay said the integration supports Ethereum, Solana, Base, Arbitrum, Polygon, Optimism, BNB Chain, and Avalanche, allowing users to manage cross-chain activity through a single hardware-secured signing flow.
Automation Without Surrendering Custody
MoonPay presented the release as a direct response to the custody risks created when agents are allowed to sign transactions themselves. The company’s position is that a compromised agent or a malicious plugin should never be able to move funds or trigger unauthorized actions without explicit user consent at the signing stage.
Ivan Soto-Wright, MoonPay’s chief executive and founder, described the model as a balance between scale and control. His argument is that autonomous agents may eventually manage enormous amounts of digital assets, but that intelligence must still operate inside a framework where the human remains in the loop.
For users and product teams, the change shifts the security boundary away from software alone and back toward hardware-enforced approval. That approach strengthens auditability around signing events and gives firms a clearer way to combine automated decision-making with stricter custody standards.
The trade-off is deliberate. MoonPay is not offering full automation, but a controlled version in which agents can act autonomously only up to the point where a signature is required. The company argues that this compromise may lower both the operational and psychological barriers that have slowed broader adoption of agent-based crypto tools.
The feature launched and its long-term impact will depend on whether retail and institutional users adopt hardware-enforced signing as part of their existing workflows. Its real test will be whether firms can integrate this model into current custody, governance, and compliance frameworks without sacrificing usability.