Contents 16 sections
System BoundaryIntent ContractExecution LifecycleProvider CapabilitiesProvider TenderExecution & ResourcesNetworksBNB ChainMulti-inputExecution StateSecurityCertificationRuntime EvidenceSettlement ResearchUniversal CardCurrent Scope
UNIVERSAL ROUTER / TECHNICAL DOCUMENTATION
Public Technical Overview · Router v2 · Updated September 2026

Outcome-first execution, from intent to settlement.

Universal Router is a standalone, non-custodial execution layer for wallets, payment applications and other products that need to move value across heterogeneous networks and execution providers.

Applications define the required recipient outcome. The Router discovers eligible supply, tenders providers, normalizes constraints and cost, prepares a locked execution plan, coordinates submission, tracks settlement and resolves failure states through the same operation lifecycle.

PROVIDER NEUTRALNON-CUSTODIALEXACT-OUTPUT FIRSTRUNTIME VERIFIEDRECOVERABLE
View Router →

The Router owns execution. The product owns the user.

Universal Router separates routing and execution infrastructure from wallet identity, UI and signer implementation. Products provide normalized wallet and source context. The Router owns provider comparison, route selection, preparation, submission, status, receipts and recovery.

PRODUCT / WALLET

  • User and wallet identity
  • Signer selection
  • Private keys
  • User confirmation
  • Product experience

UNIVERSAL ROUTER

  • Intent normalization
  • Provider discovery and capability checks
  • Provider tender and route selection
  • Execution preparation and submission
  • Status, receipts and recovery
Universal Router never stores wallet seed phrases or private keys. Signing remains outside the Router boundary. Before provider submission, signed execution is validated against the prepared execution commitment.

Describe the outcome, not the bridge.

The application specifies the result that must arrive. Provider-specific execution mechanics remain behind the Router boundary.

Abbreviated Router v2 request
{
  "intent": {
    "recipient_address": "0x…",
    "requested_amount": "120.00",
    "requested_currency": "USDC",
    "destination_asset": "USDC",
    "destination_network": "BASE",
    "amount_mode": "EXACT_OUTPUT",
    "source_mode": "AUTO",
    "gas_policy": "AUTO",
    "payout_policy": "SINGLE_REQUIRED",
    "max_debit_usd": "123.50"
  },
  "wallet_portfolio": {
    "source_mode": "AUTO",
    "wallets": ["…"]
  }
}
RecipientExact destination address.
DestinationAsset, network and requested output.
Source aggregationCompatible multi-input execution is resolved from the available wallet portfolio and route capabilities. It is not exposed as a provider-specific application contract.
Debit constraintsThe plan cannot silently exceed the authorized payer boundary.

One operation from intent to receipt.

Router v2 lifecycle endpoints use service authentication. Wallets and payment products integrate through an authenticated backend or service boundary; user authorization and signing remain client-side.

CREATE INTENT
QUOTE
PREPARE
CLIENT AUTHORIZE / SIGN
ACTIVATE
SUBMIT
STATUS
RECEIPT
STATUS↘RECOVERY

Quote is discovery evidence, not execution proof.

Prepare returns signing requirements and the execution commitment without moving client funds.

Submit runs only after authorization and the prepared boundary are validated.

Status and recovery stay attached to the same persisted operation.

POST /v2/intents
→ POST /v2/intents/{intent_id}/quote
→ POST /v2/intents/{intent_id}/prepare
→ client authorization / signing
→ POST /v2/executions/{execution_id}/activate
→ POST /v2/executions/{execution_id}/submit
→ GET /v2/executions/{execution_id}/status
→ receipt / recovery

Provider integration is not binary.

A provider is not promoted merely because an API returns a quote or transaction payload. Capabilities are tracked independently and promoted from runtime evidence for a concrete route profile.

UNSUPPORTEDQUOTE_ONLYIMPLEMENTED_UNVERIFIEDPARTIAL_VERIFIEDREAL_VERIFIEDBLOCKED
QUOTEPREPAREEXECUTESTATUSLOCATE_FUNDSEXACT_OUTPUTEXACT_INPUTSWAPBRIDGEGAS_SPONSORSHIPAPP_FEEREFUNDRECOVERYCANCELIDEMPOTENCYMULTI_INPUT_SINGLE_PAYOUT

Capability status is route-specific. A provider can be verified for one execution profile while remaining certification-gated for another.

Execution supply competes behind one intent.

INTENT
ROUTER
TENDER
RelayLI.FIdeBridgeAcross0xNEAR IntentsAvail NexusNative rails

Eligible supply is filtered by account model, network, asset, execution capability and certification state. The product is not permanently bound to one provider.

Provider names describe technical integrations and capability evidence. They do not imply a formal partnership or endorsement.

Exact recipient output+provider / swap cost+bridge and gas+resource cost+application fee=maximum payer debit

Gas policy is composed separately from execution supply.

INTENT
EXECUTION PROVIDER
+ GAS / RESOURCE POLICY
LOCKED ROUTE

USER NATIVE GAS

Normal native network fee.

ERC-4337 PAYMASTER

Bundler and paymaster execution where certified.

SPONSORED EXECUTION

Scoped sponsorship policies.

SOLANA FEE PAYER

Platform fee-payer routes.

TRON RESOURCES

Energy and Bandwidth procurement.

One intent layer. Multiple execution networks.

Universal Router normalizes network-specific signing, gas, provider and settlement mechanics behind one outcome-oriented execution model.

BASE VERIFIED PROFILES

Source and destination evidence, including the settled Base + Arbitrum multi-input profile.

ARBITRUM VERIFIED PROFILES

Verified source participation in the settled multi-input profile.

BNB CHAIN SCOPED VERIFIED

Multi-provider routing, token swap and sponsored execution paths with profile-specific evidence.

TRON PROFILE-SPECIFIC VERIFIED

Mainnet-settled USDT execution across same-chain and cross-chain profiles, including TRON as both a source and destination. Energy / Bandwidth resource handling is verified for supported TRC-20 execution profiles.

SOLANA VERIFIED PROFILES

Same-token exact-output terminal and a settled fee-payer cross-chain profile.

ETHEREUM · OPTIMISM · POLYGON · AVALANCHE

CERTIFICATION Provider and route maturity remains profile-specific.

BITCOIN

IMPLEMENTED · LIMITED LIVE Native P2WPKH execution is implemented behind an operator gate. Production promotion remains route-specific and certification-gated.

Network status describes concrete route profiles. It does not imply that every asset, provider or execution mode on the network has the same maturity.

BNB Chain across providers, accounts and networks.

BNB Chain is a first-class source and destination environment in Universal Router. Eligible BSC routes can be tendered across multiple execution providers while the Router composes account-aware gas policy, locks debit constraints and keeps status and recovery attached to the operation.

PROVIDER NEUTRALEXACT OUTPUTGAS ABSTRACTIONNON-CUSTODIALFAIL CLOSED
Execution providersLI.FI · Relay · 0x · deBridge · NEAR Intents
Account & gas layersNexus 1.2.1 · EIP-7702 · Pimlico · scoped MegaFuel
Source assetsUSDC · account-scoped Binance-Peg USDT · route-dependent BNB
Route discovery coverageBase · Arbitrum · Ethereum · Optimism · Polygon · Avalanche · Solana · TRON

Provider-declared coverage is used for discovery. Execution availability remains route- and certification-specific.

LIVE SETTLED

BSC USDC → Base USDC

A mainnet LI.FI route, using underlying Across execution and scoped MegaFuel origin sponsorship, settled successfully with zero user BNB required for the verified profile.

IMPLEMENTED · ACCESS GATED

BSC USDC → BSC USDT

An account-aware same-chain 0x swap path is implemented, including EIP-7702-compatible account handling and sponsored-gas integration. The limited-live path remains access-gated pending final mainnet execution certification.

ProviderBNB Chain roleEvidence boundary
LI.FICross-chain swap and bridge supplySETTLED PROFILE
RelayCross-chain routesSPONSORSHIP VERIFIED
0xCross-chain and same-chain swapIMPLEMENTED / LIMITED
deBridgeQuote, prepare and statusEXECUTION CERTIFICATION
NEAR IntentsCross-VM intent executionPREPARE VERIFIED

SMART ACCOUNT / EIP-7702 / ERC-4337

Current BNB work includes Nexus 1.2.1 smart accounts, EntryPoint v0.7 account paths and Pimlico bundler/paymaster infrastructure. Paymaster data, sponsored gas estimation, final paymaster binding and UserOperation hash preparation have live evidence. Broader Nexus UserOperation submission and receipt recovery remain fail-closed until certified.

Scoped verified does not mean blanket BNB coverage. BSC source handling is account-, asset- and route-specific. Native BNB is represented in provider discovery, while a native BNB-to-token route is not yet presented as runtime-certified.

Multiple sources. One exact recipient payout.

Base USDCArbitrum USDCONE INTENTAvail NexusExact USDC / Base
MULTI_INPUTEXACT_OUTPUTSINGLE_PAYOUTONE_RECIPIENTLIVE SETTLED · CASH RECONCILED

The verified profile combines Base USDC and Arbitrum USDC into one exact-output Base USDC settlement. BNB Chain is available to Nexus discovery, but it is not part of this currently settled multi-input profile.

Execution is a state machine, not a quote response.

CREATED
QUOTED
AUTHORIZED
SOURCE_PREPARED
SOURCE_SUBMITTED
SOURCE_CONFIRMED
IN_TRANSIT
DESTINATION_SUBMITTED
DESTINATION_CONFIRMED
SETTLED
RECOVERY_REQUIRED→CONTINUATION_REQUIREDorREFUND_PENDINGorMANUAL_RECOVERY_REQUIRED
REFUND_PENDING→REFUNDED
TERMINALSETTLEDREFUNDEDFAILED_FINAL
Once submission may have happened, an unknown response is not permission to debit the user again.

Coordinate execution without taking custody.

PRIVATE KEYS

The Router does not store seed phrases or wallet private keys.

PREPARE

Prepare locks execution and signing requirements without moving funds.

EXECUTION COMMITMENT

Signed execution must match the prepared commitment.

IDEMPOTENCY

Durable submission identity prevents blind duplicate broadcast.

Unknown post-submit conditions enter status resolution and recovery. Recovery can wait, continue, refund or require a manual action according to verified evidence.

Routes promote by evidence, not integration claims.

INTEGRATED↓
QUOTE VERIFIED↓
PREPARE VERIFIED↓
EXECUTION VERIFIED↓
STATUS VERIFIED↓
RECOVERY VERIFIED↓
REAL_VERIFIED PROFILE

Certification applies to a concrete route profile rather than an entire provider or network. A transaction payload is useful evidence; it is not equivalent to safe end-to-end execution.

Selected runtime execution evidence.

REAL_VERIFIED

RELAY

Mainnet settlement plus profile-specific status, refund and idempotency evidence.

REAL_VERIFIED

SOLANA TERMINAL

Mainnet same-token exact-output payment with Router fee payer and no user SOL.

REAL_VERIFIED PROFILE

SOLANA → BASE

Exact-input Relay fee-payer execution with real source and destination transactions.

SCOPED VERIFIED

BNB CHAIN

Mainnet BSC USDC → Base USDC settlement plus smart-account and sponsored preparation evidence.

Toward provider-independent exact-output settlement.

REFERENCE MODEL / NOT PRODUCTION-CERTIFIED

The reference settlement model is solver-fronted: the solver supplies destination liquidity, while the destination contract never receives user source principal. The settlement identifier binds source commitment, destination chain, token, exact output, recipient and deadline, preventing a second accepted fill.

SOURCE COMMITMENTS
SOLVER
EXACT PAYOUT
SETTLEMENT ID
WORMHOLE EVIDENCE
The reference contracts, testnet artifacts and validation tooling are implemented, but resolver-to-settlement testnet end-to-end certification is still pending. Production execution is disabled.

The ERC-7683 resolver remains a non-executable reference model with explicit production blockers.

Universal Card is the first client of Universal Router.

Universal Card exposes the same infrastructure as a consumer flow: choose the outcome, review the maximum debit, authorize the locked operation and follow it through settlement or recovery.

IntentAuthorization
├─ recipient
├─ exact receive
├─ source debit ceilings
├─ route digest
├─ execution digest
├─ nonce
├─ expiry
└─ one-time execution
Explore Universal Card →

Explicit limits are part of the architecture.

Universal Router promotes execution profiles individually. Provider integration, successful quoting or network coverage does not imply blanket production readiness. Routes without sufficient execution, status or recovery evidence remain certification-gated or fail closed.

NO BLANKET NETWORK CLAIMSPROFILE-SPECIFIC VERIFICATIONFAIL CLOSED
Documentation is updated as development progresses.