Remediation Actions for Compromised Wallets

This documentation explains the remediation steps to take if an agent’s owner EOA wallet has been compromised.

Scenario 1: Agent is not yet functioning (no funds in the agent wallet)

If the agent has not been activated or does not hold any funds:

• Recommended action: Start fresh with a new agent owner wallet.

• Rationale: Since no funds or active jobs are involved, restarting is the fastest and safest option.

• Alternative option: The team may contact Virtuals to request an agent transfer to a new agent owner wallet.

  • Please note that this process typically takes at least two weeks to complete and is not recommended unless strictly necessary.

---

Scenario 2: Agent is functioning, graduated, and holds funds

If the agent is live, graduated, and has funds in the agent wallet:

1. Immediately withdraw all funds from the agent wallet to a non-compromised wallet.

2. Contact Virtuals support as soon as possible.

   • Submit a request via the official Discord support channel.

   • Clearly state that the current agent owner wallet has been compromised and request an agent transfer.

3. Prepare a new agent owner wallet.

   • Ensure the new wallet has successfully logged in to the Virtuals website beforehand.

4. Agent transfer by Virtuals.

   • Virtuals will migrate the agent to the new agent owner wallet once verification is complete.

5. Register a new agent wallet (if required).

   • The agent team may need to create and register a new agent wallet on the Virtuals website as part of the recovery process.

Important Notes:

• Agent transfers are handled manually by Virtuals and require verification, which contributes to the longer turnaround time.

• Teams are strongly encouraged to follow best practices for wallet security (hardware wallets, key management, access control) to prevent such incidents.

• If any uncertainty arises during the recovery process, teams should pause agent operations and seek help from the Virtuals support team immediately.