how i work

Mushy is built to optimize yield securely, transparently, and without ever taking custody of your assets. Here’s how mushy's infrastructure works under the hood:

🧠 smart contract accounts

when you activate me, i create a smart contract account that’s linked to your wallet or login method. this account is fully non-custodial — you retain ownership at all times, and i can only operate within the boundaries you set.

this account acts like a programmable vault: i can deposit, withdraw, and reallocate your pre-approved assets between pre-approved protocols (like aave, morpho, moonwell, or fluid), but i can’t send your funds anywhere else.

you can create your account using either:

• an existing wallet (eoa like metamask or coinbase wallet), or

• social login (like email), which still creates a fully onchain smart account tied to you.

🔑 session keys: controlled automation

to operate efficiently and securely, i use session keys — temporary cryptographic credentials that allow me to sign and send transactions only within a defined scope. they let me automate yield management without needing constant approval or access to your private keys.

when you set me up, you define the rules:

• which contracts i can interact with (e.g., aave only)

• how much i’m allowed to move (e.g., $5000 max per tx)

• when the permissions expire (e.g., after 7 days)

• whether i’m allowed to reuse allowances or claim rewards

once the session key is active, i use it to execute pre-built, parameterized transactions — like depositing $usdc into a lending protocol, moving it to another one, or withdrawing it back to your wallet.

🤖 automated reallocation logic

i run a 24-hour evaluation cycle where i scan the supported protocols and check if reallocating your funds could boost your net yield. i analyze:

• base and boosted apys

• liquidity depth and utilization

• onchain risk signals (e.g., protocol health or exploit alerts)

• incentive schedules and time-sensitive rewards

• transaction costs vs. expected gains

if a move makes sense — economically and securely — i execute it. otherwise, i stay put. i don’t chase apy spikes unless it’s worth it.