Sherpa is an open-source, non-custodial wallet for USDC and USDT. You see the full fee before you sign, and it is exactly what leaves your account.
Three steps. You can read every one of them before it happens.
Pick who, how much and which chain. Sherpa shows what the recipient gets, the network fee and the total. The fee is fixed when the quote is made and is flat: never a percentage of what you send.
Your keys exist only on your phone. The app decodes the payload and refuses to sign anything that does not match the quote you just read.
Sherpa pays the network in SOL, ETH or TRX and takes its flat fee in the stablecoin you are sending. Your money goes straight to the recipient. You never hold, or get credited, a native token.
Pick a chain, an asset and an amount. The fee is worked out the way the app quotes it, from the launch fee table below.
Sponsored tier: on us
Sherpa pays the network for you and takes the fee in the same asset you are sending. You do not need ETH, SOL or TRX.
Recipient gets 100.00 USDC. Network fee 0.05 USDC, taken from your balance. Total 100.05 USDC.
| Chain | Flat fee | Added only when | Free tier | Quote lifetime |
|---|---|---|---|---|
| Solana | 0.02 USDC or USDT | +0.20 when the recipient has no token account yet. It follows the live network rent. | First 5 sends | Fee 60 s. Signed transaction 25 s. |
| Base | 0.05 USDC | Never | First 5 sends | 90 s |
| Tron | 1.50 USDT | +1.00 when the recipient holds no USDT. +0.50 on your first send, which sets up your Tron account. | 1 free send per phone-verified device | 60 s |
Free sends have limits. Up to 5 per device, 2 an hour, and within USD 0.50 of network gas per 30 days. When you pass a limit, the app says which one and quotes the normal fee.
Tron is priced below what it costs us. We match the 1.50 USDT other gas-free services charge and cover the gap, capped at USD 150 a day. If the cap is spent, the app shows a higher fee before you sign.
Three chains first, three next. Each uses the simplest mechanism that keeps your keys on your device and the fee flat.
First beta
Fee-payer relayer
You sign the transfer. Sherpa signs as fee payer, so you never need SOL.
First beta
Smart accounts and relayed USDC
Your address stays a normal EVM address. Sherpa relays the signed transfers and pays the gas.
First beta
Just-in-time energy
Sherpa rents the energy and bandwidth for your transfer just before it is sent, then releases it.
Next
Smart accounts and relayed USDC
Same pattern as Base, on another chain. Planned flat fee 0.05.
Next
Smart accounts and relayed USDC
Same pattern as Base, on another chain. Planned flat fee 0.05.
Testnet beta
Relayed USDC, smart-account USDT
The same no-gas flow as Base, on Ethereum itself. Testing on Sepolia now.
Need a chain that is not here? Tell us which chain and which stablecoin. Requests are public, so everyone can see the queue.
Request a chainEvery number we can publish, we publish: what we earn, what we spend, what the builders take, and how long the float lasts. Until launch the figures below are demo data.
USD 2,930.30
USD 46.41
Link goes live with the first weekly sweep.
19 days
None
sha256:0000000000000000000000000000000000000000000000000000000000000000
Eight rules. No release, no fork that uses the Sherpa marks and no configuration may weaken them. Scroll through them, or tab in and use the arrow keys.
Keys exist only on the device. No server holds any user key material, ever.
Principal goes directly from sender to recipient and the operator never holds it. The fee is a separate leg in the same atomic transaction on EVM and Solana, or a second transaction you sign on Tron.
No SOL, ETH or TRX top-ups. Gas is fronted, never given. On Tron, a new account is activated with an account-creation contract call, not by crediting TRX.
It is quoted off-chain, fixed at quote time and shown in full before you sign. It is never a percentage of what you send.
The app decodes every payload and refuses one that does not match the quote you saw.
USDC and USDT, at these contracts and no others.
The default is 10% of each fee. It accrues in the ledger per transaction and is swept weekly. It is never an extra on-chain leg, so it can never change what you pay.
Source, builds, audits and the fee schedule are public. Apache-2.0 for the app, packages and contracts, AGPL-3.0-only for the gas service, and an SPDX header on every file.
Apache-2.0
The wallet app, SDK, AI package, contracts and this website. Read it, run it, fork it. The Sherpa name stays covered by the trademark policy.
AGPL-3.0-only
The gas service. If you run a modified version as a hosted service, you share your changes with its users.
CC BY 4.0
Logo and brand assets, subject to the trademark policy. This licence is still in draft.
Before you sign, the app turns the exact payload into plain facts and checks the recipient. If anything does not match your quote, it refuses. Try to get it wrong.
GuideYou are sending 20.00 USDC to Maria on Base. The fee is 0.05 USDC, added on top, so 20.05 USDC leaves your account.
The Guide writes this sentence. The facts above come from code, and the Guide cannot change them.
Ready to sign. Face ID unlocks the key on this device only.
The decoded facts come from the bytes that will be signed, not from what an app or a page claims. A swapped recipient cannot hide.
Addresses are checked against the ones you have used, so a lookalike that copies the first and last four characters gets flagged.
Transfers are irreversible and Sherpa cannot unfreeze funds. The app says so before you send, not after.
Getting paid has a safe path too. A payment request shows who is asking, how much and why, and the page never asks for keys. See an example payment request page.
If you think your phone or phrase is compromised, QuickSave moves your stablecoins to brand-new addresses on every chain, with no gas needed. It is on the runway as Next, so it is not in the first beta.
QuickSave beats an attacker who is about to drain you. It does not beat one who already has.
Rescue sweeps do not use up your free sends. They are bounded by a daily limit and by device attestation.
Armed mode will pre-sign rescue authorisations from your EVM address to a rescue address you hold, valid for a year, and store them encrypted in your cloud backup, so the Base sweep can run even if your phone is gone. It is designed and specified, not yet shipped. On Solana and Tron, rescue needs your device, and the app says so.
All three chains sweep at the same time, with no gas needed, to addresses the attacker has never seen.
An AI helper that explains and prepares. It never decides, and it never touches your keys.
Code decodes the exact payload into facts: asset, amount, recipient, fee, chain, and the first-time, lookalike and frozen-funds checks. The Guide adds one plain paragraph on top. It may describe the facts. It may never change them.
Type "send 20 USDC to Maria for lunch". Rules read it first, and a language model only helps when the rules cannot. Either way you land on the normal confirm screen.
Questions such as "what did I pay last month?" are answered from your own history. Only redacted summaries leave your device.
For people running a gas service: a summary of float, subsidy and abuse anomalies, so problems are spotted before users feel them.
This demo runs the rules only, in your browser. Nothing is sent anywhere.
How the Guide read it
send 20 USDC to Maria for lunch
The Guide only reads your words. Amounts, fees and checks come from code, and the normal confirm screen has the last word.
Confirm screen preview
Read by rules
The real app opens its normal confirm screen here. This demo never sends anything.
Where Sherpa is going, in the order we plan to get there. Dates move, and when they do we say so here.
Drag, scroll sideways or use the buttons.
In the first beta
Send and receive on the three launch chains.
Allow-listed tokens only, at published contracts.
Your first 5 sends are on us, inside published limits.
Every payload decoded into plain facts before you sign.
Planned and being built
Pay a short tag instead of a long address, and ask others to pay you.
The same flat-fee shape on three more chains. Ethereum comes with higher floors.
Restore with a passkey as well as your recovery phrase.
Add money through licensed partners.
One tap sweeps your funds to a fresh wallet if you suspect a compromise.
Direction, not a promise
Spend stablecoins with a card while your keys stay on your device.
Take stablecoin payments in a shop or online, and release goods on finality.
Pick people you trust to help you regain access, with no company in the middle.
Use Sherpa's gas fronting in your own app through an API.
TON, Sui, Aptos, Stellar and Celo.
Recurring payments through session keys, with limits you set.
Ideas we want to try. Not promises.
Send to a number. The recipient claims it when they install the app.
Sign now and relay by text message when there is no data signal.
Give an AI agent a capped wallet that pays for each API call it makes.
The beta is invite-only and capped at launch, on iPhone and Android, with Solana, Base and Tron.