UGTP2
VISUAL WHITEPAPER · v1.0

One secure layer for gasless, cross-chain crypto.

UGTP v2 — the Universal Gasless Transaction Platform — is a B2B API that abstracts chains, gas, bridges, and blockchain security into a single intelligent execution layer. Not a wallet, not a bridge — infrastructure any wallet, dApp, or fintech app integrates in one call.

60+
EVM chains reachable
~2 s
C-Chain finality
$0
gas paid by end users
1
API · any EVM wallet
100%
transactions firewall-checked

“The first secure intelligent execution layer for consumer cross-chain finance.”

01 The shift

From many layers to one.

UGTP v1 required a separate integration layer for every network it supported — each with its own adapter, its own maintenance, its own attack surface. UGTP v2 collapses that into a single common platform serving all EVM-compatible chains through one unified execution gateway.

UGTP v1LAYER PER CHAIN
Wallet / dApp
↓ integrate separately, N times ↓
Ethereum layeradapter
Avalanche layeradapter
Arbitrum layeradapter
Base layeradapter
Polygon layeradapter
UGTP v2ONE UNIFIED LAYER
Any Wallet / dApp / fintech app
↓ integrate once ↓
UGTP v2 Universal Execution Layer
smart accounts · gasless · cross-chain · security — all chains
EthereumAvalanche ArbitrumBase OptimismPolygon + 60 more
02 The architecture stack

Four layers, secured at every level.

A modular stack where each layer is independently auditable and replaceable. Requests flow down through integration, orchestration, and capability providers, and settle on Avalanche C-Chain.

L1
Integration Layer
Any wallet, dApp, or financial application. A single REST call or SDK integration — works with any EVM-compatible frontend, no chain-specific code.
consumer of the API
L2
Gateway & Orchestration  — the core product
api.ugtp.io. Authenticates API keys, validates input, runs the security gate, and orchestrates the service layer: account, transaction, cross-chain and security services.
Next.js · TypeScript · /api/v1/
L3
Capability Providers
Best-in-class engines behind pluggable provider interfaces — swappable without touching routes or services.
ZeroDev
ERC-4337 smart accounts & gasless execution
LI.FI
cross-chain routing & DEX aggregation
Check Point
pre-execution security firewall
L4
Settlement Layer — Avalanche C-Chain
High-throughput EVM chain with sub-second finality. ERC-4337 smart accounts enable seamless gasless transactions with low fees.
Avalanche C-Chain · Chain ID 43114
03 Core capabilities

Four engines behind one API.

Every UGTP v2 capability is exposed through the same authenticated gateway — and every one of them runs behind the security gate.

Smart Accounts

ZeroDev · ERC-4337

Programmable Kernel accounts that replace seed phrases and gas tokens with code.

  • Gasless transactions via paymaster sponsorship
  • Scoped session keys — targets, spend caps, expiry
  • Batch operations in a single UserOperation
  • Social recovery, no seed phrase required

Cross-Chain Routing

LI.FI

Automated bridging and DEX aggregation across 60+ chains — any token to any token.

  • Best-route quotes across all major bridges
  • Any-chain to any-chain value transfer
  • No manual bridges, approvals, or chain switching
  • Async execute-and-poll for long operations

Security Firewall

Check Point

Pre-execution threat analysis on every transaction — a protocol gate, not a plugin.

  • Real-time scam & threat detection
  • Verdict, risk score 0–100, threat list
  • Unsafe transactions blocked before execution
  • Pluggable provider — mock today, live with one env var

Avalanche C-Chain

Settlement Network

Avalanche C-Chain provides the execution environment for all UGTP v2 smart account operations.

  • Chain ID 43114 · native token AVAX
  • ERC-4337 smart accounts via ZeroDev
  • Sub-second finality & low gas fees
  • Cross-chain bridging via LI.FI
04 Internal operations

The transaction lifecycle.

What happens inside the gateway between a client’s POST /transactions call and final settlement — ten steps, with the security firewall as a mandatory gate.

1
Request
Client calls POST /api/v1/transactions with an X-API-Key header and the transaction body.
2
Authenticate
Auth middleware hashes the key with SHA-256 and looks it up in the api_keys table. Invalid or disabled → 401.
3
Security analysis  — the gate
The security service runs the transaction through the Check Point firewall: target, value, calldata and chain are analysed for threats.
4
Verdict branch
The verdict decides whether execution continues.
unsafe → blocked, 403 + threat details safe / warning → continue
5
Build UserOperation
ZeroDev assembles an ERC-4337 UserOperation from the request against the owner’s Kernel smart account.
6
Sponsor gas
The paymaster sponsors the gas. The end user holds no native token and pays nothing — the transaction is gasless.
7
Bundle & submit
The bundler packages the UserOperation and submits it to the mempool for inclusion.
8
Settle on Avalanche
The transaction is confirmed on Avalanche C-Chain with sub-second finality.
9
Persist
Transaction record and the linked security report are written to PostgreSQL for status tracking and audit.
10
Respond
Status and IDs return to the client, which polls GET /transactions/:id through pending → submitted → confirmed.
05 Cross-chain flow

Any chain to any chain, in one call.

Cross-chain operations are asynchronous: the client requests a quote, executes a route, and polls for completion. LI.FI selects and aggregates the bridge and DEX path; the security gate runs before any value moves.

Source chain
Any token on any of 60+ EVM chains
UGTP v2 + LI.FI
Quote → security gate → bridge & DEX aggregation
Destination chain
Output token delivered, no bridges to manage
Quote
POST /crosschain/routes returns ranked routes & the recommended one.
Execute
POST /crosschain/transfer returns immediately as executing.
Poll
GET /crosschain/transfer/:idcompleted or failed.
06 Security as a protocol gate

Every transaction is checked — by design.

Security is not an optional plugin. Transactions and cross-chain transfers all pass through a SecurityProvider before execution. The interface is pluggable: a mock provider runs today, and the real Check Point provider activates automatically the moment CHECKPOINT_API_URL and CHECKPOINT_API_KEY are set — with zero changes to routes or services.

The SecurityProvider interface

A single contract every provider implements:

  • analyze(req) → verdict, riskScore, threats[], recommendations[]
  • isAvailable() → provider health probe
  • Result persisted to the security_reports table
  • Response carries provider — checkpoint-mock or checkpoint

Three verdicts

safe
Risk score low. Execution proceeds.
warning
Proceeds, flagged with human-readable risk notes.
unsafe
Blocked. Client receives 403 + threats.

This makes UGTP v2 a mandatory security gate — every integrating wallet gets Check Point protection by default.

07 The API surface

One REST API, fully documented.

All endpoints live under /api/v1/ and ship with an OpenAPI 3.0 specification rendered at doc.ugtp.io. Seven endpoint groups cover the whole platform.

Healthpublic
GET/health
SecurityX-API-Key
POST/security/analyze
GET/security/report/:id
AccountsX-API-Key
POST/accounts
GET/accounts/:id
POST/accounts/:id/session-keys
GET/accounts/:id/session-keys
DELETE/accounts/:id/session-keys/:keyId
TransactionsX-API-Key
POST/transactions
POST/transactions/batch
GET/transactions/:id
GET/transactions
Cross-ChainX-API-Key
GET/crosschain/chains
GET/crosschain/tokens
POST/crosschain/routes
POST/crosschain/transfer
GET/crosschain/transfer/:id
AdminJWT · Bearer
POST/admin/login
GET/admin/accounts
GET/admin/transactions
GET/admin/analytics
POST/admin/api-keys
DELETE/admin/api-keys/:id
Authentication. Every endpoint requires an X-API-Key header except /health and /admin/login. API keys are stored only as SHA-256 hashes. Admin endpoints additionally require an Authorization: Bearer <JWT> token issued by /admin/login.
08 Data model

Seven tables, one source of truth.

State lives in a serverless PostgreSQL database (Neon). The schema auto-initializes on the first request — no migration step to run.

api_keys
Issued integrator keys — SHA-256 hashes, never plaintext.
key_hash · permissions · rate_limit · enabled
smart_accounts
ZeroDev Kernel accounts linked to an owner address.
owner_address · smart_account_address · chain_id · kernel_version
transactions
Gasless transactions with full status history.
status · user_op_hash · tx_hash · gas_sponsored · security_verdict
crosschain_transfers
Cross-chain transfers and their LI.FI routes.
source / destination chain & token · bridge_name · expected_output
session_keys
Scoped delegated keys for smart accounts.
permissions · valid_after · valid_until · status
security_reports
Every firewall analysis result, kept for audit.
verdict · risk_score · threats · provider
audit_log
Administrative actions and actor trail.
action · actor · resource_type · resource_id
conventions
Consistent across the whole schema.
id = ugtp_{type}_{nanoid(12)} · timestamps = Unix ms (BIGINT)
09 Settlement network

Avalanche C-Chain — battle-tested infrastructure.

UGTP v2 settles on Avalanche C-Chain, leveraging its mature ERC-4337 ecosystem, sub-second finality, and low transaction fees for gasless smart account operations.

NetworkAvalanche C-Chain
Native tokenAVAX
Chain ID43114
Virtual machineEVM-compatible
ConsensusAvalanche Snowman
FinalitySub-second
Account abstractionERC-4337 via ZeroDev
Explorersnowscan.xyz

Why Avalanche C-Chain?

C-Chain provides production-grade infrastructure with full ERC-4337 support, enabling smart accounts, bundlers, and gasless operations out of the box.

  • Mature ERC-4337 ecosystem with ZeroDev integration
  • Sub-second finality for instant transaction confirmation
  • Low gas fees ideal for sponsored transactions
  • Battle-tested security with thousands of validators
  • Cross-chain bridging via LI.FI to 60+ EVM chains
10 Monetization

Five revenue streams, one platform.

UGTP v2 monetizes at several points along a single transaction through the API and settlement infrastructure.

01
API tiers
Free, Pro and Enterprise access plans.
02
Gas margin
Spread on gas fees paid on Avalanche C-Chain.
03
Sponsored gas
Platform-sponsored gas with configurable margins.
04
Premium security
Advanced Check Point analysis as an upsell.
05
Routing fees
Commission on cross-chain routes & swaps.
11 Strategic position

At the intersection of three partners.

UGTP v2 is engineered to sit where infrastructure, security, and consumer distribution meet — making each partner stronger than they are alone.

A
Ava Labs — infrastructure
Positions Avalanche as the universal execution layer for gasless consumer crypto. Every UGTP v2 transaction settles on Avalanche C-Chain.
C
Check Point — security
UGTP v2 delivers Check Point’s first protocol-level blockchain firewall deployment — a mandatory gate rather than an optional integration.
N
Norionsoft / Extrasafe — distribution
Consumer wallet reach. Every wallet that integrates UGTP v2 inherits gasless UX and Check Point protection by default.
Ava Labs Check Point Extrasafe UGTP v2 execution layer
12 Delivery

Shipped as five projects.

UGTP v2 is delivered as five Next.js + TypeScript applications deployed on Vercel, sharing one PostgreSQL database on Neon.

Gateway API CORE
The product. Auth, orchestration, all /api/v1/ endpoints.
Landing
Marketing site — hero, features, architecture, code examples.
API Documentation
OpenAPI 3.0 specification rendered with an interactive explorer.
Example Wallet
Single-page reference wallet exercising every API capability.
Admin Dashboard
Monitoring for accounts, transactions, analytics & security alerts.
Stack — Next.js · TypeScript · Tailwind · viem  |  Data — PostgreSQL / Neon  |  Hosting — Vercel  |  Settlement — Avalanche C-Chain