Trezor’s Rojčyk wants a human signature on every AI wallet transaction

AI agents are coming for your crypto wallet. Trezor would like them to ask permission first.

Denis Rojčyk, Software Product Lead at Trezor, argued during a TOKEN2049 panel that AI agents should not be handed autonomous control over wallet transactions. His view is that a human must give the final signature, through a hardware wallet, before any transaction goes through.

What Rojčyk actually said

The panel took place at TOKEN2049 on October 7-8, 2026. A recording of the session was released on October 26, 2026.

Rojčyk’s position draws a clear line between helping and doing. In his framing, an AI agent can assist with preparing a transaction. It cannot complete one on its own.

The mechanism is the hardware wallet itself. A physical device, held by the user, provides the human-authored signature that makes the transaction valid. Without that step, nothing moves.

Trezor’s current products line up with that philosophy. Its devices do not support any autonomous signing capabilities for AI agents. Every signature still requires manual approval.

The MetaMask contrast

Rojčyk’s stance lands differently when set next to MetaMask’s approach.

MetaMask’s Agent Wallet takes a more flexible route. It lets AI agents operate within parameters the user defines, without requiring hardware confirmation for each transaction.

Under MetaMask’s model, the user sets the rules up front, and the agent acts inside those guardrails. Under Trezor’s model, the human signs off at the moment of execution, every single time.

Why the human signature matters

The core argument for a hardware signature is about where trust sits.

If an AI agent can sign on its own, the security of your funds depends heavily on the agent behaving correctly. That includes the model, the software around it, and whatever data it is fed. Any weak link becomes a potential path to your assets.

Requiring a physical signature narrows that attack surface. An agent could be tricked, misconfigured, or simply wrong, and the transaction still stalls until a person reviews it and confirms on a separate device.

What this means for wallets and users

For users, the practical question is what kind of risk they are comfortable carrying. Rule-based agent wallets ask users to think carefully about the limits they set ahead of time. Hardware-gated models ask users to stay involved at the point of every transaction.

Trezor’s position also sets expectations for its own roadmap. With its devices offering no autonomous signing for AI agents, any future move toward agent-friendly features would be measured against the stance Rojčyk laid out at TOKEN2049. The bar he described is a human-authored signature, not a policy setting.