8 Months
Post-MVP

Commission and complete a third-party security audit of MarmoAccount.sol and MarmoAccountFactory.sol. Resolve all findings before proceeding to scale.

Connect desktop and Telegram apps to a production bundler (Pimlico or Alchemy) so UserOps are reliably submitted on-chain without manual configuration.

Replace hardcoded gas limits with live estimation. Prevent failed UserOps due to insufficient gas or stale limit assumptions.

Harden the co-signer API against spam and denial-of-service patterns. Introduce per-wallet and per-IP request limits.

Integrate production error reporting on both the co-signer and Telegram app for real-time visibility into failures.

Implement ERC-5564 Announcement event scanning. The wallet scans from the last synced block and identifies incoming payments destined for the user's view key.

Automatically build and submit a UserOp that sweeps detected stealth UTXOs into the main smart account.

Replace the static meta-address display with an active inbox showing pending and confirmed stealth receives with timestamps and amounts.

Deploy the ERC-5564 Announcer contract on Base to standardise announcement publishing for all Marmo sends.

Route swaps through Uniswap V3 on Base. Show price impact, slippage, and fee breakdown before confirmation. No third-party frontend required.

Display and send WETH, USDT, DAI, cbBTC, and any ERC-20 held in the wallet. Token list sourced from the Uniswap default token list.

Show real-time USD values for all token balances on the dashboard. Refresh every 30 seconds.

Persist a local transaction history on both surfaces showing sent, received, and swap activity.

Sign macOS (.dmg), Windows (.msi), and Linux builds. Remove "untrusted developer" warnings on first launch.

Ship Tauri's built-in updater so users receive patches without reinstalling.

Allow users to rotate Shard A or Shard C from within the app, sweeping funds to a new account. Essential after any shard compromise.

Guide new users through writing Shard A to a USB drive instead of the OS keychain, for air-gap-style cold storage.

Update landing page download links to signed v1.0 builds. Remove all beta language from product and documentation.

Allow users to claim a .marmo username that resolves to their stealth meta-address. Implemented as an on-chain registry on Base.

The send screen accepts .marmo handles as recipients, resolving them to the appropriate stealth meta-address and generating a one-time address automatically.

Read ENS stealth-meta-address text records so users can send to existing ENS names if the recipient has published a meta-address.

Each .marmo handle gets a profile page at usemarmo.xyz/u/handle showing only the handle and meta-address. No balance or history is exposed.

Integrate with an EVM-compatible privacy pool that issues ZK proofs of compliance. Users can deposit USDC, receive a compliance proof, and withdraw to a fresh address.

Display a "screened" badge on outbound transactions that used the privacy pool. Allow users to export the compliance proof for regulatory purposes.

Combine stealth addresses for receive with privacy pool exits for send, creating a fully private inbound-to-outbound flow.

Build marmo-mobile using React Native with native WebAuthn (passkey) integration via platform APIs on iOS and Android.

Face ID and fingerprint unlock to access the wallet on mobile. Local authentication, not transmitted to any server.

Native push notifications for incoming stealth payments detected during background scanning.

Submit for review and publish Marmo Privacy on both stores. Includes review preparation, screenshots, and localisation for English.

Add stealth address generation and scanning, UserOp building, and co-signer integration. Developers can build Marmo-compatible wallets in under 50 lines.

Full docs site at docs.usemarmo.xyz with quickstart guides, API reference, and worked examples for all SDK surfaces.

Publish a Docker Compose setup so developers can run their own co-signer server with their own key material in under 10 minutes.

Launch a public bug bounty covering the smart contracts, co-signer API, and SDK. Rewards funded from the operational budget.