Identity & Wallet
Onboarding friction is where most Web3 campaigns lose their audience. Gatoll removes it with a social login and a pluginless embedded wallet, while keeping claims non-custodial.
Identity: sign in with X
Section titled “Identity: sign in with X”The entry point is X (Twitter) OAuth. A user signs in with their existing X account — no new password, no app to install. This anchors identity to a real social profile, which is also what makes social Gates like follow meaningful.
Wallet binding: SIWE
Section titled “Wallet binding: SIWE”A wallet is linked to the account with Sign-In with Ethereum (SIWE): the user signs a one-time message proving control of the address. A user can bind an external wallet (MetaMask, WalletConnect, and the like) or use the built-in embedded wallet. The bound wallet is the address that claims, and the protocol checks that a claim’s recipient is one of the user’s bound wallets.
The embedded wallet
Section titled “The embedded wallet”For users without a wallet, Gatoll ships a pluginless embedded wallet. It runs without a browser extension, so a first-time participant arriving from a social link can create a wallet and claim in seconds, on a phone.
The wallet is non-custodial. Keys are encrypted client-side into an EIP-2335 keystore — the same standard format used for validator keys — and only the encrypted keystore is ever stored server-side. The backend never sees or decrypts the private key; it holds ciphertext the user alone can unlock. Signing happens on the user’s side.
Why it matters
Section titled “Why it matters”This is the difference between a campaign that converts and one that does not. The hard parts of Web3 onboarding — installing software, safeguarding a seed phrase, funding gas before you can do anything — are exactly what stops a curious newcomer. By pairing a familiar social login with a wallet that needs no install and custody that stays with the user, Gatoll lets the reward, not the tooling, be the thing the participant has to think about.
Identity and the wallet feed directly into Gates (who you are) and claims (which address receives), tying the social and on-chain sides of a Loot together.