Permit2 and Paymasters: How Non-Custodial Gas Sponsorship Actually Moves Funds

A non-custodial paymaster is only as non-custodial as the account and authorization layer underneath it. Permit2 is one of the key pieces that makes it possible for a paymaster to sponsor gas without ever taking custody of the user's funds along the way.

The account layer problem

Under ERC-4337, gas sponsorship only applies to UserOperations, which come from smart accounts, not externally owned accounts (EOAs). Most users, however, still hold their assets in a plain EOA. Trustware's approach is to deploy deterministic light smart accounts for the wallets that interact with its paymaster. This keeps the EOA as a pure signer while giving the user a smart account that acts purely as an execution vehicle, with a predictable account address, without ever altering the EOA itself. Without this account layer, a paymaster has no UserOperation to sponsor in the first place.

Where Permit2 fits in

Once the light smart account exists, it still needs a way to move the user's tokens without the user handing over custody. This is where Permit2 comes in. The user signs a Permit2 authorization with their EOA key. That authorization lets the smart account pull the specified token from the EOA for a given operation, without the user transferring custody of the asset to any intermediary, including Trustware.

After the one-time Permit2 authorization, the user signs once per route. The smart account then executes the transaction, with the paymaster covering the gas. The user's EOA remains the primary signer throughout, and Trustware never controls the smart account itself.

Why this matters for non-custodial sponsorship

This flow, EOA signer, light smart account, Permit2 authorization, paymaster-sponsored execution, is what makes it possible to say a paymaster is genuinely non-custodial and not just non-custodial in marketing language. Funds move peer-to-contract-to-peer. The user holds their assets the entire time. The paymaster sponsors the gas step. Trustware never holds the funds being moved, and never controls the account executing the transaction.

Gas sponsorship gets a lot of attention as a UX feature. Permit2 is one of the technical pieces that determines whether that UX improvement comes at the cost of custody, or whether it doesn't.