> For the complete documentation index, see [llms.txt](https://quackai.gitbook.io/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://quackai.gitbook.io/docs/q402-execution-layer/q402-institutional.md).

# Q402 Institutional

> **Production-grade gasless payment infrastructure for institutions, AI agents, and enterprise integrations across 7 EVM mainnets.**

<figure><img src="/files/Eg5y9MvsfqYyRw5cEfcs" alt=""><figcaption></figcaption></figure>

#### Why Q402 Institutional Exists

On every EVM chain, users — including institutional accounts and AI agents — need to hold a native gas token (BNB, ETH, MNT, AVAX, INJ, OKB, USDT0) just to move USDC or USDT.

> A treasury holding $100M of USDC on BNB Chain cannot transfer anything without BNB. Web2 onboarding parity collapses right here.

Q402 Institutional was built to remove this friction at production scale.

**Four reasons Q402 Institutional exists:**

**1. Gas UX is what's blocking institutional Web3 adoption.** Stripe, PayPal, and bank wires don't push fees onto end users. Web3 needs to meet that bar.

**2. AI agents need a gasless payment rail.** Managing gas for 100 agents across 7 chains individually is operationally infeasible. One Gas Tank top-up covers all of them.

**3. EIP-7702 is the right primitive.** Unlike ERC-4337 (Account Abstraction), existing EOAs work as-is — no wallet migration required. MetaMask and OKX Wallet participate out of the box.

**4. Multi-chain on day one.** Most gasless solutions cover a single chain. Q402 ships on 7 mainnets simultaneously with unified contract logic.

***

#### What Q402 Institutional Provides

| Feature                        | Description                                                                                                                           |
| ------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------- |
| **Gas Tank**                   | Top up once, sponsor unlimited transactions across 7 chains. Per-chain balance dashboards, low-balance alerts via Telegram.           |
| **API Key Provisioning**       | Self-serve $29 / $149 / $1,999 subscription tiers. Automated activation upon on-chain payment. TX-credits model with monthly renewal. |
| **Sandbox Mode**               | Pre-production testing with mock relays. Free for development. Distinguished by `q402_test_` key prefix.                              |
| **Webhook System**             | HMAC-SHA256 signed payloads. SSRF defenses (IPv6 loopback, GCP/AWS/Azure metadata blocks). Real-time settlement notifications.        |
| **Audit Receipts**             | Every transaction generates a verifiable X-PAYMENT-RESPONSE header linking signature → tx hash → policy execution.                    |
| **Per-Chain Price Validation** | BNB / X Layer / Stable 1.0×, Avalanche 1.1×, Ethereum 1.5× pricing.                                                                   |
| **Grant Program**              | Seed ($500), Builder ($2K), Ecosystem tiered grants for projects building on Q402.                                                    |

***

#### Production Deployment — 7 EVM Mainnets

All contracts verified and live:

| Chain             | ChainID | Relay Method                 | Implementation Contract                      | Status                |
| ----------------- | ------- | ---------------------------- | -------------------------------------------- | --------------------- |
| Ethereum          | 1       | EIP-7702                     | `0x8E67a64989CFcb0C40556b13ea302709CCFD6AaD` | ✅ Live                |
| BNB Chain         | 56      | EIP-7702                     | `0x6cF4aD62C208b6494a55a1494D497713ba013dFa` | ✅ Live                |
| Avalanche C-Chain | 43114   | EIP-7702                     | `0x96a8C74d95A35D0c14Ec60364c78ba6De99E9A4c` | ✅ Live                |
| X Layer           | 196     | EIP-7702 + EIP-3009 fallback | `0x8D854436ab0426F5BC6Cc70865C90576AD523E73` | ✅ Live                |
| Mantle            | 5000    | EIP-7702                     | `0x2fb2B2D110b6c5664e701666B3741240242bf350` | ✅ Live                |
| Stable            | 988     | EIP-7702                     | `0x2fb2B2D110b6c5664e701666B3741240242bf350` | ✅ Live (USDT0 native) |
| Injective EVM     | 1776    | EIP-7702                     | `0x2fb2B2D110b6c5664e701666B3741240242bf350` | ✅ Live (USDT only)    |

**Notes:**

* X Layer additionally supports legacy EIP-3009 fallback for USDC, selected automatically when `eip3009Nonce` is passed.
* Stable: USDT0 is both gas token and payment token (native coin = USD-pegged).
* Mantle: EVM L2 (Skadi Hard Fork, Prague-aligned), EIP-7702 natively supported, MNT native gas token.
* Injective EVM (Inferno upgrade, Nov 2025): EVM execution layer of Injective. INJ is native gas token. Q402 ships USDT-only until Circle's CCTP native USDC mainnet rollout (announced Q2 2026).

#### Use Cases

**Institutional Treasury Operations**

Automate payroll, grants, and disbursements with single-signature batch payments across recipients and chains. Reduces back-office reconciliation by over 70%.

**AI Agent Settlement**

Agents transact directly with services and APIs across the Agent Economy. One Gas Tank top-up covers operations across 100+ agents on 7 chains.

**RWA Distribution**

Tokenized fund managers automate dividend distributions, NAV-based redemptions, and shareholder payouts under jurisdictional policy enforcement.

**API Monetization**

Enable pay-per-call APIs and machine-to-machine payments with HTTP 402 semantics. Standard `/verify`, `/settle`, `/supported` endpoints.

***

#### Security & Compliance

* **Dual Nonce Protection**: EIP-7702 auth nonce + application-level `paymentId/nonce`
* **Short Deadline**: Configurable expiry (default ≤ 60s) limits attack window
* **Implementation Whitelist**: Only approved contracts can be delegated to
* **Per-Account Limits**: Token caps, recipient blacklist, rate limits
* **TX Replay Protection**: `used_txhash` KV flag (90-day TTL) blocks reactivation with same TX
* **Webhook SSRF Defenses**: IPv6 loopback, cloud metadata endpoints blocked
* **Fail-Closed Rate Limiting**: `/api/relay` and `/api/gas-tank/verify-deposit` block on KV outage
* **Immutable Event Logs**: Audit-friendly, traceable

***

<figure><img src="/files/FahcScyErqb4xndpxFy8" alt=""><figcaption></figcaption></figure>

#### Roadmap Integration

Q402 Institutional is the production realization of the Q1 2026 milestone in the [Quack AI roadmap](https://quackai.gitbook.io/docs/roadmap/futureplans).

**Future milestones touching Q402 Institutional:**

* **Q2 2026**: AI Agent Governance v1 with Q402 Settlement Registry integration
* **Q4 2026**: Q402 Mainnet v2 + x402 ecosystem interoperability layer

***

#### Get Started

**For Developers**: SDK installation, API key provisioning, sandbox testing → See [Developer Suite](https://quackai.gitbook.io/docs/developer-suite/overview)

**For Institutions**: Custom integration, compliance review, dedicated facilitator → Contact: [**business@quackai.ai**](mailto:business@quackai.ai)

**For Grant Applications**: Seed / Builder / Ecosystem tiers → Apply at q402.quackai.ai/grant