# Aegis SDK — Large Order Execution Protection Layer for CoW Protocol Interfaces

**URL:** <https://forum.cow.fi/t/aegis-sdk-large-order-execution-protection-layer-for-cow-protocol-interfaces/3394>\
**Category:** CoW Grants Program\
**Created:** [March 13, 2026, 1:32am UTC](https://forum.cow.fi/t/aegis-sdk-large-order-execution-protection-layer-for-cow-protocol-interfaces/3394 "2026-03-13T01:32:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mani67](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.cow.fi/mani67/32/1694_2.png) [@mani67](https://forum.cow.fi/u/mani67)\
**Post date:** [March 13, 2026, 1:32am UTC](https://forum.cow.fi/t/aegis-sdk-large-order-execution-protection-layer-for-cow-protocol-interfaces/3394/1 "2026-03-13T01:32:15Z")

</div>

On March 12, 2026, a user swapped $50.4M USDT for AAVE through CoW Protocol and received $36,009 in return due to catastrophic slippage. I built Aegis - an open source SDK that classifies orders by risk tier and enforces TWAP execution for large trades before they are submitted.

What I built:

OrderClassifier that detected this exact transaction as catastrophic (630% of pool depth)  
Tier 3 routing gate that would have blocked the single swap entirely  
TWAP recommendation engine estimating $50.28M output vs $36K actual  
Full case study and working prototype tested against the live transaction

GitHub: [GitHub - Mani678/aegis-sdk · GitHub](https://github.com/Mani678/aegis-sdk)  
What I’m requesting funding for:  
Phase 1 $22,000  
SafeSwapUI component $8,000  
TWAPExecutor integration $10,000  
Documentation + testing $4,000

Total $22,000  
SafeSwapUI - a drop-in React component that replaces checkbox warnings with concrete dollar impact previews. Shows the user exactly what they will receive, not just a percentage warning.  
TWAPExecutor - a wrapper around CoW Protocol’s existing ComposableCoW TWAP contracts with a live execution dashboard. Splits large orders into tranches automatically and gives users real-time visibility into each fill.  
Why CoW Protocol:  
CoW Protocol already has the on-chain TWAP infrastructure via ComposableCoW. Aegis builds the interface layer on top of it. This is complementary, not competitive.

Why now:  
This incident happened yesterday. The gap is real, documented, and on-chain. The prototype already works. Funding accelerates the interface layer that makes large trades safe by design - not just warned against.  
About me:  
Technical founder building open source tooling for DeFi interfaces. GitHub: [Mani678 · GitHub](https://github.com/Mani678)

---

<div class="post-metadata">

**Author:** ![mfw78](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.cow.fi/mfw78/32/1598_2.png) [@mfw78](https://forum.cow.fi/u/mfw78)\
**Post date:** [March 13, 2026, 7:34am UTC](https://forum.cow.fi/t/aegis-sdk-large-order-execution-protection-layer-for-cow-protocol-interfaces/3394/2 "2026-03-13T07:34:56Z")

</div>

Research on CoW related properties will show you that:

1. CoW Swap already has this functionality.
2. Infrastructure for TWAP already exists on-chain as noted by this grant application.

I’m closing this application as it is not relevant, and seeks to misconstrue recent events. If other members of the grants committee deem this relevant, feel free to re-open.

---

<div class="post-metadata">

**Author:** ![mfw78](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.cow.fi/mfw78/32/1598_2.png) [@mfw78](https://forum.cow.fi/u/mfw78)\
**Post date:** [March 13, 2026, 7:35am UTC](https://forum.cow.fi/t/aegis-sdk-large-order-execution-protection-layer-for-cow-protocol-interfaces/3394/3 "2026-03-13T07:35:06Z")

</div>