olas-operate-middleware 0.10.6__py3-none-any.whl → 0.10.7__py3-none-any.whl

operate/data/contracts/recovery_module/contract.py

@@ -0,0 +1,61 @@
+# -*- coding: utf-8 -*-
+# ------------------------------------------------------------------------------
+#
+#   Copyright 2025 Valory AG
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
+# ------------------------------------------------------------------------------
+
+"""This module contains the class to connect to the `RecoveryModule` contract."""
+
+
+from typing import Any, Dict
+
+from aea.configurations.base import PublicId
+from aea.contracts.base import Contract
+from aea.crypto.base import LedgerApi
+
+
+PUBLIC_ID = PublicId.from_str("valory/recovery_module:0.1.0")
+
+
+class RecoveryModule(Contract):
+    """The RecoveryModule contract"""
+
+    contract_id = PUBLIC_ID
+
+    @classmethod
+    def get_recover_access_transaction(
+        cls,
+        ledger_api: LedgerApi,
+        contract_address: str,
+        owner: str,
+        service_id: int,
+        raise_on_try: bool = False,
+    ) -> Dict[str, Any]:
+        """Get the recover access transaction."""
+
+        tx_params = ledger_api.build_transaction(
+            contract_instance=cls.get_instance(
+                ledger_api=ledger_api, contract_address=contract_address
+            ),
+            method_name="recoverAccess",
+            method_args={
+                "serviceId": service_id,
+            },
+            tx_args={"sender_address": owner},
+            raise_on_try=raise_on_try,
+        )
+
+        return tx_params

operate/data/contracts/recovery_module/contract.yaml

@@ -0,0 +1,23 @@
+name: recovery_module
+author: valory
+version: 0.1.0
+type: contract
+description: Recovery module
+license: Apache-2.0
+aea_version: '>=1.0.0, <2.0.0'
+fingerprint:
+  __init__.py: bafybeicjlkmxs5ikpgdtgndifstpmmpaixwcbgouvmt6gowuhf5dy3dpgu
+  build/RecoveryModule.json: bafybeifsyjdbprcp4kxpijlpqfovxcf7cv2ujapt3d5zn34wby26ldv4ky
+  contract.py: bafybeifihpwb3etbrnn2hqdizsp5zolis3ur23slt3q5zctcykm5nlvv7q
+fingerprint_ignore_patterns: []
+contracts: []
+class_name: RecoveryModule
+contract_interface_paths:
+  ethereum: build/RecoveryModule.json
+dependencies:
+  open-aea-ledger-ethereum:
+    version: ==1.60.0
+  open-aea-test-autonomy:
+    version: ==0.18.3
+  web3:
+    version: <7,>=6.0.0

operate/ledger/profiles.py

@@ -21,64 +21,46 @@
 
 import typing as t
 
+from autonomy.chain.constants import CHAIN_PROFILES, DEFAULT_MULTISEND
+
 from operate.constants import NO_STAKING_PROGRAM_ID, ZERO_ADDRESS
 from operate.operate_types import Chain, ContractAddresses
 
 
-CONTRACTS: t.Dict[Chain, ContractAddresses] = {
-    Chain.GNOSIS: ContractAddresses(
-        {
-            "service_manager": "0x04b0007b2aFb398015B76e5f22993a1fddF83644",
-            "service_registry": "0x9338b5153AE39BB89f50468E608eD9d764B755fD",
-            "service_registry_token_utility": "0xa45E64d13A30a51b91ae0eb182e88a40e9b18eD8",
-            "gnosis_safe_proxy_factory": "0x3C1fF68f5aa342D296d4DEe4Bb1cACCA912D95fE",
-            "gnosis_safe_same_address_multisig": "0x6e7f594f680f7aBad18b7a63de50F0FeE47dfD06",
-            "multisend": "0x40A2aCCbd92BCA938b02010E17A5b8929b49130D",
-        }
-    ),
-    Chain.OPTIMISM: ContractAddresses(
-        {
-            "service_manager": "0xFbBEc0C8b13B38a9aC0499694A69a10204c5E2aB",
-            "service_registry": "0x3d77596beb0f130a4415df3D2D8232B3d3D31e44",
-            "service_registry_token_utility": "0xBb7e1D6Cb6F243D6bdE81CE92a9f2aFF7Fbe7eac",
-            "gnosis_safe_proxy_factory": "0x5953f21495BD9aF1D78e87bb42AcCAA55C1e896C",
-            "gnosis_safe_same_address_multisig": "0xb09CcF0Dbf0C178806Aaee28956c74bd66d21f73",
-            "multisend": "0x40A2aCCbd92BCA938b02010E17A5b8929b49130D",
-        }
-    ),
-    Chain.ETHEREUM: ContractAddresses(
-        {
-            "service_manager": "0x2EA682121f815FBcF86EA3F3CaFdd5d67F2dB143",
-            "service_registry": "0x48b6af7B12C71f09e2fC8aF4855De4Ff54e775cA",
-            "service_registry_token_utility": "0x3Fb926116D454b95c669B6Bf2E7c3bad8d19affA",
-            "gnosis_safe_proxy_factory": "0x46C0D07F55d4F9B5Eed2Fc9680B5953e5fd7b461",
-            "gnosis_safe_same_address_multisig": "0xfa517d01DaA100cB1932FA4345F68874f7E7eF46",
-            "multisend": "0x40A2aCCbd92BCA938b02010E17A5b8929b49130D",
-        }
-    ),
-    Chain.BASE: ContractAddresses(
-        {
-            "service_manager": "0x63e66d7ad413C01A7b49C7FF4e3Bb765C4E4bd1b",
-            "service_registry": "0x3C1fF68f5aa342D296d4DEe4Bb1cACCA912D95fE",
-            "service_registry_token_utility": "0x34C895f302D0b5cf52ec0Edd3945321EB0f83dd5",
-            "gnosis_safe_proxy_factory": "0x22bE6fDcd3e29851B29b512F714C328A00A96B83",
-            "gnosis_safe_same_address_multisig": "0xFbBEc0C8b13B38a9aC0499694A69a10204c5E2aB",
-            "multisend": "0x40A2aCCbd92BCA938b02010E17A5b8929b49130D",
-        }
-    ),
-    Chain.MODE: ContractAddresses(
+# TODO: Refactor, remove the usage of CONTRACTS and use CHAIN_PROFILES from Open Autonomy instead.
+CHAINS = [
+    Chain.ARBITRUM_ONE,
+    Chain.BASE,
+    Chain.CELO,
+    Chain.ETHEREUM,
+    Chain.GNOSIS,
+    Chain.MODE,
+    Chain.OPTIMISM,
+    Chain.POLYGON,
+]
+
+CONTRACTS: t.Dict[Chain, ContractAddresses] = {}
+for _chain in CHAINS:
+    profile = CHAIN_PROFILES[_chain.value]
+    CONTRACTS[_chain] = ContractAddresses(
         {
-            "service_manager": "0x63e66d7ad413C01A7b49C7FF4e3Bb765C4E4bd1b",
-            "service_registry": "0x3C1fF68f5aa342D296d4DEe4Bb1cACCA912D95fE",
-            "service_registry_token_utility": "0x34C895f302D0b5cf52ec0Edd3945321EB0f83dd5",
-            "gnosis_safe_proxy_factory": "0xBb7e1D6Cb6F243D6bdE81CE92a9f2aFF7Fbe7eac",
-            "gnosis_safe_same_address_multisig": "0xFbBEc0C8b13B38a9aC0499694A69a10204c5E2aB",
-            "multisend": "0x40A2aCCbd92BCA938b02010E17A5b8929b49130D",
+            "service_registry": profile["service_registry"],
+            "service_registry_token_utility": profile["service_registry_token_utility"],
+            "service_manager": profile["service_manager_token"],
+            "gnosis_safe_proxy_factory": profile["gnosis_safe_proxy_factory"],
+            "gnosis_safe_same_address_multisig": profile[
+                "gnosis_safe_same_address_multisig"
+            ],
+            "safe_multisig_with_recovery_module": profile[
+                "safe_multisig_with_recovery_module"
+            ],
+            "recovery_module": profile["recovery_module"],
+            "multisend": DEFAULT_MULTISEND,
         }
-    ),
-}
+    )
 
 STAKING: t.Dict[Chain, t.Dict[str, str]] = {
+    Chain.ARBITRUM_ONE: {},
     Chain.GNOSIS: {
         "pearl_alpha": "0xEE9F19b5DF06c7E8Bfc7B28745dcf944C504198A",
         "pearl_beta": "0xeF44Fb0842DDeF59D37f85D61A1eF492bbA6135d",
@@ -150,6 +132,7 @@ STAKING: t.Dict[Chain, t.Dict[str, str]] = {
         "modius_alpha_3": "0x9034D0413D122015710f1744A19eFb1d7c2CEB13",
         "modius_alpha_4": "0x8BcAdb2c291C159F9385964e5eD95a9887302862",
     },
+    Chain.POLYGON: {},
 }
 
 
@@ -167,37 +150,50 @@ DEFAULT_PRIORITY_MECH = {  # maps mech marketplace address to its default priori
 
 # ERC20 token addresses
 OLAS: t.Dict[Chain, str] = {
-    Chain.GNOSIS: "0xcE11e14225575945b8E6Dc0D4F2dD4C570f79d9f",
-    Chain.OPTIMISM: "0xFC2E6e6BCbd49ccf3A5f029c79984372DcBFE527",
+    Chain.ARBITRUM_ONE: "0x064F8B858C2A603e1b106a2039f5446D32dc81c1",
     Chain.BASE: "0x54330d28ca3357F294334BDC454a032e7f353416",
+    Chain.CELO: "0xaCFfAe8e57Ec6E394Eb1b41939A8CF7892DbDc51",
     Chain.ETHEREUM: "0x0001A500A6B18995B03f44bb040A5fFc28E45CB0",
+    Chain.GNOSIS: "0xcE11e14225575945b8E6Dc0D4F2dD4C570f79d9f",
     Chain.MODE: "0xcfD1D50ce23C46D3Cf6407487B2F8934e96DC8f9",
+    Chain.OPTIMISM: "0xFC2E6e6BCbd49ccf3A5f029c79984372DcBFE527",
+    Chain.POLYGON: "0xFEF5d947472e72Efbb2E388c730B7428406F2F95",
 }
 
 USDC: t.Dict[Chain, str] = {
-    Chain.GNOSIS: "0xDDAfbb505ad214D7b80b1f830fcCc89B60fb7A83",
-    Chain.OPTIMISM: "0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",
+    Chain.ARBITRUM_ONE: "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
     Chain.BASE: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
+    Chain.CELO: "0xcebA9300f2b948710d2653dD7B07f33A8B32118C",
     Chain.ETHEREUM: "0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48",
+    Chain.GNOSIS: "0xDDAfbb505ad214D7b80b1f830fcCc89B60fb7A83",
     Chain.MODE: "0xd988097fb8612cc24eeC14542bC03424c656005f",
+    Chain.OPTIMISM: "0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",
+    Chain.POLYGON: "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
 }
 
 WRAPPED_NATIVE_ASSET = {
-    Chain.GNOSIS: "0xe91D153E0b41518A2Ce8Dd3D7944Fa863463a97d",
-    Chain.OPTIMISM: "0x4200000000000000000000000000000000000006",
+    Chain.ARBITRUM_ONE: "0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",
     Chain.BASE: "0x4200000000000000000000000000000000000006",
+    Chain.CELO: "0x471EcE3750Da237f93B8E339c536989b8978a438",  # Dual token
     Chain.ETHEREUM: "0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",
+    Chain.GNOSIS: "0xe91D153E0b41518A2Ce8Dd3D7944Fa863463a97d",
     Chain.MODE: "0x4200000000000000000000000000000000000006",
+    Chain.OPTIMISM: "0x4200000000000000000000000000000000000006",
     Chain.POLYGON: "0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",
-    Chain.ARBITRUM_ONE: "0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",
 }
 
 ERC20_TOKENS = [OLAS, USDC, WRAPPED_NATIVE_ASSET]
 
 DEFAULT_NEW_SAFE_FUNDS: t.Dict[Chain, t.Dict[str, int]] = {
+    Chain.ARBITRUM_ONE: {
+        ZERO_ADDRESS: int(1e15 / 4),
+    },
     Chain.BASE: {
         ZERO_ADDRESS: int(1e15 / 4),
     },
+    Chain.CELO: {
+        ZERO_ADDRESS: int(1e18),
+    },
     Chain.ETHEREUM: {
         ZERO_ADDRESS: int(1e15 / 4),
     },
@@ -210,21 +206,35 @@ DEFAULT_NEW_SAFE_FUNDS: t.Dict[Chain, t.Dict[str, int]] = {
     Chain.OPTIMISM: {
         ZERO_ADDRESS: int(1e15 / 4),
     },
+    Chain.POLYGON: {
+        ZERO_ADDRESS: int(1e18),
+    },
 }
 
 DEFAULT_MASTER_EOA_FUNDS = {
+    Chain.ARBITRUM_ONE: {ZERO_ADDRESS: 5_000_000_000_000_000},
     Chain.BASE: {ZERO_ADDRESS: 5_000_000_000_000_000},
+    Chain.CELO: {ZERO_ADDRESS: 1_500_000_000_000_000_000},
     Chain.ETHEREUM: {ZERO_ADDRESS: 20_000_000_000_000_000},
     Chain.GNOSIS: {ZERO_ADDRESS: 1_500_000_000_000_000_000},
     Chain.MODE: {ZERO_ADDRESS: 500_000_000_000_000},
     Chain.OPTIMISM: {ZERO_ADDRESS: 5_000_000_000_000_000},
+    Chain.POLYGON: {ZERO_ADDRESS: 1_500_000_000_000_000_000},
 }
 
 EXPLORER_URL = {
+    Chain.ARBITRUM_ONE: {
+        "tx": "https://arbiscan.io/tx/{tx_hash}",
+        "address": "https://arbiscan.io/address/{address}",
+    },
     Chain.BASE: {
         "tx": "https://basescan.org/tx/{tx_hash}",
         "address": "https://basescan.org/address/{address}",
     },
+    Chain.CELO: {
+        "tx": "https://celoscan.io/tx/{tx_hash}",
+        "address": "https://celoscan.io/address/{address}",
+    },
     Chain.ETHEREUM: {
         "tx": "https://etherscan.io/tx/{tx_hash}",
         "address": "https://etherscan.io/address/{address}",
@@ -234,13 +244,17 @@ EXPLORER_URL = {
         "address": "https://gnosisscan.io/address/{address}",
     },
     Chain.MODE: {
-        "tx": "https://modescan.io/tx/{tx_hash}",
-        "address": "https://modescan.io/address/{address}",
+        "tx": "https://explorer.mode.network/tx/{tx_hash}",
+        "address": "https://explorer.mode.network/address/{address}",
     },
     Chain.OPTIMISM: {
         "tx": "https://optimistic.etherscan.io/tx/{tx_hash}",
         "address": "https://optimistic.etherscan.io/address/{address}",
     },
+    Chain.POLYGON: {
+        "tx": "https://polygonscan.com/tx/{tx_hash}",
+        "address": "https://polygonscan.com/address/{address}",
+    },
 }
 
 

operate/operate_types.py

@@ -154,6 +154,8 @@ class ContractAddresses(TypedDict):
     service_registry_token_utility: str
     gnosis_safe_proxy_factory: str
     gnosis_safe_same_address_multisig: str
+    safe_multisig_with_recovery_module: str
+    recovery_module: str
     multisend: str
 
 

operate/services/manage.py

@@ -23,6 +23,7 @@ import asyncio
 import json
 import logging
 import os
+import tempfile
 import traceback
 import typing as t
 from collections import Counter, defaultdict
@@ -33,10 +34,11 @@ from pathlib import Path
 
 import requests
 from aea.helpers.base import IPFSHash
-from aea_ledger_ethereum import LedgerApi
+from aea_ledger_ethereum import EthereumCrypto, LedgerApi
 from autonomy.chain.base import registry_contracts
 from autonomy.chain.config import CHAIN_PROFILES, ChainType
 from autonomy.chain.metadata import IPFS_URI_PREFIX
+from web3 import Web3
 
 from operate.constants import IPFS_ADDRESS, ZERO_ADDRESS
 from operate.data import DATA_DIR
@@ -624,6 +626,8 @@ class ServiceManager:
         # TODO fix this
         os.environ["CUSTOM_CHAIN_RPC"] = ledger_config.rpc
 
+        self._enable_recovery_module(service_config_id=service_config_id, chain=chain)
+
         current_agent_id = None
         on_chain_state = OnChainState.NON_EXISTENT
         if chain_data.token > -1:
@@ -829,6 +833,11 @@ class ServiceManager:
                 self._get_on_chain_state(service=service, chain=chain)
                 == OnChainState.PRE_REGISTRATION
             ):
+                self.logger.info("Execute recovery module operations")
+                self._execute_recovery_module_flow_from_safe(
+                    service_config_id=service_config_id, chain=chain
+                )
+
                 self.logger.info("Updating service")
                 receipt = (
                     sftxb.new_tx()
@@ -1047,6 +1056,7 @@ class ServiceManager:
                 )
             ).settle()
 
+        # Deploy service
         if (
             self._get_on_chain_state(service=service, chain=chain)
             == OnChainState.FINISHED_REGISTRATION
@@ -1055,15 +1065,27 @@ class ServiceManager:
 
             reuse_multisig = True
             info = sftxb.info(token_id=chain_data.token)
-            if info["multisig"] == ZERO_ADDRESS:
+            service_safe_address = info["multisig"]
+            if service_safe_address == ZERO_ADDRESS:
                 reuse_multisig = False
 
             self.logger.info(f"{reuse_multisig=}")
 
+            is_recovery_module_enabled = (
+                registry_contracts.gnosis_safe.is_module_enabled(
+                    ledger_api=sftxb.ledger_api,
+                    contract_address=service_safe_address,
+                    module_address=CONTRACTS[Chain(chain)]["recovery_module"],
+                ).get("enabled")
+            )
+
+            self.logger.info(f"{is_recovery_module_enabled=}")
+
             messages = sftxb.get_deploy_data_from_safe(
                 service_id=chain_data.token,
                 reuse_multisig=reuse_multisig,
                 master_safe=safe,
+                use_recovery_module=is_recovery_module_enabled,
             )
             tx = sftxb.new_tx()
             for message in messages:
@@ -1198,6 +1220,9 @@ class ServiceManager:
         wallet = self.wallet_manager.load(ledger_config.chain.ledger_type)
         safe = wallet.safes[Chain(chain)]  # type: ignore
 
+        if withdrawal_address:
+            withdrawal_address = Web3.to_checksum_address(withdrawal_address)
+
         # TODO fixme
         os.environ["CUSTOM_CHAIN_RPC"] = ledger_config.rpc
 
@@ -1289,6 +1314,9 @@ class ServiceManager:
                     },
                 )
 
+            self._enable_recovery_module(
+                service_config_id=service_config_id, chain=chain
+            )
             self.logger.info("Swapping Safe owners")
             sftxb.swap(  # noqa: E800
                 service_id=chain_data.token,  # noqa: E800
@@ -1318,6 +1346,156 @@ class ServiceManager:
             )
             self.logger.info(f"{service.name} signer drained")
 
+    def _execute_recovery_module_flow_from_safe(  # pylint: disable=too-many-locals
+        self,
+        service_config_id: str,
+        chain: str,
+    ) -> None:
+        """Execute recovery module operations from Safe"""
+        self.logger.info(f"_execute_recovery_module_operations_from_safe {chain=}")
+        service = self.load(service_config_id=service_config_id)
+        chain_config = service.chain_configs[chain]
+        chain_data = chain_config.chain_data
+        ledger_config = chain_config.ledger_config
+        wallet = self.wallet_manager.load(ledger_config.chain.ledger_type)
+        sftxb = self.get_eth_safe_tx_builder(ledger_config=ledger_config)
+        safe = wallet.safes[Chain(chain)]
+
+        if chain_data.token == NON_EXISTENT_TOKEN:
+            self.logger.info("Service is not minted.")
+            return
+
+        info = sftxb.info(token_id=chain_data.token)
+        service_safe_address = info["multisig"]
+        on_chain_state = OnChainState(info["service_state"])
+
+        if service_safe_address == ZERO_ADDRESS:
+            self.logger.info("Service Safe is not deployed.")
+            return
+
+        recovery_module_address = CONTRACTS[Chain(chain)]["recovery_module"]
+        is_recovery_module_enabled = registry_contracts.gnosis_safe.is_module_enabled(
+            ledger_api=sftxb.ledger_api,
+            contract_address=service_safe_address,
+            module_address=recovery_module_address,
+        ).get("enabled")
+
+        service_safe_owners = sftxb.get_service_safe_owners(service_id=chain_data.token)
+        master_safe_is_service_safe_owner = service_safe_owners == [safe]
+
+        self.logger.info(f"{is_recovery_module_enabled=}")
+        self.logger.info(f"{master_safe_is_service_safe_owner=}")
+
+        if not is_recovery_module_enabled and not master_safe_is_service_safe_owner:
+            self.logger.info(
+                "Recovery module is not enabled and Master Safe is not service Safe owner. Skipping recovery operations."
+            )
+            return
+
+        if not is_recovery_module_enabled:
+            self._enable_recovery_module(
+                service_config_id=service_config_id, chain=chain
+            )
+
+        if (
+            not master_safe_is_service_safe_owner
+            and on_chain_state == OnChainState.PRE_REGISTRATION
+        ):
+            self.logger.info("Recovering service Safe access through recovery module.")
+            sftxb.new_tx().add(
+                sftxb.get_recover_access_data(
+                    service_id=chain_data.token,
+                )
+            ).settle()
+            self.logger.info("Recovering service Safe done.")
+
+    def _enable_recovery_module(  # pylint: disable=too-many-locals
+        self,
+        service_config_id: str,
+        chain: str,
+    ) -> None:
+        """Enable recovery module"""
+        self.logger.info(f"_enable_recovery_module {chain=}")
+        service = self.load(service_config_id=service_config_id)
+        chain_config = service.chain_configs[chain]
+        chain_data = chain_config.chain_data
+        ledger_config = chain_config.ledger_config
+        wallet = self.wallet_manager.load(ledger_config.chain.ledger_type)
+        sftxb = self.get_eth_safe_tx_builder(ledger_config=ledger_config)
+        safe = wallet.safes[Chain(chain)]
+
+        if chain_data.token == NON_EXISTENT_TOKEN:
+            self.logger.info("Service is not minted.")
+            return
+
+        info = sftxb.info(token_id=chain_data.token)
+        service_safe_address = info["multisig"]
+
+        if service_safe_address == ZERO_ADDRESS:
+            self.logger.info("Service Safe is not deployed.")
+            return
+
+        recovery_module_address = CONTRACTS[Chain(chain)]["recovery_module"]
+        is_recovery_module_enabled = registry_contracts.gnosis_safe.is_module_enabled(
+            ledger_api=sftxb.ledger_api,
+            contract_address=service_safe_address,
+            module_address=recovery_module_address,
+        ).get("enabled")
+
+        if is_recovery_module_enabled:
+            self.logger.info("Recovery module is already enabled in service Safe.")
+            return
+
+        self.logger.info("Recovery module is not enabled.")
+
+        # NOTE Recovery from agent only works for single-agent services
+        agent_address = service.agent_addresses[0]
+        service_safe_owners = sftxb.get_service_safe_owners(service_id=chain_data.token)
+        agent_is_service_safe_owner = service_safe_owners == [agent_address]
+        master_safe_is_service_safe_owner = service_safe_owners == [safe]
+
+        if agent_is_service_safe_owner:
+            self.logger.info("(Agent) Enabling recovery module in service Safe.")
+            try:
+                with tempfile.NamedTemporaryFile(mode="w+", delete=True) as tmp_file:
+                    private_key = self.keys_manager.get(key=agent_address).private_key
+                    tmp_file.write(private_key)
+                    tmp_file.flush()
+                    crypto = EthereumCrypto(private_key_path=tmp_file.name)
+                    EthSafeTxBuilder._new_tx(  # pylint: disable=protected-access
+                        ledger_api=sftxb.ledger_api,
+                        crypto=crypto,
+                        chain_type=ChainType(chain),
+                        safe=service_safe_address,
+                    ).add(
+                        sftxb.get_enable_module_data(
+                            module_address=recovery_module_address,
+                            safe_address=service_safe_address,
+                        )
+                    ).settle()
+                    tmp_file.seek(0)
+                    tmp_file.write("\0" * len(private_key))
+                    tmp_file.flush()
+
+                self.logger.info(
+                    "(Agent) Recovery module enabled successfully in service Safe."
+                )
+            except Exception as e:  # pylint: disable=broad-except
+                self.logger.error(
+                    f"Failed to enable recovery module in service Safe. Exception {e}: {traceback.format_exc()}"
+                )
+        elif master_safe_is_service_safe_owner:
+            # TODO Enable recovery module when Safe owner = master Safe.
+            # This should be similar to the above code, but
+            # requires implement a transaction where the owner is another Safe.
+            self.logger.info(
+                "(Service owner) Enabling recovery module in service Safe. [Not implemented]"
+            )
+        else:
+            self.logger.error(
+                f"Cannot enable recovery module. Safe {service_safe_address} has inconsistent owners."
+            )
+
     def _get_current_staking_program(
         self, service: Service, chain: str
     ) -> t.Optional[str]:
@@ -2009,6 +2187,7 @@ class ServiceManager:
         wallet = self.wallet_manager.load(ledger_config.chain.ledger_type)
         ledger_api = wallet.ledger_api(chain=ledger_config.chain, rpc=ledger_config.rpc)
         ethereum_crypto = KeysManager().get_crypto_instance(service.agent_addresses[0])
+        withdrawal_address = Web3.to_checksum_address(withdrawal_address)
 
         # drain ERC20 tokens from service safe
         for token_name, token_address in (