diff --git a/.changeset/sharp-comics-sing.md b/.changeset/sharp-comics-sing.md
new file mode 100644
index 00000000..8670c1b2
--- /dev/null
+++ b/.changeset/sharp-comics-sing.md
@@ -0,0 +1,5 @@
+---
+"permissionless": patch
+---
+
+Dynamically loads ox, thank to @Bvvvp009
diff --git a/bun.lock b/bun.lock
index 7409b933..cdb9c8f3 100644
--- a/bun.lock
+++ b/bun.lock
@@ -18,6 +18,7 @@
         "@vitejs/plugin-react": "^4.2.1",
         "@vitest/coverage-v8": "^2.1.5",
         "@wagmi/cli": "latest",
+        "@wagmi/core": "2.17.1",
         "async-mutex": "^0.5.0",
         "buffer": "^6.0.3",
         "bun-types": "^1.0.7",
diff --git a/package.json b/package.json
index 8cfd8dd5..1c02dca9 100644
--- a/package.json
+++ b/package.json
@@ -42,7 +42,8 @@
         "viem": "2.28.1",
         "vite": "^5.4.10",
         "vitest": "^2.1.5",
-        "wagmi": "^2.15.1"
+        "wagmi": "^2.15.1",
+        "@wagmi/core": "2.17.1"
     },
     "description": "",
     "keywords": [],
@@ -52,13 +53,13 @@
         "build:permissionless": "bun run clean:permissionless && bun run build:permissionless:cjs && bun run build:permissionless:esm && bun run build:permissionless:types",
         "build:mock-paymaster": "bun run clean:mock-paymaster && bun run build:mock-paymaster:cjs && bun run build:mock-paymaster:esm && bun run build:mock-paymaster:types",
         "build:wagmi": "bun run clean:wagmi && bun run build:wagmi:esm && bun run build:wagmi:types",
-        "build:permissionless:cjs": "tsc --project ./tsconfig/tsconfig.permissionless.cjs.json && tsc-alias -p ./tsconfig/tsconfig.permissionless.cjs.json && printf '{\"type\":\"commonjs\"}' > ./packages/permissionless/_cjs/package.json",
-        "build:permissionless:esm": "tsc --project ./tsconfig/tsconfig.permissionless.esm.json && tsc-alias -p ./tsconfig/tsconfig.permissionless.esm.json && printf '{\"type\": \"module\",\"sideEffects\":false}' > ./packages/permissionless/_esm/package.json",
+        "build:permissionless:cjs": "tsc --project ./tsconfig/tsconfig.permissionless.cjs.json && tsc-alias -p ./tsconfig/tsconfig.permissionless.cjs.json && echo {\"type\":\"commonjs\"} > ./packages/permissionless/_cjs/package.json",
+        "build:permissionless:esm": "tsc --project ./tsconfig/tsconfig.permissionless.esm.json && tsc-alias -p ./tsconfig/tsconfig.permissionless.esm.json && echo {\"type\": \"module\",\"sideEffects\":false} > ./packages/permissionless/_esm/package.json",
         "build:permissionless:types": "tsc --project ./tsconfig/tsconfig.permissionless.types.json && tsc-alias -p ./tsconfig/tsconfig.permissionless.types.json",
         "build:wagmi:types": "tsc --project ./tsconfig/tsconfig.wagmi.types.json && tsc-alias -p ./tsconfig/tsconfig.wagmi.types.json",
-        "build:wagmi:esm": "tsc --project ./tsconfig/tsconfig.wagmi.esm.json && tsc-alias -p ./tsconfig/tsconfig.wagmi.esm.json && printf '{\"type\": \"module\",\"sideEffects\":false}' > ./packages/wagmi/_esm/package.json",
-        "build:mock-paymaster:cjs": "tsc --project ./tsconfig/tsconfig.mock-paymaster.cjs.json && tsc-alias -p ./tsconfig/tsconfig.mock-paymaster.cjs.json && printf '{\"type\":\"commonjs\"}' > ./packages/mock-paymaster/_cjs/package.json",
-        "build:mock-paymaster:esm": "tsc --project ./tsconfig/tsconfig.mock-paymaster.esm.json && tsc-alias -p ./tsconfig/tsconfig.mock-paymaster.esm.json && printf '{\"type\": \"module\",\"sideEffects\":false}' > ./packages/mock-paymaster/_esm/package.json",
+        "build:wagmi:esm": "tsc --project ./tsconfig/tsconfig.wagmi.esm.json && tsc-alias -p ./tsconfig/tsconfig.wagmi.esm.json && echo {\"type\": \"module\",\"sideEffects\":false} > ./packages/wagmi/_esm/package.json",
+        "build:mock-paymaster:cjs": "tsc --project ./tsconfig/tsconfig.mock-paymaster.cjs.json && tsc-alias -p ./tsconfig/tsconfig.mock-paymaster.cjs.json && echo {\"type\":\"commonjs\"} > ./packages/mock-paymaster/_cjs/package.json",
+        "build:mock-paymaster:esm": "tsc --project ./tsconfig/tsconfig.mock-paymaster.esm.json && tsc-alias -p ./tsconfig/tsconfig.mock-paymaster.esm.json && echo {\"type\": \"module\",\"sideEffects\":false} > ./packages/mock-paymaster/_esm/package.json",
         "build:mock-paymaster:types": "tsc --project ./tsconfig/tsconfig.mock-paymaster.types.json && tsc-alias -p ./tsconfig/tsconfig.mock-paymaster.types.json",
         "clean": "bun run clean:permissionless && bun run clean:wagmi && bun run clean:mock-paymaster",
         "clean:permissionless": "rimraf ./packages/permissionless/_esm ./packages/permissionless/_cjs ./packages/permissionless/_types",
diff --git a/packages/permissionless-test/mock-aa-infra/alto/instance.ts b/packages/permissionless-test/mock-aa-infra/alto/instance.ts
index 25838719..602817f7 100644
--- a/packages/permissionless-test/mock-aa-infra/alto/instance.ts
+++ b/packages/permissionless-test/mock-aa-infra/alto/instance.ts
@@ -1,6 +1,7 @@
 import { resolve } from "node:path"
 import { defineInstance, toArgs } from "prool"
 import { execa } from "prool/processes"
+import type { Hex } from "viem"
 
 export type AltoParameters = {
     /**
@@ -18,7 +19,7 @@ export type AltoParameters = {
     /**
      * Address of the `BundleBulker` contract.
      */
-    bundleBulkerAddress?: `0x${string}` | undefined
+    bundleBulkerAddress?: Hex | undefined
     /**
      * Set if the bundler bundle user operations automatically or only when calling `debug_bundler_sendBundleNow`.
      * @default "auto"
@@ -53,15 +54,15 @@ export type AltoParameters = {
     /**
      * EntryPoint contract addresses.
      */
-    entrypoints: readonly `0x${string}`[]
+    entrypoints: readonly Hex[]
     /**
      * Address of the EntryPoint simulations contract.
      */
-    entrypointSimulationContract?: `0x${string}` | undefined
+    entrypointSimulationContract?: Hex | undefined
     /**
      * Private keys of the executor accounts.
      */
-    executorPrivateKeys?: readonly `0x${string}`[]
+    executorPrivateKeys?: readonly Hex[]
     /**
      * Interval to refill the signer balance (seconds).
      * @default 1200
@@ -183,7 +184,7 @@ export type AltoParameters = {
     /**
      * Address of the `PerOpInflator` contract.
      */
-    perOpInflatorAddress?: `0x${string}` | undefined
+    perOpInflatorAddress?: Hex | undefined
     /**
      * Polling interval for querying for new blocks (ms).
      * @default 1000
diff --git a/packages/permissionless/README.md b/packages/permissionless/README.md
index 1c1ceeca..d1bbd3a0 100644
--- a/packages/permissionless/README.md
+++ b/packages/permissionless/README.md
@@ -50,6 +50,24 @@ bun install viem permissionless
 yarn add viem permissionless
 ```
 
+### Optional Dependencies
+
+For WebAuthn functionality (passkeys), you'll also need to install the `ox` package:
+
+```bash
+npm install ox
+```
+
+```bash
+bun install ox
+```
+
+```bash
+yarn add ox
+```
+
+**Note**: The `ox` package is optional and only required if you plan to use WebAuthn/passkey features. The library will throw a helpful error message if you try to use WebAuthn functionality without installing `ox`.
+
 ## Quick Start
 
 ```typescript
diff --git a/packages/permissionless/accounts/etherspot/utils/getInitMSAData.ts b/packages/permissionless/accounts/etherspot/utils/getInitMSAData.ts
index 8ad162d1..5b53f885 100644
--- a/packages/permissionless/accounts/etherspot/utils/getInitMSAData.ts
+++ b/packages/permissionless/accounts/etherspot/utils/getInitMSAData.ts
@@ -1,4 +1,4 @@
-import { type Address, encodeFunctionData, zeroAddress } from "viem"
+import { type Address, type Hex, encodeFunctionData, zeroAddress } from "viem"
 import {
     EtherspotBootstrapAbi,
     EtherspotOnInstallAbi
@@ -29,7 +29,7 @@ const _makeBootstrapConfig = (module: string, data: string) => {
     config.data = encodeFunctionData({
         abi: EtherspotOnInstallAbi,
         functionName: "onInstall",
-        args: [data as `0x${string}`]
+        args: [data as Hex]
     })
 
     return config
@@ -38,13 +38,13 @@ const _makeBootstrapConfig = (module: string, data: string) => {
 const makeBootstrapConfig = (module: string, data: string) => {
     const config: {
         module: string
-        data: `0x${string}`
+        data: Hex
     }[] = []
 
     const data1 = encodeFunctionData({
         abi: EtherspotOnInstallAbi,
         functionName: "onInstall",
-        args: [data as `0x${string}`]
+        args: [data as Hex]
     })
 
     const newConfig = {
diff --git a/packages/permissionless/accounts/kernel/toKernelSmartAccount.ts b/packages/permissionless/accounts/kernel/toKernelSmartAccount.ts
index 692113eb..3df70f2c 100644
--- a/packages/permissionless/accounts/kernel/toKernelSmartAccount.ts
+++ b/packages/permissionless/accounts/kernel/toKernelSmartAccount.ts
@@ -1,10 +1,10 @@
-import { Base64, Hex, PublicKey } from "ox"
 import {
     type Account,
     type Address,
     type Assign,
     type Chain,
     type Client,
+    type Hex,
     type JsonRpcAccount,
     type LocalAccount,
     type OneOf,
@@ -38,6 +38,7 @@ import { getSenderAddress } from "../../actions/public/getSenderAddress.js"
 import { encode7579Calls } from "../../utils/encode7579Calls.js"
 import { encodeInstallModule } from "../../utils/encodeInstallModule.js"
 import { encodeUninstallModule } from "../../utils/encodeUninstallModule.js"
+import { getOxExports } from "../../utils/ox.js"
 import { type EthereumProvider, toOwner } from "../../utils/toOwner.js"
 import { KernelInitAbi } from "./abi/KernelAccountAbi.js"
 import {
@@ -277,7 +278,7 @@ const getInitializationData = <entryPointVersion extends EntryPointVersion>({
     entryPoint: {
         version: entryPointVersion
     }
-    validatorData: Hex.Hex
+    validatorData: Hex
     validatorAddress: Address
 }) => {
     if (entryPointVersion === "0.6") {
@@ -320,6 +321,7 @@ const getValidatorData = async (owner: WebAuthnAccount | LocalAccount) => {
     }
 
     if (isWebAuthnAccount(owner)) {
+        const { PublicKey, Hex, Base64 } = await getOxExports()
         const parsedPublicKey = PublicKey.fromHex(owner.publicKey)
         const authenticatorIdHash = keccak256(
             Hex.fromBytes(Base64.toBytes(owner.id))
@@ -374,13 +376,13 @@ const getAccountInitCode = async <entryPointVersion extends EntryPointVersion>({
 }: {
     kernelVersion: KernelVersion<entryPointVersion>
     entryPointVersion: entryPointVersion
-    validatorData: Hex.Hex
+    validatorData: Hex
     index: bigint
     factoryAddress: Address
     accountLogicAddress: Address
     validatorAddress: Address
     useMetaFactory: boolean
-}): Promise<Hex.Hex> => {
+}): Promise<Hex> => {
     // Build the account initialization data
     const initializationData = getInitializationData({
         entryPoint: { version: entryPointVersion },
@@ -637,7 +639,7 @@ export async function toKernelSmartAccount<
                 entryPoint.version === "0.6" || _useMetaFactory === false
                     ? factoryAddress
                     : metaFactoryAddress,
-            factoryData: await generateInitCode(_useMetaFactory)
+            factoryData: (await generateInitCode(_useMetaFactory)) as Hex
         }
     }
 
diff --git a/packages/permissionless/accounts/kernel/utils/signMessage.ts b/packages/permissionless/accounts/kernel/utils/signMessage.ts
index 700681a4..54c21ed7 100644
--- a/packages/permissionless/accounts/kernel/utils/signMessage.ts
+++ b/packages/permissionless/accounts/kernel/utils/signMessage.ts
@@ -1,4 +1,3 @@
-import { Signature } from "ox"
 import {
     type Hash,
     type LocalAccount,
@@ -8,6 +7,8 @@ import {
     hashMessage
 } from "viem"
 import type { WebAuthnAccount } from "viem/account-abstraction"
+import { signMessage as _signMessage } from "viem/actions"
+import { getOxExports } from "../../../utils/ox.js"
 import { isWebAuthnAccount } from "./isWebAuthnAccount.js"
 import {
     type WrapMessageHashParams,
@@ -52,6 +53,7 @@ export async function signMessage({
         const { signature: signatureData, webauthn } = await owner.sign({
             hash: messageContent as Hash
         })
+        const { Signature } = await getOxExports()
         const signature = Signature.fromHex(signatureData)
 
         // encode signature
diff --git a/packages/permissionless/accounts/safe/signUserOperation.ts b/packages/permissionless/accounts/safe/signUserOperation.ts
index e10c4f0f..5f40b8c9 100644
--- a/packages/permissionless/accounts/safe/signUserOperation.ts
+++ b/packages/permissionless/accounts/safe/signUserOperation.ts
@@ -1,4 +1,3 @@
-import { Signature } from "ox"
 import {
     type Account,
     type Address,
@@ -17,6 +16,7 @@ import {
 } from "viem"
 import type { UserOperation, WebAuthnAccount } from "viem/account-abstraction"
 import { toOwner } from "../../utils/index.js"
+import { getOxExports } from "../../utils/ox.js"
 import type { EthereumProvider } from "../../utils/toOwner.js"
 import {
     EIP712_SAFE_OPERATION_TYPE_V06,
@@ -84,6 +84,7 @@ export const getWebAuthnSignature = async ({
         hash
     })
 
+    const { Signature } = await getOxExports()
     const signature = Signature.fromHex(signatureData)
 
     const match = webauthn.clientDataJSON.match(
diff --git a/packages/permissionless/accounts/safe/toSafeSmartAccount.ts b/packages/permissionless/accounts/safe/toSafeSmartAccount.ts
index aceb70b1..b0b9e903 100644
--- a/packages/permissionless/accounts/safe/toSafeSmartAccount.ts
+++ b/packages/permissionless/accounts/safe/toSafeSmartAccount.ts
@@ -1,4 +1,3 @@
-import { PublicKey } from "ox"
 import {
     type Account,
     type Address,
@@ -48,6 +47,7 @@ import { getAccountNonce } from "../../actions/public/getAccountNonce.js"
 import { decode7579Calls } from "../../utils/decode7579Calls.js"
 import { encode7579Calls } from "../../utils/encode7579Calls.js"
 import { isSmartAccountDeployed } from "../../utils/isSmartAccountDeployed.js"
+import { getOxExports } from "../../utils/ox.js"
 import { type EthereumProvider, toOwner } from "../../utils/toOwner.js"
 import {
     concatSignatures,
@@ -594,8 +594,8 @@ const encodeMultiSend = (
         value: bigint
         operation: 0 | 1
     }[]
-): `0x${string}` => {
-    const data: `0x${string}` = `0x${txs
+): Hex => {
+    const data: Hex = `0x${txs
         .map((tx) => encodeInternalTransaction(tx))
         .join("")}`
 
@@ -874,6 +874,7 @@ const getInitializerCode = async ({
         safeWebAuthnSharedSignerAddress &&
         safeP256VerifierAddress
     ) {
+        const { PublicKey } = await getOxExports()
         const parsedPublicKey = PublicKey.fromHex(webAuthnOwner.publicKey)
 
         multiCalls.push({
diff --git a/packages/permissionless/accounts/thirdweb/utils/decodeCallData.ts b/packages/permissionless/accounts/thirdweb/utils/decodeCallData.ts
index 4ecb2b0d..792a9eff 100644
--- a/packages/permissionless/accounts/thirdweb/utils/decodeCallData.ts
+++ b/packages/permissionless/accounts/thirdweb/utils/decodeCallData.ts
@@ -1,6 +1,6 @@
 import { type Address, type Hex, decodeFunctionData } from "viem"
 
-export const decodeCallData = async (callData: `0x${string}`) => {
+export const decodeCallData = async (callData: Hex) => {
     try {
         const decodedBatch = decodeFunctionData({
             abi: [
diff --git a/packages/permissionless/accounts/trust/utils/decodeCallData.ts b/packages/permissionless/accounts/trust/utils/decodeCallData.ts
index 4ecb2b0d..792a9eff 100644
--- a/packages/permissionless/accounts/trust/utils/decodeCallData.ts
+++ b/packages/permissionless/accounts/trust/utils/decodeCallData.ts
@@ -1,6 +1,6 @@
 import { type Address, type Hex, decodeFunctionData } from "viem"
 
-export const decodeCallData = async (callData: `0x${string}`) => {
+export const decodeCallData = async (callData: Hex) => {
     try {
         const decodedBatch = decodeFunctionData({
             abi: [
diff --git a/packages/permissionless/accounts/trust/utils/getFactoryData.ts b/packages/permissionless/accounts/trust/utils/getFactoryData.ts
index 5b1e0b2f..16777f0e 100644
--- a/packages/permissionless/accounts/trust/utils/getFactoryData.ts
+++ b/packages/permissionless/accounts/trust/utils/getFactoryData.ts
@@ -1,4 +1,4 @@
-import type { Address } from "viem"
+import type { Address, Hex } from "viem"
 import { encodeFunctionData } from "viem"
 
 /**
@@ -9,7 +9,7 @@ export const getFactoryData = async ({
     index,
     secp256k1VerificationFacetAddress
 }: {
-    bytes: `0x${string}`
+    bytes: Hex
     index: bigint
     secp256k1VerificationFacetAddress: Address
 }) => {
diff --git a/packages/permissionless/actions/passkeyServer/startAuthentication.ts b/packages/permissionless/actions/passkeyServer/startAuthentication.ts
index ad9acfb8..c2f0ebc7 100644
--- a/packages/permissionless/actions/passkeyServer/startAuthentication.ts
+++ b/packages/permissionless/actions/passkeyServer/startAuthentication.ts
@@ -1,5 +1,3 @@
-import { Base64 } from "ox"
-import type { WebAuthnP256 } from "ox"
 import {
     type Account,
     type Chain,
@@ -8,8 +6,12 @@ import {
     toHex
 } from "viem"
 import type { PasskeyServerRpcSchema } from "../../types/passkeyServer.js"
+import { getOxExports } from "../../utils/ox.js"
 
-export type StartAuthenticationReturnType = WebAuthnP256.sign.Options & {
+export type StartAuthenticationReturnType = {
+    challenge: string
+    rpId: string
+    userVerification?: string
     uuid: string
 }
 
@@ -27,7 +29,9 @@ export const startAuthentication = async (
     })
 
     return {
-        challenge: toHex(Base64.toBytes(response.challenge)),
+        challenge: toHex(
+            (await getOxExports()).Base64.toBytes(response.challenge)
+        ),
         rpId: response.rpId,
         userVerification: response.userVerification,
         uuid: response.uuid
diff --git a/packages/permissionless/actions/passkeyServer/startRegistration.ts b/packages/permissionless/actions/passkeyServer/startRegistration.ts
index d3535d11..c9513cb2 100644
--- a/packages/permissionless/actions/passkeyServer/startRegistration.ts
+++ b/packages/permissionless/actions/passkeyServer/startRegistration.ts
@@ -1,7 +1,7 @@
-import { Base64 } from "ox"
 import type { Account, Chain, Client, Transport } from "viem"
 import type { CreateWebAuthnCredentialParameters } from "viem/account-abstraction"
 import type { PasskeyServerRpcSchema } from "../../types/passkeyServer.js"
+import { getOxExports } from "../../utils/ox.js"
 
 const validateAttestation = (attestation: unknown): boolean => {
     return (
@@ -104,6 +104,7 @@ export const startRegistration = async (
         throw new Error("Invalid response format from passkey server")
     }
 
+    const { Base64 } = await getOxExports()
     const credentialOptions: StartRegistrationReturnType = {
         attestation: response.attestation,
         authenticatorSelection: response.authenticatorSelection,
diff --git a/packages/permissionless/actions/passkeyServer/verifyAuthentication.ts b/packages/permissionless/actions/passkeyServer/verifyAuthentication.ts
index fe4ffe05..b8f7f3f1 100644
--- a/packages/permissionless/actions/passkeyServer/verifyAuthentication.ts
+++ b/packages/permissionless/actions/passkeyServer/verifyAuthentication.ts
@@ -1,9 +1,22 @@
-import { Base64, type WebAuthnP256 } from "ox"
 // import { Base64 } from "ox"
 import type { Account, Chain, Client, Hex, Transport } from "viem"
 import type { PasskeyServerRpcSchema } from "../../types/passkeyServer.js"
+import { getOxExports } from "../../utils/ox.js"
 
-export type VerifyAuthenticationParameters = WebAuthnP256.sign.ReturnType & {
+export type VerifyAuthenticationParameters = {
+    raw: {
+        id: string
+        rawId: ArrayBuffer
+        authenticatorAttachment: string
+        response: {
+            authenticatorData?: ArrayBuffer
+            signature?: ArrayBuffer
+            userHandle?: ArrayBuffer
+            clientDataJSON: ArrayBuffer
+        }
+        getClientExtensionResults: () => Record<string, unknown>
+        type: string
+    }
     uuid: string
 }
 
@@ -24,6 +37,7 @@ export const verifyAuthentication = async (
     args: VerifyAuthenticationParameters
 ): Promise<VerifyAuthenticationReturnType> => {
     const { raw, uuid } = args
+    const { Base64 } = await getOxExports()
 
     let responseAuthenticatorData: string
 
diff --git a/packages/permissionless/actions/passkeyServer/verifyRegistration.ts b/packages/permissionless/actions/passkeyServer/verifyRegistration.ts
index e0f6751a..c60b2629 100644
--- a/packages/permissionless/actions/passkeyServer/verifyRegistration.ts
+++ b/packages/permissionless/actions/passkeyServer/verifyRegistration.ts
@@ -1,7 +1,7 @@
-import { Base64 } from "ox"
 import type { Account, Chain, Client, Hex, Transport } from "viem"
 import type { CreateWebAuthnCredentialReturnType } from "viem/account-abstraction"
 import type { PasskeyServerRpcSchema } from "../../types/passkeyServer.js"
+import { getOxExports } from "../../utils/ox.js"
 
 export type VerifyRegistrationParameters = {
     credential: CreateWebAuthnCredentialReturnType
@@ -25,6 +25,7 @@ export const verifyRegistration = async (
     args: VerifyRegistrationParameters
 ): Promise<VerifyRegistrationReturnType> => {
     const { credential, context } = args
+    const { Base64 } = await getOxExports()
 
     const response = credential.raw
         .response as unknown as AuthenticatorAttestationResponse
diff --git a/packages/permissionless/actions/smartAccount/getCallsStatus.ts b/packages/permissionless/actions/smartAccount/getCallsStatus.ts
index c497ceaa..d7955d3a 100644
--- a/packages/permissionless/actions/smartAccount/getCallsStatus.ts
+++ b/packages/permissionless/actions/smartAccount/getCallsStatus.ts
@@ -3,6 +3,7 @@ import type {
     Client,
     GetCallsStatusParameters,
     GetCallsStatusReturnType,
+    Hex,
     Transport
 } from "viem"
 import {
@@ -38,7 +39,7 @@ export async function getCallsStatus<
     client: Client<Transport, chain, account>,
     args: GetCallsStatusParameters
 ): Promise<GetCallsStatusReturnType> {
-    const userOperationHash = args.id as `0x${string}`
+    const userOperationHash = args.id as Hex
 
     const chainId =
         client.chain?.id ??
@@ -51,7 +52,7 @@ export async function getCallsStatus<
             getUserOperationReceipt,
             "getUserOperationReceipt"
         )({
-            hash: args.id as `0x${string}`
+            hash: args.id as Hex
         })
 
         const userOpStatus = receipt.success
diff --git a/packages/permissionless/utils/index.ts b/packages/permissionless/utils/index.ts
index 1ca25b52..696229ac 100644
--- a/packages/permissionless/utils/index.ts
+++ b/packages/permissionless/utils/index.ts
@@ -38,3 +38,6 @@ export {
     type Erc20BalanceOverrideParameters,
     erc20BalanceOverride
 } from "./erc20BalanceOverride.js"
+
+// Export ox utilities
+export { getOxExports, hasOxModule } from "./ox.js"
diff --git a/packages/permissionless/utils/ox.ts b/packages/permissionless/utils/ox.ts
new file mode 100644
index 00000000..fd56d39d
--- /dev/null
+++ b/packages/permissionless/utils/ox.ts
@@ -0,0 +1,48 @@
+/**
+ * Utility module for handling optional ox imports
+ * This allows the library to work without ox being installed
+ */
+
+let oxModule: any = null
+
+// Try to load ox module
+try {
+    // Use dynamic import for ESM compatibility
+    const importPromise = import("ox")
+    // Note: This will be handled in the functions that need ox
+    oxModule = { importPromise }
+} catch (error) {
+    // ox is not installed, this is fine for optional dependency
+}
+
+export async function getOxModule() {
+    if (!oxModule) {
+        throw new Error(
+            "The 'ox' package is required for WebAuthn functionality. Please install it: npm install ox"
+        )
+    }
+
+    try {
+        return await oxModule.importPromise
+    } catch (error) {
+        throw new Error(
+            "The 'ox' package is required for WebAuthn functionality. Please install it: npm install ox"
+        )
+    }
+}
+
+export function hasOxModule(): boolean {
+    return oxModule !== null
+}
+
+// Helper function to get ox exports
+export async function getOxExports() {
+    const ox = await getOxModule()
+    return {
+        Base64: ox.Base64,
+        Hex: ox.Hex,
+        PublicKey: ox.PublicKey,
+        Signature: ox.Signature,
+        WebAuthnP256: ox.WebAuthnP256
+    }
+}
diff --git a/packages/wagmi-demo/src/PasskeyServerDemo.tsx b/packages/wagmi-demo/src/PasskeyServerDemo.tsx
index 4ae6fc63..d54ae18e 100644
--- a/packages/wagmi-demo/src/PasskeyServerDemo.tsx
+++ b/packages/wagmi-demo/src/PasskeyServerDemo.tsx
@@ -1,4 +1,3 @@
-import { WebAuthnP256 } from "ox"
 import {
     type SmartAccountClient,
     createSmartAccountClient
@@ -9,6 +8,7 @@ import {
 } from "permissionless/accounts"
 import { createPasskeyServerClient } from "permissionless/clients/passkeyServer"
 import { createPimlicoClient } from "permissionless/clients/pimlico"
+import { getOxExports } from "permissionless/utils"
 import * as React from "react"
 import {
     http,
@@ -154,6 +154,7 @@ export function PasskeyServerDemo() {
     const loginCredential = async () => {
         const credentials = await passkeyServerClient.startAuthentication()
 
+        const { WebAuthnP256 } = await getOxExports()
         const response = await WebAuthnP256.sign(credentials)
 
         const verifiedCredential =
@@ -172,7 +173,7 @@ export function PasskeyServerDemo() {
         if (!smartAccountClient) return
 
         const formData = new FormData(event.currentTarget)
-        const to = formData.get("to") as `0x${string}`
+        const to = formData.get("to") as Hex
         const value = formData.get("value") as string
 
         const hash = await smartAccountClient.sendUserOperation({