Oops, Your EOA Has Code Now: How EIP-7702 Broke Ethereum's Old Security Assumptions
EIP-7702 changes security assumptions that have existed since Ethereum's earliest days. This talk studies the consequences for both existing smart contracts and users adopting 7702.
We'll analyze deployed mainnet contracts to identify patterns that rely on pre-7702 EOA behavior, quantify how widespread they are, and determine when these assumptions become exploitable. Through concrete examples, we'll demonstrate how delegated EOAs can interact with contracts in ways their developers never anticipated and examine emerging attacks that abuse 7702 delegation.
We'll also compare existing 7702 delegation implementations and the security properties and tradeoffs they introduce. Finally, we'll present approaches and tooling for detecting post-7702 vulnerabilities, identifying potentially malicious delegations, and helping developers and users choose and interact with delegation implementations safely.
Speakers: Louis Tsai
Track: Security
