Skip to content
Six mistakes in ERC-4337 smart accounts
blog.trailofbits.com | blog | #web3 | #vulnerability-research | #smart-contracts | #vulnerabilities | #audit | #trail-of-bits | #ethereum | #erc-4337 | #account-abstraction | #signature-validation | #erc-1271 | #erc-7702
Summary
Drawing on audits of dozens of ERC-4337 smart accounts, this post catalogs six recurring vulnerability patterns, including access control flaws, incomplete signature validation and ERC-1271 replay.
- Published
- Collected