when 7702 activates, the race will be on to proactively convert EOAs into trusted smart wallets before getting tricked into upgrading it to a drainer.

Pragmatism (Security) at OP Labs.
Prev: ConsenSys & Coinbase.

Attribs: Friendly, curious, introverted, mid-witted.
Chans: /eth-security /maurelian /stoicism




if you "upgrade" to a trusted smart wallet, that doesn't prevent you from "upgrading" to a drainer later on, does it?

No, but it should provide a bit more safety, especially if wallets help users move to using other keys without permission to upgrade the EOA itself.

wallets will have to use allowlists / blocklists to prevent users from setting the contract code to something malicious. that's going to be the pattern when 7702 ships.

yeah, it can be used to delegate to more purpose-specific contracts, so you could delegate to something that just does batch transactions, or paymaster sponsorship, etc. doesn't have to be just SCAs.

Nice. Really don't have much context around how wallets are planning for 7702, good to know.

Any other interesting details one might not anticipate?