Security notes on ERC4337 and smart wallets

Account abstraction

Account abstraction is an extensive topic, but at a very high level, the idea is to abstract the concept of an account into a smart contract (the smart wallet) that allows a lot more flexibility than an EOA (externally owned account) which most people use today while interacting with the blockchain. Among some of the benefits are:

• Improved security: implement social recovery in case access is lost. Authorization keys can be rotated without the need to move assets.

• Sponsored transactions: the user doesn't need to have ETH, third-party entities (called paymasters) can sponsor transaction fees.

• Alternate signing methods: a smart wallet can specify any signing protocol.

• Gas efficiency: multiple actions can be batched in a single transaction to improve gas costs.

Once decoupled from the limitations of an EOA, the flexibility of an account is just bounded by what can be programmed in a smart contract.

Continue reading this article in the yAudit blog …