๐จERC-4337 is moving to Last Call!
This is the final review period before the standard becomes Final and non-editable.
Review here: https://t.co/iIRSEwooZc
New AA talk from ETH Prague ๐
4337 core developer, Alex Forshtat, gave an overview of EIP-8141 and why it matters for the next phase of account abstraction.
Watch here:
https://t.co/7sDl0vcqAz
The vulnerability only applies to a small fraction of the UserOperations visible before execution (i.e. transactions sent to the ERC-4337 UserOperation mempool).
Itโs a griefing/censorship vector, not fund theft, and is fixed in v0.9.
Today, in coordination with @ethereumfndn, we're disclosing a high-severity DoS attack affecting the core of ERC4337 account abstraction. Users are strongly encouraged to migrate to v0.9 wallets where the issue is mitigated.
This previously unseen attack vector weaponizes various safety checks including reentrancy guards which are ubiquitous in modern DeFi infrastructure, to deny withdrawals and disrupt core functionality for AA users. From our research, a meaningful share of AA DeFi activity could be disrupted.
Huge thanks to the EF for handling the issue responsibly and granting us a $50k bounty, the maximum high-severity award. We've also reached out to major affected dApps in order to guard their AA users. We'd like to commend projects that took quick action and upheld their commitment both to their users and the whitehat community - an additional $59.5k was granted by affected dApps. Full disclosure of relevant DeFi products and their responses will be released soon.
Additional details including root cause analysis can be found in the EF disclosure below. TrustSec is determined to continue safeguarding the Ethereum ecosystem, even from the most surprising attack vectors.
ERC-4337 made accounts programmable. EIL extends that programmability across chains.
EIL is fundamentally an execution pattern for accounts. It extends account abstraction to multichain execution, allowing a single account to authorize and execute cross-chain transactions with one signature, while preserving Ethereumโs trust and security model.
EIL answers this narrow question: How can an account initiate and settle execution across chains without introducing trusted intermediaries?
If we donโt answer this question, we guarantee the answer lives somewhere else - outside the protocol.
The account abstraction roadmap is not complete until a single account can safely execute across the chains users already live on.
More here โฌ๏ธ
What is the EIL?
The EIL focuses on trustlessness. Wallet-centric, cross-chain orchestration where the user is always in control - without the intermediaries.
But what does this mean for markets today, and how could markets look with wider adoption of the EIL?
Read more: https://t.co/6IdKpWc3iK
EntryPoint v0.9 (released Nov 2025) included a fix based on a responsibly disclosed AA bug bounty report by security experts at TrustSec
Thanks to @trust__90 for the thorough analysis and close coordination throughout the disclosure process ๐ค
https://t.co/c0q8T7Eg4w
This is what ERC-4337 was designed for ๐
Bundlers are replaceable infrastructure and not wallet dependencies. Allowing per-network bundler selection enables real competition, experimentation, and censorship resistance in the AA mempool.
Great step forward by @ambire!
Calling all bundlers. From @ambire v5.34.6, we're allowing a custom bundler URL for each network.
We're trying to give space to ERC-4337 developers to experiment more. If you are a bundler, place your bundler URL and broadcast a few userOps with Ambire!
EIL makes AA multichain ๐
AA abstracts validation and gas. EIL uses that to let users self-execute across chains without holding native gas or trusting relayers.
This is exactly the kind of trust-minimized UX AA was set to unlock from the beginning.
At DevConnect Buenos Aires, the details of EIL @ethinteroplayer - Ethereum Interoperability Layer were unveiled.
Weโve been deep-diving interop protocols for months and our initial assessment of EIL contracts (deployed on testnets already) is following ๐งต๐
Want to know more about EIL?
Hear it from @ThewizardofPOS@Ivshti@ch4r10t33r and @OfirEliasi. Almost one hour of a great conversation filled with pure insights and opinions.
Thanks to everyone who joined the space. Replay is now available.
learn how @MetaMask smart accounts power the ERC-7715 advanced permissions standard, and how you can build on this next gen permission layer.
starting in 15 min at the AA community hub
Right after @VitalikButerin's day 1 talk on trustlessness, he sat down with @ThewizardofPOS and @yoavw for a panel moderated by @tomteman on the Trustless Manifesto to further explore how it ties into the core values of Ethereum, its goals and its vision
https://t.co/3AxwVFdzA4
Hackers, itโs live ๐
โจThe Stitch SDK - a lightweight wrapper for the EIL tech stack - is now public for anyone building DeFi, built on top of @ethinteroplayer, @erc4337 and backed by @ethereumfndn.
Iโm making the repo public right before my talk at @ETHGlobal today at 5pm, where Iโll walk through how it works and how you can use it during the hackathon.
Thnks to AA team @ThewizardofPOS, @tomteman and @yoavw for pushing this forward - and shoutout to @syndika_co and the whole builder crowd this week.
Jump in, fork it, break it, ship something cool.โจhttps://t.co/yIyVDml6tO
Come and meet the @ethereumfndn researchers behind ERC-4337 and EIL - @drortirosh Shahaf Nacson and Alex Forshtat
๐ Today, Nov 21, 1:00 PM
๐AA Community Hub, Green Pavilion (take a right after you enter)
Tomorrow at 1:00 PM, the Account and Chain Abstraction team will be at the AA Community Hub at @EFDevcon
This is your chance to talk to them about ERC-4337, Native AA (EIP-7701) and the newly published @ethinteroplayer
๐ Green Pavilion
https://t.co/KqkEt4mg8q
@OfirEliasi took to the stage on day 1 to demonstrate Stitch, a dapp aggregator built on @ethinteroplayer using the new EIL SDK, showcasing how DeFi UX can be made simple without compromising on trustlessness
https://t.co/SO4RquVRFV
@ETHGlobal The workshop will be run by @OfirEliasi@drortirosh Alex Forshtat and Shahaf Nacson and will get you up to speed on using the EIL SDK during the hackathon
https://t.co/tsdLS2c5da
Exciting news โ @ETHGlobal Buenos Aires starts this Friday! ๐
Are you hacking? Wanna take out the new Ethereum Interop Layer for a test drive? We've got you!
๐ Join our workshop Nov 21 at 5 PM to learn more!
https://t.co/h9WoEVE435
You probably heard all about how EIL will enable seamless trust-minimized cross-chain interoperability ๐ช
But how?
Researcher Shahaf Nacson from the @ethereumfndn Account & Chain Abstraction Team breaks down the technical details in this day 1 talk
https://t.co/MYUprwlsPB