Ackee is finalizing an ERC-4337 detector to identify the use of forbidden opcodes and storage access, turning a very labor-intensive manual review into an automated…
Glossary definition
ERC-4337 is an account-abstraction system that routes UserOperations through bundlers and an EntryPoint contract without changing Ethereum consensus rules.
Users submit UserOperation objects to a separate mempool. Bundlers validate
and package them into transactions that call a shared EntryPoint; a smart
account supplies its own signature and authorization logic. Optional paymasters
can sponsor gas under application-defined conditions.
The additional validation path creates security questions around simulation, gas accounting, nonce design, signature aggregation, paymaster state, factory deployment, upgradeability, and interactions with EIP-7702. The ERC-4337 specification is the source of truth. The migrated Wake detector article covers specific implementation checks.
Used in context