Ethereum’s EIP-7702 wallet delegation feature is facing renewed scrutiny following the presentation of security research at the USENIX Security Symposium. The study linked a large share of analyzed authorization transactions to attacker-controlled contracts.
According to the research, 63% of EIP-7702 authorization transactions in the analyzed sample were connected to malicious contracts. Furthermore, automated wallet-draining activity tied to these findings contributed to more than $2.3 million in confirmed thefts.
Security experts emphasize that the issue is not an inherent protocol bug within EIP-7702 itself. Instead, the concern centers on how wallet delegation expands the attack surface when users are tricked into signing malicious authorizations. The risk stems from the intersection of protocol flexibility, wallet user experience, user behavior, and phishing infrastructure.
Understanding EIP-7702 and New Risks
EIP-7702 forms part of Ethereum's broader movement toward account abstraction. The feature enables externally owned accounts to temporarily function more like smart contract accounts by delegating code execution. This capability is designed to support batched transactions, sponsored gas, automation, improved wallet experiences, and flexible account controls.
However, this flexibility introduces new user risks. If a malicious website tricks a user into signing an incorrect delegation authorization, attackers may gain significantly more control than they would through a typical phishing signature. Attackers have historically adapted quickly to new crypto capabilities, moving from seed phrases and fake airdrops to exploiting delegation mechanics.
The Role of Wallet UX and Safety
Security analysis highlights that wallet interfaces serve as a critical security boundary for everyday users. Because EIP-7702 allows code to gain meaningful control over an account, wallet design becomes a vital defense layer.
To protect users, wallet providers may need to implement clearer warnings, advanced simulation tools, stronger delegation displays, contract reputation checks, and safer default workflows. The research indicates that without matching safety tools, malicious actors can exploit user confusion surrounding complex permissions.
The findings emphasize that while account abstraction remains an essential component of Ethereum's roadmap to improve usability, powerful new features require enhanced wallet security measures and heightened user caution regarding delegation signatures.
