EIP-4337
OpenZeppelin reviewed Ethereum.org (EIP-4337) on 19 Apr 2022: 25 findings, 1 critical; 16 marked fixed, 9 open.
Report hosted on blog.openzeppelin.com.
Trustblock does not review code.
Findings25
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 5 |
| Medium | 2 | 0 | 2 |
| Low | 7 | 0 | 8 |
Medium[M03] Value-bearing calls can read balancesOpen
The report gives no description here.
Medium[M04] Gas discrepancy in bundle simulationOpen
The report gives no description here.
Low[L01] Use of transfer function is potentially unsafe [core and sample]Open
The report gives no description here.
Low[L03] Finite, fixed, and unrestricted token paymaster allowance [sample]Open
The report gives no description here.
Low[L09] Wallet may not be deployed [core]Open
The report gives no description here.
Low[L10] Unchecked math blocks are not narrow in scope [core]Open
The report gives no description here.
Low[L11] Missing docstrings [core and sample]Open
The report gives no description here.
Low[L12] Downcasting without bounds checks [core]Open
The report gives no description here.
Low[L15] Wallet storage in EntryPoint [core]Open
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (9)
- contracts/EntryPoint.sol
- contracts/samples/SimpleWalletForTokens.sol
- contracts/StakeManager.sol
- contracts/IWallet.sol
- contracts/UserOperation.sol
- contracts/samples/DepositPaymaster.sol
- contracts/samples/VerifyingPaymaster.sol
- contracts/samples/TokenPaymaster.sol
- contracts/samples/SimpleWallet.sol
Part of Ethereum.org’s security record
Ethereum.orgSecurity firm
OpenZeppelin67 projects reviewed · 184 reports · latest Aug 2026
See OpenZeppelin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us