EIP-4337 is a specification to add account abstraction functionality to the Ethereum mainnet without modifying the consensus rules. The Ethereum Foundation asked us to review the specification and a reference implementation. The audited commit is 8832d6e04b9f4f706f612261c6e46b3f1745d61a... and make the code easier to reason about, change, and audit. We also believe this audit would have benefited from a more detailed description of the off-chain processing steps that are not apparent from the code base itself, along with mitigations employed by paymasters and bundlers, including...
Low | Medium | High | Critical | Total | |
---|---|---|---|---|---|
Not fixed | 1 | - | - | - | 1 |
Fixed | 14 | 4 | 5 | 1 | 24 |
Total | 15 | 4 | 5 | 1 | 25 |
# | File Name |
---|---|
1 | contracts/EntryPoint.sol |
2 | contracts/samples/SimpleWalletForTokens.sol |
3 | contracts/StakeManager.sol |
4 | contracts/IWallet.sol |
5 | contracts/UserOperation.sol |
6 | contracts/samples/DepositPaymaster.sol |
7 | contracts/samples/VerifyingPaymaster.sol |
8 | contracts/samples/TokenPaymaster.sol |
9 | contracts/samples/SimpleWallet.sol |