EIP-7702 with lock hook

Resource Lock Hook in modular smart account work effectively in standard environments where asset movements can be monitored and controlled through the account's execution flow.

However, EIP-7702 introduces fundamental incompatibilities that break this security model by creating multiple sophisticated bypass pathways.

When EIP-7702 delegation is applied to an EOA, users gain the ability to execute complex delegated contract logic that can manipulate assets in ways that completely circumvent the Resource Lock Hook. Hook cannot control or detect asset movements initiated directly from private key owner.

Therefore, systems planning to adopt EIP-7702 should avoid implementing ERC-7579 based modules for asset locking purposes, as the delegation mechanism inherently undermines the security guarantees that these modules are designed to provide. Alternative architectural approaches that do not rely on account-level transaction monitoring are necessary for maintaining asset security in EIP-7702 environments.

Last updated