Back to works

ERC-4337 Smart Account Platform (W05)

Account-abstraction workspace: immutable CREATE2 accounts, threshold owners, scoped session keys with value budgets, WebAuthn/P256 authorization, delayed guardian recovery, and a local allowlisted bundler driving real UserOperations.

Web3Account AbstractionERC-4337Passkeys

Key Results

01

41 contract + 11 TypeScript tests covering the full UserOperation lifecycle

02

One-shot permit model keyed on calldata hash; sessions rechecked post-validation

03

Four self-audit findings with reproducible PoCs and regression tests

04

Public testnet release plan with worst-case gas budgeting (documented BLOCKED gate)

Tech Stack

SolidityERC-4337WebAuthnTypeScriptNext.jsFoundry