727 FinanceEIP-7702 allows regular Ethereum wallets to run smart contract code, thereby enabling batch transactions and sponsored transactions (paying Gas fees on behalf of users).
Author: Decrypt Agent
Compiled by: Plain Language Blockchain
Summary
EIP-7702 is an Ethereum upgrade activated in May 2025 that allows standard wallets to temporarily take on smart contract capabilities.
It supports batch transactions, Gas sponsorship, and restricted-permission keys, but delegated code gains full access to the wallet's funds.
Attackers exploited EIP-7702 in a $6.4 billion hack in October 2026 to drain a Binance hot wallet, and analysts blamed the attack on a North Korean hacking group.
Ethereum has two types of accounts. Externally Owned Accounts (EOAs) are the standard wallets most people use, controlled by private keys, and can do little beyond sending transactions. Smart contract accounts can run code, enabling features such as spending limits, account recovery, and paying transaction fees with tokens other than ETH, but most users have never migrated to such accounts. EIP-7702 is an attempt to bridge this gap. Rather than requiring users to migrate to a new wallet, it allows existing EOAs to temporarily borrow smart contract code while retaining their own address and funds.
This guide will explain what EIP-7702 is, how it works, why developers need it, and how attackers exploited it in the largest cryptocurrency theft on record.
What Is EIP-7702?
According to the official specification, EIP-7702, titled "Set Code for EOAs," is an Ethereum Improvement Proposal written in May 2024 by Ethereum co-founder Vitalik Buterin and developers Sam Wilson, Ansgar Dietrichs, and lightclient.
It is one of the flagship changes of the Pectra upgrade, the major Ethereum upgrade that officially went live on May 7, 2025.
"EIP-7702 gives us the foundation we need for the long term," Ethereum core developer Preston Van Loon told Decrypt at the time. "While full-featured abstraction won't be immediately available to end users in the Pectra upgrade, this upgrade provides Ethereum with the underlying architecture to support its future development."
EIP-7702 is a change at Ethereum's core protocol level, not a token or a separate blockchain, so there is no token to buy.
How Does EIP-7702 Work?
EIP-7702 adds a new Ethereum transaction type: the "set code transaction." This transaction carries an authorization list, each authorization signed by the private key of the account to be upgraded, specifying the smart contract address that account wishes to use.
Once the transaction is processed, the account stores a tiny pointer to that contract, called a delegation indicator. From that moment on, whenever anyone calls the account, Ethereum runs that contract's code as if the account itself contained that code, and that code has full control over its funds.
This delegation persists until the account owner signs a new authorization—either pointing to a different contract or clearing the pointer to revert to a normal EOA.
What Makes EIP-7702 Unique?
The specification lists three core capabilities it is designed to enable:
Batching: Combining multiple operations into a single transaction, such as approving a token and then immediately completing a token swap.
Sponsorship: Allowing other accounts (such as a decentralized application) to pay transaction fees on the user's behalf, with the user later able to reimburse them using other tokens.
Privilege de-escalation: Creating sub-keys with restricted permissions, such as limiting spending to a specific token or limiting withdrawals to 1% of the total balance per day.
Security Risks
These same features also introduce security risks. The specification explicitly warns that because delegated code has "unrestricted access to the account," applications should never induce users to sign EIP-7702 authorizations, and wallets should not provide a direct interface for doing so. "There is no safe way to provide such an interface,"
the specification states.
Scammers moved quickly. According to a June 2025 report by The Block, market maker Wintermute found that within weeks of the Pectra upgrade launch, more than 80% of EIP-7702 delegations pointed to copies of the same malicious "sweeper" contract, which automatically drains funds from wallets whose private keys have been compromised.
EIP-7702 and the Binance Hack
On October 29, 2026, an attacker moved approximately $6.4 billion from Binance wallets across 10 blockchains, with most of the funds transferred within about 20 minutes. Blockchain analytics firms TRM Labs and Chainalysis both attributed the theft to TraderTraitor—the North Korean hacking group behind the $1.5 billion Bybit hack in February 2025.
TRM Labs noted that on the Ethereum network, the attacker used EIP-7702 delegation to turn one of Binance's hot wallets into an asset sweeper under their control, with 50 authorizations pre-signed. Chainalysis said an operational wallet funded through the crypto mixer Tornado Cash submitted these signed authorizations, causing the hot wallet to run attacker-deployed code, after which the attacker called the wallet to drain all its assets and consolidate them into addresses under their control.
Crucially, EIP-7702 delegation requires a valid signature from the account to be upgraded. Binance's wallets on the other 9 chains also sent funds to the attacker via conventional signed transfers, which TRM said indicates the problem stemmed from a compromise of Binance's hot wallet signing infrastructure rather than a vulnerability in Ethereum itself.
Binance said its investigation initially began with a compromised laptop belonging to an engineer and has since uncovered "additional breach points."
The Future of EIP-7702
EIP-7702 is the first step toward Full Account Abstraction, the long-term goal of giving every Ethereum account smart-contract-like flexibility. Its designers built it to be fully forward-compatible with that "endgame," so wallets built on it today will continue to work as Ethereum's account model evolves.
The next step may come with the Hegotá upgrade, the major upgrade on Ethereum's roadmap following Glamsterdam. In February 2026, Buterin said EIP-8141, which he described as "a comprehensive package that bundles and resolves all the remaining issues account abstraction aims to solve," is "expected within a year" in the Hegotá hard fork.
"We've been talking about account abstraction since early 2016," Buterin wrote, adding that developers are also discussing whether existing accounts can plug into this new framework to natively gain batch transactions and Gas sponsorship.
This is part of a larger restructuring plan. In July 2026, Buterin described a new draft long-term Ethereum roadmap as the network's largest overhaul since The Merge, its 2022 transition to proof of stake (PoS).