Lately there's a lot of chatter about the road to full account abstraction. I wrote some notes on what we've been building and how it gets us to full AA.
The robustness and censorship resistance of the ERC-4337 network depends on having a unified mempool.
Here's why and how: notes.ethereum.org/@yoav/unified-…
To support the unified mempool, the ERC-4337 team is announcing two new projects:
Optimistic Time Traveling for fun and profit!
New classes of attacks against optimistic rollups, demonstrated on Optimism's old OVM 1.
Bridge projects, this should be part of your risk model.
Account abstraction: New version of ERC-4337 released!
Changes explained below.
In addition we're announcing a bundler reference implementation and a compatibility test suite:
#ETHIndia prizes!
🏆 The Ethereum Foundation will award $10,000 for projects building using Account Abstraction.
📲 A browser-based or mobile wallet demonstrating creative use of ERC 4337:
2x🥇 — $2,500
🛠 Best ERC-4337 tools for developers and users:
2x🥇 — $2,500
EIP-3074 vs. ERC-4337: false dichotomy!
My latest post clears some misconceptions about both proposals, and why they don't solve the same thing (full account abstraction vs only execution abstraction)
The first RIP has been published: RIP-7560 - Account Abstraction. github.com/ethereum/RIPs/…
A native version of ERC-4337 for rollups that wish to include native account abstraction.
@erc4337
Some implications of EIP-3074 inclusion, and what could be a potential alternative.
notes.ethereum.org/@yoav/3074-imp…
More detailed explanation of the alternative coming soon...
Interesting. The attacker waited 4 days between finding and exploiting, taking a risk that wintermute will deploy the proxy during that time to access to tokens. The proxy implementation was deployed 7 days ago, funded via TornadoCash, and used 3 days ago.
Explainer below: