Check who can sign, recover, change rules and pay fees. A simpler interface does not remove contract or provider risk.
Identify signers
Test the process
Map dependencies
Signing rules
A smart account may require multiple approvals, spending limits or session keys. Read deployed rules rather than inferring safety from the interface.
Recovery
Identify guardians, delays, emergency powers and the procedure after losing a phone. Poor recovery design can lock funds or enable takeover.
Fees and relays
Under ERC-4337 a UserOperation may pass through a bundler and paymaster. Check sponsorship terms and what happens if those services stop.
Upgrades
An upgradeable account can receive fixes but also change its rules. Inspect administrators, delays, audits and the exit path before an upgrade.
Test recovery before an incident
A guardian or delay process may be too slow or unavailable when needed. Run a documented small-scale test and identify relay and upgrade powers.
- Keep an exit route if the relay service stops.
- Check which session keys remain active after recovery.
Practical case: decision and limits
A smart account offers guardian recovery. Check the approval threshold, delay, cancellation route and guardian powers. Test with a low-value account before relying on it. A gas sponsor may refuse an operation without changing asset ownership; service availability, signature validity and account control are separate. Also inspect upgrade rights.
EIP-7702: code delegation retains a master key
EIP-7702 lets an existing Ethereum account delegate execution to code. The original key retains control: a delegated multisig policy does not neutralize that key. Check delegated code, network scope and delegation removal; revoking ERC-20 allowance is a different action.
A concrete verification
Inventory master key, modules, guardians and delegation: visible approvals do not prove two-key control of every spending path.
Checks to make
| Topic | Check |
|---|---|
| Signing rules | Identify signers |
| Recovery | Test the process |
| Fees and relays | Map dependencies |
| Upgrades | Review authority |
Frequently asked questions
Does a recovery phrase always disappear?
No. Recovery design varies and may still rely on secrets.
Are gasless operations free?
No. Fees are sponsored, shifted or charged elsewhere depending on the service.
Verifiable sources
Independent educational content reviewed against primary documentation. No personalized recommendation or promise of returns. Updated October 6, 2026
