Ethereum Draft Proposal Introduces EIP-7702 Delegation Kill Switch

A new Ethereum draft proposal aims to allow standard wallets to permanently disable EIP-7702 delegation following security incidents, according to The Defiant. EIP-7702, activated in May 2025 during the Pectra upgrade, allows standard externally owned accounts (EOAs) to temporarily adopt smart contract capabilities such as batched transactions, gas sponsorship, and limited-permission keys.

However, the upgrade has presented significant security challenges. In October 2026, an attacker utilized EIP-7702 to drain a Binance hot wallet during a multi-chain breach. Security analyses indicated that delegated code receives unrestricted access to an account's funds, prompting warnings from developers and specification writers that applications should not request EIP-7702 authorizations from users.

Background on EIP-7702

Authored in May 2024 by Vitalik Buterin, Sam Wilson, Ansgar Dietrichs, and lightclient, EIP-7702 was designed as a bridge toward full account abstraction without requiring users to migrate to new wallets. The specification introduces a "set code transaction" carrying signed authorizations, allowing an EOA to store a delegation pointer to a smart contract.

Shortly after the Pectra upgrade went live, trading firm Wintermute reported that more than 80% of EIP-7702 delegations pointed to malicious sweeper contracts designed to drain leaked private keys.

Key facts

• EIP-7702 was activated in May 2025 as part of the Pectra network upgrade.
• The upgrade allows standard EOAs to borrow smart contract code via a delegation pointer.
• An attacker used EIP-7702 to compromise a Binance hot wallet in October 2026.
• Developers previously warned that no safe user interface exists for EIP-7702 authorizations due to unrestricted fund access.