Your wallet may pop up a message asking you to upgrade to a smart account or enable EIP-7702. After you confirm, your wallet address itself stays the same, but control is temporarily delegated to another contract. Verifying the identity of that delegated contract is the key to protecting your asset security.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
What EIP-7702 actually changes
EIP-7702 is a new feature officially launched on Ethereum in the 2025 Pectra upgrade. It allows a regular wallet (EOA) to temporarily borrow code from a smart contract to perform operations without changing to a new address.
In simple terms, your original EOA account is like a bare machine with no software installed. EIP-7702 is like plugging a USB drive into that bare machine. The code on this USB drive lets your account use advanced features such as batch transfers, paying gas with USDT, and social recovery.
But this USB drive, also known as the delegation, can point to a safe official contract or to a malicious contract. If it points to a malicious contract, scammers can use the assets in your account.
How to check who your wallet delegated to
To confirm this important information, you need to check on-chain rather than relying on the wallet interface. The main goal is to find out which contract address your account is currently delegated to. There are two methods for different types of users.
Case A: Use Etherscan (most direct, suitable for most people)
- Open Etherscan and enter your wallet address in the search box, then press Enter.
- On the address details page, scroll down to the "More Info" section. If the account has an EIP-7702 delegation, a "Delegate Information" field will appear with a contract address inside.
- Check this address: if you authorized it through MetaMask, the delegated address should be MetaMask's official delegation contract address. Other major wallets will have their own official delegation contract addresses. If you are unsure, check the wallet's official documentation or announcements.
Completion standard: you can see a clear delegation contract address on Etherscan. If the "Delegate Information" field does not exist, your account is not currently delegated.
Case B: Use Viem or similar tools (for developers)
Use the getDelegation method to query the delegation status of a specified address. It returns the delegation contract address, or undefined if there is no delegation. Check that the returned address matches the wallet's officially published delegation contract address.
If you find your wallet is delegated to an unknown address
Risk warning: EIP-7702 delegation does not expire. Once set, it stays active until you actively revoke it. If you accidentally signed and authorized a malicious delegation contract, scammers can call your account to perform operations at any time and may empty your wallet in one go.
If you find the delegation address is wrong, or if your wallet was delegated without you doing anything:
- Revoke the delegation immediately: send a new EIP-7702 type transaction pointing the delegation address to the zero address to clear the delegation state.
- Some wallets already support one-click revocation: for example, OneKey wallet already supports clear parsing and revocation of EIP-7702 signatures.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
Daily risk checks
- For any signature request that asks you to upgrade your account or enable 7702, expand and review the advanced details before signing. Confirm that the delegated contract address is the wallet's official address.
- You can use the security check website eip7702.app to quickly check whether your address has any authorization records. Do not connect your wallet; just enter the address for a query.
- If the current delegation address does not match the wallet's officially published address, do not click confirm. Simply reject the signature.
How to verify after completing the operation: check the contract address shown in the "Delegate Information" field on Etherscan. If it is the zero address or the field cannot be found, your account is no longer delegated. If it shows a wallet official address that you trust, your account is in a controlled and safe delegation state.
If you have used one-click authorization or smart account upgrade features before, go to Etherscan now and check your delegation address. Compare it with the wallet's official documentation to confirm it is legitimate. Making this regular check a habit can effectively reduce asset risk.
