Personal writing from Taek Lee on account abstraction and smart contract security.https://taek.tech/en-ushttps://taek.tech/writing/keys-and-accounts-native-aa-eip-8130-vs-eip-8141/https://taek.tech/writing/keys-and-accounts-native-aa-eip-8130-vs-eip-8141/Why native account abstraction needs both key-originated and account-originated transactions—and why configuration-backed identity is inevitable.Tue, 11 Aug 2026 00:00:00 GMThttps://taek.tech/writing/eoa-transition-native-account-abstraction/https://taek.tech/writing/eoa-transition-native-account-abstraction/An argument for native account abstraction that upgrades existing EOAs in place by replacing root authorization without sacrificing address continuity.Thu, 06 Aug 2026 00:00:00 GMThttps://taek.tech/writing/kernel-v1-v4-production-retrospective/https://taek.tech/writing/kernel-v1-v4-production-retrospective/A four-version retrospective on how Kernel evolved from EOA-rooted compatibility to replaceable validation, modular permissions, and a production-driven v4 foundation.Thu, 06 Aug 2026 00:00:00 GMThttps://taek.tech/writing/final-not-finished-what-erc-4337-taught-us/https://taek.tech/writing/final-not-finished-what-erc-4337-taught-us/A production retrospective on how ERC-4337 converged into a shared execution and sponsorship rail while exposing the limits of standalone smart-account migration.Thu, 06 Aug 2026 00:00:00 GMThttps://taek.tech/writing/eip-3074-invoker-with-permissions/https://taek.tech/writing/eip-3074-invoker-with-permissions/Using ERC-7579 policies and signers to bring session keys and passkeys to EIP-3074 EOAs.Tue, 07 May 2024 00:00:00 GMThttps://taek.tech/writing/finding-safe-erc-4337-module-bug/https://taek.tech/writing/finding-safe-erc-4337-module-bug/How ERC-4337 context exposed a paymasterAndData signature flaw that an isolated contract review missed.Fri, 08 Dec 2023 00:00:00 GMThttps://taek.tech/writing/why-kernel-is-not-written-in-huff/https://taek.tech/writing/why-kernel-is-not-written-in-huff/Why extensibility, auditability, testing, and development speed matter more than marginal gas savings for Kernel.Tue, 17 Oct 2023 00:00:00 GMThttps://taek.tech/writing/simple-account-factory-gas-bloat/https://taek.tech/writing/simple-account-factory-gas-bloat/How an old Solidity compiler bug added 122,914 gas to every SimpleAccount deployment.Mon, 25 Sep 2023 00:00:00 GMThttps://taek.tech/writing/breaking-erc-4337-infrastructure/https://taek.tech/writing/breaking-erc-4337-infrastructure/Manipulating ABI offsets to make different UserOperations produce the same userOpHash.Thu, 16 Mar 2023 00:00:00 GMThttps://taek.tech/writing/non-unique-userop-hashes/https://taek.tech/writing/non-unique-userop-hashes/A debugging experiment with repeated UserOperations exposed assumptions about userOpHash uniqueness.Tue, 14 Mar 2023 00:00:00 GMThttps://taek.tech/writing/five-account-abstraction-audit-findings/https://taek.tech/writing/five-account-abstraction-audit-findings/Signature replay, paymaster draining, policy bypass, and implementation destruction findings from a Biconomy audit.Thu, 02 Mar 2023 00:00:00 GMThttps://taek.tech/writing/eip4337-manager-selfdestruct-vulnerability/https://taek.tech/writing/eip4337-manager-selfdestruct-vulnerability/An analysis of how an unprotected EIP4337Manager module setup enabled the manager's destruction and signature-free UserOperations in Gnosis Safe-based ERC-4337 wallets.Tue, 24 Jan 2023 00:00:00 GMThttps://taek.tech/writing/verifying-paymaster-signature-replay-attacks/https://taek.tech/writing/verifying-paymaster-signature-replay-attacks/An analysis of signature replay flaws in the ERC-4337 sample VerifyingPaymaster that can drain deposits and bypass transaction sponsorship policies.Thu, 12 Jan 2023 00:00:00 GMT