6.7M+ EOAs have authorized a smart contract

When an EOA wallet creates an EIP-7702 authorization, it points it's 'delegation indicator' to a specified smart contract. Then, when a CALL is made to that wallet, the authorized contract's code is executed in the context of the user's account.

At the end of 2025, over 6.6 million EOAs had an active authorization, with 91 million total authorizations made throughout the year.

40% of authorized accounts are using hacker contracts

Hackers quickly adopted EIP-7702. When an attacker obtains a victim's private key (through phishing, malware, etc.), they can use EIP-7702 to upgrade the already-compromised EOA with a hacker contract that automatically drains funds to the attacker's wallet.

Note: EIP-7702 itself was not used to hack these wallets - the private keys were already compromised before 7702 was used. Hackers simply adopted 7702 as a more efficient way to sweep funds from wallets they had already gained access to.

Hacker contracts like "CrimeEnjoyor" and its variants account for 2.65 million of the 6.6 million total authorized wallets (40%). The remaining 4 million wallets (60%) use legitimate authorized contracts.

Top Authorized Contracts

Here are the top authorized contracts ranked by live smart accounts:

Top Non-Hacker Authorized Contracts

Excluding hacker contracts, the leading authorized contracts are from major wallet providers. Bitget leads with over 605k accounts, followed closely by Metamask and Ambire.

1.5M non-hacker accounts were active in December 2025

Focusing on legitimate usage, the number of monthly transacting non-hacker EIP-7702 accounts grew steadily throughout 2025, from 240k in June to a peak of 1.5 million in December.

BSC leads in non-hacker EIP-7702 activity

BSC emerged as the dominant chain for legitimate EIP-7702 activity, with 598k transacting non-hacker accounts in December 2025. Base was second with 393k, followed by Ethereum mainnet with 222k, and Polygon with 219k.

BSC's dominance was driven primarily by Metamask Delegator (30M total actions), TokenPocket (11M actions), and Bitget (9M actions).

EOA transactions were the most common action type

EIP-7702 accounts can perform actions in four ways: regular EOA transactions, self-initiated smart account transactions, relayed actions (initiated by a third party), and ERC-4337 UserOperations.

Among non-hacker accounts in 2025, regular EOA transactions dominated, followed by relayed actions and self-initiated transactions. ERC-4337 UserOps were a small but growing portion of the activity.

Top Authorized Contracts by Active Wallets

Looking at which authorized contracts had the most 5+ time transacting wallets in 2025, Bitget leads with 420k wallets, followed by Metamask Delegator with 358k and TokenPocket with 137k.

EIP-7702 and ERC-4337 are complementary

EIP-7702 accounts can also make ERC-4337 UserOperations, combining the benefits of both protocols. This allows EOAs to access the ERC-4337 infrastructure (bundlers, paymasters) without having to migrate their assets to a new address.

By December 2025, EIP-7702 accounts were making 2.3 million UserOps per month, up from 109k in July - a 20x increase over the second half of the year.

Trustwallet leads 7702 x 4337 adoption

Trustwallet was the dominant authorized contract for EIP-7702 accounts making ERC-4337 UserOps, with 233k accounts in 2025. Coinbase Wallet followed with 191k accounts, then Zerodev with 77k and Alchemy with 75k.

805k accounts used 7702 for 4337 UserOps

By the end of 2025, over 805k unique EIP-7702 accounts had made at least one ERC-4337 UserOp. This represents a significant trend of wallet apps combining these two account abstraction technologies.