AA-4337-ENTRYPOINTImpact

ERC-4337 EntryPoint Abuse

Crafted UserOperation that the bundler executes profitably for the attacker but drains gas / funds from the smart account / paymaster.

§ Where this technique fits

AA-4337-ENTRYPOINT is catalogued under the Impact tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 4 on average.

§ Dossiers chaining this technique

ERC-4337 paymaster sponsor drain
A paymaster sponsors all UserOperations without per-user gas accounting. Spam tiny UserOps from many bundled addresses — paymaster pays the gas until its deposit hits zero.
step 4 / 5

§ What commonly comes next

01
Data Destruction
T1485 · Impact
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

ERC-4337 paymaster sponsor drain

§ What commonly comes next