AA-PAYMASTER-DRAINImpact

Paymaster Sponsor Drain

Paymaster sponsors gas without rate-limiting / per-user accounting — attacker spams UserOperations until the paymaster's deposit is empty.

§ Where this technique fits

AA-PAYMASTER-DRAIN is catalogued under the Impact tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 2 on average.

§ Dossiers chaining this technique

ERC-4337 paymaster sponsor drain
A paymaster sponsors all UserOperations without per-user gas accounting. Spam tiny UserOps from many bundled addresses — paymaster pays the gas until its deposit hits zero.
step 2 / 5

§ What commonly comes next

01
Valid Accounts
T1078 · Initial Access
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

ERC-4337 paymaster sponsor drain

§ What commonly comes next