hard20 pts · first answer countssmart-contract-securityevm-fundamentals

EIP-7702 and "only EOAs" checks

A protocol blocks bots with require(msg.sender == tx.origin), assuming this means the caller cannot run contract logic. After the Pectra upgrade (EIP-7702), why is this assumption wrong?

A.EIP-7702 removed tx.origin from the EVMB.EIP-7702 makes every contract call have tx.origin equal to the contractC.msg.sender and tx.origin are now always differentD.An EOA can delegate to contract code, then send a transaction to itself; that code can batch many calls to the protocol while msg.sender still equals tx.origin

← Reentrancy through safeMint Namespaced storage layout →