Wallet Security & Protocol Patches
Critical vulnerability disclosures, origin validation, and signature verification fixes.
Rapid Error-Code & Symptom Lookup Matrix
Cross-reference your runtime error string or hardware symptom with verified recovery protocols and client-side debuggers.
| Error / Exception | Diagnostic Symptom | Verified Resolution Guide | Interactive Sandbox |
|---|---|---|---|
| AA21 didn't pay prefund | ERC-4337 EntryPoint deficit, validateUserOp missingAccountFunds transfer missing | ERC-4337 AA21 Didn't Pay Prefund: UserOperation Revert Fix → | 🛠️ ERC-4337 Calldata Decoder |
| ERC-7579 Replay Exploit | Modular session key cross-chain signature replay across EVM rollups | ERC-7579 Session Key Cross-Chain Replay Attack Fix → | 🛠️ ERC-4337 Calldata Decoder |
| EIP-7702 Replay Vulnerability | Cross-chain replay attacks on EIP-7702 delegation designation tuples | EIP-7702 Delegation Replay Vulnerability Fix → | 🛠️ ERC-4337 Calldata Decoder |
| EIP-7702 Zero-Address Reset | Broadcasting zero-address authority revocations to secure compromised accounts | EIP-7702 Zero-Address Authorization Revocation Fix → | 🛠️ ERC-4337 Calldata Decoder |
| Permit2 Nonce Collision | Uniswap Permit2 unordered nonce bitmap collisions and timestamp expirations | Uniswap Permit2 Nonce Bitmap Collision Revert Fix → | 🛠️ ERC-4337 Calldata Decoder |
| ERC-7739 Replay Revert | Nested EIP-712 ERC-1271 isValidSignature reverts (0xffffffff) on Safe / Seaport | ERC-7739 Smart Account Signature Replay ERC-1271 Fix → | 🛠️ ERC-4337 Calldata Decoder |
| CACAO Signature Bypass | WalletConnect v2 wc_sessionAuthenticate CAIP-74 spoofed SIWE approvals | WalletConnect CACAO Session Signature Bypass Fix → | 🛠️ WebAuthn Passkey Debugger |
| postMessage Origin Flaw | WalletConnect listener iframe missing event.origin validation vulnerability | WalletConnect postMessage Missing event.origin Fix → | 🛠️ WebAuthn Passkey Debugger |
All Guides in this Silo
Sorted by DateEIP-7702 Authorization Revocation & Zero-Address Code Reset
Revoke compromised EIP-7702 smart account delegations safely. Broadcast zero-address authority revocations to secure distressed EVM accounts.
WalletConnect wc_sessionAuthenticate CACAO Signature Bypass
Mitigate unauthorized session establishment in WalletConnect v2 wc_sessionAuthenticate. Resolve CAIP-74 CACAO signature validation bypasses and forged SIWE approvals.
ERC-4337 AA21 Didn't Pay Prefund UserOperation Revert Fix
Fix ERC-4337 EntryPoint AA21 didn't pay prefund reverts. Resolve validateUserOp missingAccountFunds transfers, deposit deficits, and gas fee inflation.
Uniswap Permit2 Nonce Bitmap Collision
Resolve Uniswap Permit2 transaction reverts caused by nonce bitmap collisions and timestamp expirations. Manage unordered nonces across trading bots.
ERC-7739 Smart Account Signature Replay & ERC-1271 Revert
Resolve ERC-1271 isValidSignature reverts (0xffffffff) and cross-chain replay attacks in smart accounts signing nested EIP-712 typed data with Permit2, Seaport, and Safe.
ERC-7683 Cross-Chain Intent Replay & Settler Contract Revert (0x54656c6c)
Resolve ERC-7683 cross-chain intent settlement failures. Fix intent order nonce replay across rollups, orderDataType hash mismatches, and deadline expiration in filler relayers.
ERC-7579 Session Key Cross-Chain Signature Replay Exploits
Protect ERC-7579 modular smart accounts from cross-chain session key signature replay attacks across EVM rollups. Fix CREATE2 counterfactual account vulnerabilities.
ERC-7579 Smart Account 'HookPostCheckFailed' Execution Revert
Resolve ERC-7579 modular smart account execution reverts caused by HookPostCheckFailed and PreCheckFailed in Biconomy Nexus, Kernel v3, and Rhinestone modules.
EIP-7702 Delegation Replay Vulnerability
Prevent cross-chain replay attacks on EIP-7702 account delegation designations. Validate chain ID binding and nonce management in authorization tuples.
WalletConnect postMessage Listener Missing event.origin Validation
Resolve the critical security vulnerability in WalletConnect where postMessage event.origin is not validated. Learn how to secure your iframe communications.