EIP-7702 vs ERC-4337: What’s the Difference?
EIP-7702 vs ERC-4337: what’s the difference? Both are ways to implement account abstraction, but they take different paths. ERC-4337 works through on-chain contracts and off-chain services and requires users to adopt a new smart account address. EIP-7702 is a change to Ethereum’s protocol that lets an ordinary address delegate to contract code while keeping the same address. On security, an ERC-4337 account can replace its signing key, while the original private key behind an EIP-7702 address always keeps ultimate control. The two are not mutually exclusive and are often used together.
At Which Layer Do EIP-7702 and ERC-4337 Work?
ERC-4337 went live in March 2023 without changing Ethereum’s core protocol. Instead, it built application-layer infrastructure: bundlers collect user operations and submit them to an on-chain EntryPoint contract, and the user’s smart account verifies and executes them. EIP-7702 was written into the protocol itself through the Pectra upgrade in May 2025, adding a new transaction type that lets an ordinary address point to contract code.
Do You Need to Change Addresses to Use Them?
With ERC-4337, yes. A smart account is a new contract address, so existing users have to move their assets, approvals, and on-chain identity over to it. With EIP-7702, no. Users sign an authorization on their existing address to gain smart account features, and their assets and history stay where they are. That is the main reason EIP-7702 was proposed.
How Do Their Security Models Differ?
Control of an ERC-4337 smart account is defined entirely by its contract rules, so if a signing key is lost or leaked it can be replaced according to those rules, and the account and assets are unaffected. An EIP-7702 address works differently: the delegated contract can add rules such as spending limits and whitelists, but the original private key can always bypass them and move assets directly, and it cannot be replaced. EIP-7702 also carries its own phishing risk, since a single authorization signed to a malicious contract can drain the address.
Can EIP-7702 and ERC-4337 Be Used Together?
Yes. Once an ordinary address delegates via EIP-7702 to an ERC-4337-compatible account contract, it can plug into existing bundlers and paymasters to use sponsored gas, batched transactions, and other features. In other words, EIP-7702 solves how existing addresses upgrade, while ERC-4337 provides the infrastructure they can reuse afterward.
How Should a Business Choose?
If you are creating wallets for new users, as in embedded wallets, ERC-4337 smart accounts are more flexible and allow key rotation. If you are serving existing users with established addresses, EIP-7702 avoids the cost of migration, but the original private key remains a single point of failure, so it is best protected with MPC, with a policy engine controlling which contracts can be delegated to.
Conclusion
ERC-4337 trades a new address for fully programmable control, while EIP-7702 lets existing addresses upgrade without moving, and the two complement each other. Safeheron’s MPC Wallet-as-a-Service provides multi-chain MPC key management and a policy engine for businesses.
Planning a smart account strategy? Contact Safeheron’s Sales Team to Book a 1:1 Demo
