donnoh_eth: a minimal PoC bypassing a timelocked smart wallet's timelock using EIP-8130
01:35, tested on Base testnet; before 8130 it cannot be bypassed.
以太坊研究日报
On Saturday donnoh_eth published a PoC on Base testnet showing how EIP-8130 can bypass the timelock of a timelocked smart wallet, which could not be bypassed before 8130; he sees it as a vulnerability, or at least something to be very careful about. AnkushinDaniil submitted an account authority lifecycle ERC defining how an account's keys and rules are added, rotated and revoked, with a binding to EIP-8141. chfast showed that EIP-8037 strands execution gas in the state gas reservoir for sibling calls like those in a 4337 bundle.

01:35, tested on Base testnet; before 8130 it cannot be bypassed.
(AnkushinDaniil), submitted. An account commits to its authorities as one root or keeps them as records; its authorization check accepts an authority only if it is in the current authority state and a witness covers the whole transaction, and a revoked authority is rejected no later than the next block. It gives a binding to EIP-8141 with a discovery interface (`authorityRoot`, `AuthorityStateChanged`), `SLOTS16`, a 16-slot recovery scheme, and `SLOTS16_SYNC` for the same account on another chain.
22:21, for September 1 at 21:00: client progress and AA proposal updates.
(chfast), submitted. `state_gas_from_gas_left` is frame-local while a slot's original value is its value at transaction start, so the refilling frame need not be the charging frame: with the reservoir empty, a first call's `SSTORE` to a fresh slot spills 97,920 from `gas_left`, a second call clears the slot, and the credit lands in the reservoir, the shape an ERC-4337 bundle takes.
Gcolvin merged extensive work on EIP-8337 definitions, constraints, validation and code, an EIP-7979 cleanup and consistent EIP-8173 terminology.
Gcolvin merged extensive work on EIP-8337 definitions, constraints, validation and code, an EIP-7979 cleanup and consistent EIP-8173 terminology.
Gcolvin merged extensive work on EIP-8337 definitions, constraints, validation and code, an EIP-7979 cleanup and consistent EIP-8173 terminology.
20:59, adding `--amount-max` and `--no-sim` to the `shield` command, the latter producing shield payloads before the account holds the funds.