A comprehensive engineering evaluation of smart contract wallet architecture, bundler operations, and hardware security roots of trust.
For over a decade, Ethereum accounts were inextricably bound to private keys: lose the key, lose the account; leak the key, lose all assets. ERC-4337 decouples account identity from key management by turning accounts into programmable smart contracts. However, the backend infrastructure supporting this ecosystem—bundlers, paymasters, and relayer nodes—demands enterprise-grade hardware protection.
Because bundlers pay upfront gas fees to submit UserOperation bundles to the EntryPoint contract, malicious actors can submit operations that succeed in simulation but fail on-chain, causing the bundler to lose transaction fees. WalletHSM eliminates this vulnerability by executing rigorous pre-flight validations in an isolated hardware execution sandbox.
Sponsoring gas fees for end users requires managing significant on-chain capital. WalletHSM acts as an automated, secure paymaster signer, verifying user entitlement, rate-limiting subsidy consumption, and protecting paymaster deposit reserves.