Map validation, sponsorship and recovery separately
By the end, explain the diagram in your own words, solve the case and justify the correction.
Prerequisites : Token approvals and wallet security · Multisig: policy, backups and recovery
Level 3 · Advanced →Reading path · 17 / 17 · Advanced
A smart wallet can implement programmable validation and execution rules.
The essentials
A smart wallet can implement programmable validation and execution rules. This can enable spending limits, recovery arrangements or alternative authentication. Account abstraction is a family of approaches to separating account behaviour from a single fixed key model; implementations do not all use the same transaction path.
How it works
In an ERC-4337-style flow, a user operation can be handled by a bundler and validated through an EntryPoint contract. A paymaster may sponsor gas under conditions. These are specific roles, not assumptions that should be applied to every smart wallet. Sponsorship does not make network resources free or unlimited.
What to watch
Recovery and upgrades change who can gain control and under which conditions. Examine guardians, thresholds, delays, cancellation and module permissions. User-friendly login can hide significant powers, so evaluate the actual contract rules and operational dependencies behind the interface.
Understand the details
Test a wallet’s life cycle rather than only its first login: routine spending, loss of an authenticator, a failed sponsor, a blocked bundler and a proposed upgrade. Identify whether alternate routes exist and whether recovery can proceed without the original provider. A guardian design must balance legitimate recovery against unauthorised takeover. Document exactly which keys or participants can modify that policy.
Boundaries and common mistakes
Programmability creates flexibility and additional code to assess. A recovery feature does not prove that every failure is recoverable.
The mechanism at a glance
- Validate authority
- Arrange execution
- Fund gas
- Test recovery
Apply the lesson to a case
A fictional wallet requires two of three independent guardians and a 48-hour delay for recovery. One guardian is compromised. Assume the threshold is correctly enforced and no other recovery route exists.
The threshold and delay are separate conditions. Time alone does not supply the missing approval. Real assessments must also inspect upgrades and alternate recovery permissions.
Terms in this lesson
- Gas
- A measure of execution resources; gas units and the price per unit are separate quantities.
Prepare a correction note
Describe the passage and the proposed correction. This creates a local note for you to share; it sends nothing. Do not include personal or confidential information.