> For the complete documentation index, see [llms.txt](https://help.tokenpocket.pro/en/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.tokenpocket.pro/en/security-knowledge/security-measure/eip-7702-guide.md).

# How to Use EIP-7702 Safely

EIP-7702 brings smart wallet features to standard accounts, making transaction batching, gas sponsorship, and more flexible permissions possible without changing your wallet address.

As adoption grows, scammers are also finding ways to abuse its delegation mechanism. Here’s what EIP-7702 does, where the risks come from, and how to use it safely.

### 1. What Is EIP-7702?

Most wallet accounts on EVM networks are externally owned accounts, or EOAs, controlled by a private key.

EIP-7702 allows an EOA to delegate execution to smart contract code while keeping the same address. This gives an existing wallet access to smart account features without requiring users to create a new wallet or move their assets.

### 2. What Does EIP-7702 Enable?

Traditional EOAs have limited functionality. Multiple on-chain actions often require separate confirmations, and users usually need the network’s native token to pay gas.

EIP-7702 makes it possible to:

* **Batch transactions:** Combine multiple actions into a single transaction.
* **Sponsor gas:** Let a DApp or another party cover network fees.
* **Add smart account features:** Support more flexible permissions and account logic.
* **Keep the same address:** Upgrade an existing account without moving assets.

TokenPocket supports EIP-7702 through its built-in Smart Wallet upgrade. Once upgraded, users can access features such as [gas-free transfers](https://help.tokenpocket.pro/en/wallet-operation/tp-tools/zero-gas-usdt-transfers), [gas payments in stablecoins](https://help.tokenpocket.pro/en/wallet-faq-en/multichain-wallet/how-to-use-stablecoins-as-network-fees-on-evm-chains), and [Agentic Authorization](https://help.tokenpocket.pro/en/wallet-operation/what-is-profit-and-loss/).

Upgrading natively from within TokenPocket is safe. There is no need to use an external website or third-party DApp.

### 3. Where Does the Risk Come From?

EIP-7702 itself is not a scam. The risk lies in the contract you delegate your account to.

A legitimate delegation connects your account to trusted smart contract code. A malicious delegation may give an attacker the ability to execute actions through your wallet.

Scammers take advantage of this by disguising malicious delegation requests as wallet upgrades, airdrop claims, account verification, or routine transactions. Their goal is to get you to approve an authorization you do not understand.

### 4. Common EIP-7702 Scams

#### Fake wallet upgrades

A phishing site may ask you to “upgrade to EIP-7702” or “activate your smart wallet.” The page may look legitimate, but the signature request could delegate your account to a malicious contract.

Always upgrade through TokenPocket itself.

#### Fake airdrops and rewards

Scammers often use airdrops, rewards, compensation, or account verification as bait. What looks like a simple claim may actually be an EIP-7702 delegation request.

#### Delegations hidden inside routine transactions

Some malicious DApps hide EIP-7702 authorizations inside what appears to be a normal swap, approval, or other transaction.

The wording on a DApp page can be misleading. What matters is the request displayed by your wallet.

#### Fake support agents and project teams

Scammers may impersonate customer support, project teams, or community admins. They may offer to fix a wallet issue or help you claim compensation, then send a phishing link and walk you through the signing process.

Never authorize your wallet through a link sent by someone who contacted you unexpectedly.

### 5. Already Upgraded? You Don’t Need to Undo It

If you upgraded natively through TokenPocket’s built-in Smart Wallet feature, there is no need to reset your wallet simply because EIP-7702 scams exist.

The main risk comes from signing a new delegation request from an untrusted website or DApp.

#### Resetting your wallet to an EOA

If you no longer need EIP-7702 features, you can reset your wallet to a standard EOA:

1. Open TokenPocket and go to **Wallet Details > Advanced Mode > Manage Smart Wallet**.

<figure><img src="/files/dmgkxpcuGYsivDeyNlHI" alt=""><figcaption></figcaption></figure>

2. Tap **Reset to EOA** and confirm the transaction.

<figure><img src="/files/oX4Jg5FkHaahzZymrP1Q" alt=""><figcaption></figcaption></figure>

You can upgrade again through TokenPocket at any time.

### 6. How to Stay Safe

#### Upgrade only within Trusted wallet like TokenPocket

Use TokenPocket’s built-in Smart Wallet feature. Never upgrade through an unfamiliar website, DApp, or link sent by another person.

#### Check the wallet prompt before signing

Do not rely on words such as “Claim,” “Verify,” or “Upgrade” shown on a website. Review the actual transaction or authorization request displayed by your wallet.

If the request does not match what you intended to do, reject it.

#### Pause when you see delegation-related terms

Be cautious if a request includes terms such as **Delegation**, **Set Code**, or **Batch Execute**.

These terms do not automatically mean the request is malicious, but you should understand why the permission is needed and which contract will receive it before signing.

#### Verify every DApp and link

Use official project channels to access DApps. Avoid links from private messages, group chats, search ads, or unfamiliar social media accounts.

#### Review your wallet regularly

Use TokenPocket’s Smart Wallet Manager and authorization checker to review your wallet status and existing permissions. Remove anything you no longer use or cannot verify.

### 7. What to Do If You Signed a Suspicious Authorization

If you notice unusual activity or believe you approved a malicious delegation:

* Stop interacting with the DApp immediately.
* Move any remaining assets to a new, secure wallet.
* Check the wallet’s current EIP-7702 delegation.
* Review and revoke any other suspicious permissions.
* Reset the wallet to an EOA if you no longer need EIP-7702 features.

Resetting to an EOA only removes the EIP-7702 delegation. It does not revoke token approvals, Permit permissions, or other authorizations. Those must be reviewed separately.

### 8. Frequently Asked Questions

#### Is EIP-7702 safe?

EIP-7702 is a legitimate Ethereum standard. The risk comes from delegating your account to malicious or unverified smart contract code.

#### Is it safe to upgrade through TokenPocket?

Yes. TokenPocket’s built-in Smart Wallet upgrade is the supported way to enable EIP-7702. Avoid upgrade requests initiated by third-party DApps or unfamiliar websites.

#### Do I need to reset my wallet after upgrading?

Not if you upgraded through TokenPocket. You can continue using EIP-7702 features normally.

Resetting to an EOA is optional if you no longer need those features.

#### Does every delegation request indicate a scam?

No. Delegation is a core part of EIP-7702. What matters is where the request came from, which contract your account will be delegated to, and whether the authorization is necessary for the action you are taking.

If you cannot verify those details, do not sign.

#### Can a malicious delegation put my wallet at risk without exposing my private key?

Yes. An attacker does not always need your private key or recovery phrase. If you sign a malicious delegation yourself, the delegated contract may gain the ability to execute actions through your account.

Protecting your recovery phrase is essential, but every signature matters too.