Logo MASTR ufficiale MASTR
Menu

Smart account e governance

ERC-7579: wallet modules are part of the authority map

Validators, executors and hooks have different powers inside a modular smart account.

Aggiornato il 30 settembre 2026 · MASTR Labs

Articoli e grafici tecnici sono in inglese. La navigazione è disponibile in 7 lingue.

Guide di riferimento
  1. Interoperability has a narrow meaning
  2. Separate the module roles
  3. Installation and removal matter
  4. A practical account inventory
  5. Esempio concreto
  6. Fonti e originali

Interoperability has a narrow meaning

ERC-7579 defines minimal interfaces for modular smart accounts. Its goal is compatibility between account and module implementations, not certification of every module’s behaviour. A common interface makes installation and interaction more consistent; the installed code still determines what the wallet can authorise and execute. 1

Separate the module roles

Validators participate in deciding whether an operation is authorised. Executors can invoke execution through the account’s supported route. Fallback handlers extend how particular calls are handled. Optional hooks can add checks around execution. Combining these under one generic ‘plugin’ label loses the most important question: which capability is being granted, and under what restrictions?

Installation and removal matter

A permission review needs to include who can install modules, remove them, change their configuration or replace account implementation logic. Removing an interface from a dashboard does not by itself prove that on-chain authority was revoked. Conversely, a module with useful spending limits can be undermined by another unrestricted execution path. Inspect the whole account rather than evaluating each icon in isolation.

A practical account inventory

Document deployed account and module addresses, roles, limits, recovery authorities and any time delays. Check whether the client can clearly explain these relationships after its backend disappears. A signature request to install a module can change future authority without immediately transferring tokens. Users should be able to distinguish that permission change from a routine login or payment. ERC-4337’s operation flow is related infrastructure, not an automatic explanation of every installed module. 2

Modules carry different powers
Diagramma esplicativo. Apri a grandezza intera. Credits ↗ Also inspect who can install, configure and remove every module.

Esempio concreto

A wallet has a validator requiring owner approval and an executor permitted to carry out a limited recurring action. The review must check that the executor’s limits are enforced and that no other path bypasses them. Listing only the owner key gives an incomplete account of control.

Fonti e originali

  1. ERC-7579: minimal modular smart accounts
  2. ERC-4337: account abstraction

Continua a leggere

Smart account e governance →

MASTR

Sostieni la ricerca indipendente

Le indagini, le prove originali e le guide sono accessibili gratuitamente. Le donazioni volontarie contribuiscono a finanziare la ricerca e a mantenere disponibili gli strumenti MASTR.

Apri wallet