ScopeForge Web3: Smart Account Firewall

Compile DeFi intent into ERC-7715 permissions, decode EIP-7702 & Permit2 calldata, and block drainers via ERC-7710 Solidity enforcers.

Comment

🚨 Problem Statement: The 2025–2026 Smart Wallet & AI Agent Drain Crisis

Across r/ethereum, r/defi, r/ethdev, r/ledgerwallet, and Ethereum Magicians, developers and users consistently cite opaque transaction signing, over-privileged token approvals, and fragile AI agent wallet permissions as the #1 unsolved barrier preventing safe Web3 adoption.

Real-time 2025–2026 on-chain threat intelligence reveals how severe this crisis has become:

  1. 63% of EIP-7702 Delegations Are Malicious Sweepers (USENIX Security 2026 / SlowMist / Wintermute): Following Ethereum's May 2025 Pectra upgrade (Type 0x04 SetCode transactions), 63% of all analyzed EIP-7702 authorization tuples pointed to attacker-controlled sweeper contracts (0xef0100 || sweeperAddress), with 97% on Ethereum Mainnet sharing copy-paste drainer bytecode. Worse, signing an authorization with chainId = 0 allows attackers to replay a single off-chain signature across Ethereum, Base, Arbitrum, and Optimism simultaneously.
  2. $370 Million Lost in January 2026 Alone; 38% via Permit2 (CertiK & Scam Sniffer): Because users grant one-time ERC-20 approvals to canonical Permit2 (0x000000000022D473030F116dDEE9F6B43aC78BA3), attackers only need a single off-chain EIP-712 PermitSingle signature with amount = uint160.max to silently drain 100% of a wallet's USDC/USDT without an on-chain approval prompt.
  3. 3.4 Million/Month Post-Fusaka Address Poisoning Attacks (Blockaid): Following Ethereum's December 2025 Fusaka upgrade that lowered L1/L2 gas costs, automated vanity lookalike dust transfers (0x71C9...489A) surged 5.5x from 628,000 (Nov 2025) to 3,400,000 in January 2026, causing $62.25M in losses across just two victims who copied poisoned counterparties from their transaction history.
  4. ERC-7715 AI Agent Tool Overreach: As users connect autonomous DeFi agents via ERC-7715 (wallet_grantPermissions), indirect prompt injections hidden inside token metadata or IPFS DAO governance proposals trick agents into firing transfer, setApprovalForAll, or Permit2 signatures inside their active session window.

🛡️ Solution: ScopeForge Web3 (ChainForge)

ScopeForge Web3 solves this crisis by enforcing strict Separation of Concerns between Compile-Time Intent Reasoning and Deterministic On-Chain Runtime Enforcement:

AI never sits in the runtime path. AI is used strictly offline at compile time to translate human DeFi intent into an immutable 4-byte selector bitmap, an ERC-7715 wallet_grantPermissions JSON-RPC manifest, and a deployed Solidity ERC-7710 Caveat Enforcer (ScopeForgeCaveatEnforcer.sol) that validates every UserOperation deterministically in $O(1)$ gas.

Core Capabilities & Unique Value

  1. Pre-Signature EVM Calldata & EIP-7702 Authorization Tuple Decompiler:
    • Slices raw hex transactions (0x04ef0100 SetCode tuples, 0x2b67b570 Permit2.permitSingle, 0xa9059cbb poisoned transfers, 0x38ed1739 Uniswap swaps) into byte-offset ABI words ([0x00..0x04], [0x04..0x24], [0x24..0x44]).
    • Flags chainId = 0 cross-chain replay traps, uint160.max infinite allowances, and Post-Fusaka vanity lookalike addresses before a signature is produced, displaying the exact USD blast radius and Solidity revert error.
  2. Least-Privilege ERC-7715 Session Policy Compiler:
    • Classifies 10 authentic EVM Smart Account & DeFi protocol capabilities into 3 strict tiers:
      • ERC-7715 ALLOW (Autonomous Execution): readPoolSlot0 (0x3850c7bd), quoteExactInputSingle (0xc6a5026a), simulateUserOp (0x19822f7c), swapExactTokensForTokens (0x38ed1739 capped at <= $500).
      • SAFE MULTISIG COSIGN (Human Guardian Gate): supplyAaveCollateral (0x617ba037), permit2ApproveSpender (0x2b67b570).
      • HARD ON-CHAIN REVERT (0x Denied): authorizeEIP7702SetCode (0x04ef0100), transferTreasuryAsset (0xa9059cbb), setApprovalForAllNFT (0xa22cb465), castGovernanceVote (0x56781388).
    • Strips 60% to 70% of dangerous wallet authority before a session key is ever deployed.
  3. On-Chain Solidity ERC-7710 Caveat Enforcer (contracts/ScopeForgeCaveatEnforcer.sol):
    • Implements the canonical ICaveatEnforcer.beforeHook interface for MetaMask Delegation Toolkit (ERC-7710) and ERC-7579 Modular Smart Accounts.
    • Inspects Permit2 (0x000000000022D473030F116dDEE9F6B43aC78BA3) assembly calldata offsets [64..160] to block uint160.max allowances (ScopeForge__Permit2InfiniteAllowanceBlocked).
    • Blocks EIP-7702 0x04ef0100 delegations (ScopeForge__EIP7702SweeperBlocked) and verifies ERC-20.transfer recipients against the delegator's trustedCounterparties mapping (ScopeForge__AddressPoisoningDetected).
  4. Side-by-Side Exploit Replay & 12-Vector Web3 Red-Team Studio:
    • Replay 3 real-world poisoned on-chain triggers side-by-side (Unrestricted EOA: $392,500 Drained vs. ScopeForge ERC-7710 Smart Account: $0.00 Lost) and run a 12-vector adversarial stress test suite (100% Containment, 0 Escapes).
  5. Built-In 7-Slide Interactive Pitch Deck & Artifact Exporter:
    • One-click export of compiled .sol (ERC-7710 Enforcer), .json (ERC-7715 wallet_grantPermissions), and .yaml policy artifacts, plus an embedded 7-slide presentation deck (ScopeForge_Web3_Pitch_Deck.pdf).

⚙️ Technology Stack

  • Smart Contracts & Blockchain Protocols: Solidity ^0.8.24 (contracts/ScopeForgeCaveatEnforcer.sol), ERC-7710 (ICaveatEnforcer), ERC-7715 (wallet_grantPermissions), ERC-7579 Modular Execution Calldata, ERC-4337 EntryPoint v0.7, EIP-7702 (0x04 SetCode), Uniswap Permit2 (0x0000...78BA3), Aave V3, OpenZeppelin Governor.
  • Frontend & Decompiler Studio: Next.js 16 (App Router), React 19, TypeScript 5, Tailwind CSS v4, Lucide Telemetry Icons.
  • Compile-Time Intent Engine: Google Gemini 2.5 Flash (@google/genai) paired with a deterministic EVM 4-byte selector AST fallback compiler.
  • Automated Verification Suite: Node.js native test runner via tsx --test (tests/scopeforge.test.ts — 6 automated verification suites + 12 red-team exploit scenarios).

🔗 Key Links & Deliverables

Built With

  • account-abstraction
  • defi
  • eip-7702
  • erc-4337
  • erc-7710
  • erc-7715
  • ethereum
  • google-gemini
  • nextjs
  • react
  • solidity
  • tailwindcss
  • typescript
  • web3
Share this project:

Updates

Submission history