purse-py 0.0.1a0

Purse: Personalize your Wallet

Overview

Purse: Personalize your Wallet

Design

Purse is a (very) simple smart wallet for EOAs, using EIP-7702 for core functionality. Purse only works for EOAs since it uses the SetCode transactions on supported neworks to install and uninstall it.

Out of the box, Purse has no features other than controlling a set of "accessories" that it can install (and uninstall) at will. Through the accessories, Purse can expand it's capabilities, such as adding multicall support and enabling automation through 3rd party delegation services. The only invariant in Purse is that only the EOA can add or remove accessories by directly calling these methods to itself, which means it only works in a EIP-7702 context via EOA delegatecall.

Purse calls its accessories through the fallback method (__default__ method in Vyper), where the method ID of the calldata is used to load the target address. It will then forward the entire calldata to that previously-approved target as it gets called via DELEGATECALL. How the accessory chooses to handle the calldata is up to them, the rest of the calldata is simply passed through to it. Also note that beyond restrictions of how accessories can be added or removed, there are no invariants maintained through 3rd party accessories unless they implement those measures themsleves.

If any accessory call has a failure, Purse's call handling will raise it and not continue processing the transaction. This presents a nicer interface when debugging call failures without dealing with nonce management features. Therefore, if you need replay protection, your accessory should implement it for itself.

Additionally, since all accessory calls are executed using DELEGATECALL, technically all accessories use the shared storage space: your EOA account. It is highly recommended not to use stateful accessories without further security analysis of their interactions with other accessories, but stateful accessories are possible. If designing a stateful accessory, it is highly recommended to manage the entire storage lifecycle, as well to make use of storage namespacing to ensure that no conflicts will exist between accessories (unless desired). Purse makes no guarantees about storage namespacing, and it is potentially highly dangerous and could lead to total account compromise if implemented poorly, since this also potentially allows eliding Purse's own security invariants for accessory management.

Technically, Purse can probably work with Threshold Signature or MPC technology, but it is not advised at this time without a security review. In fact, using Purse at all is probably not advised as it is an un-audited experiment based on a half-baked idea I had from seeing 7702 in the wild.

---

Purse is inspired by The Diamond Standard and ds-proxy.

Contributing

This project is written in Vyper.

This project uses ape to compile, test and script it. See Installation Guide for help installing it.