EIP-7702 Delegation Checker
Paste any Ethereum address below. This tool queries a public RPC node and reports whether the address currently delegates to smart contract code under EIP-7702 — the mechanism behind the October 2026 drainer losses. It never asks for a wallet connection, a signature, or a seed phrase.
How to read the result
- No delegation (code is empty) — the address behaves as a normal wallet. It has not signed an EIP-7702 authorization, or a previous delegation was reset.
- Delegated (code starts with 0xef0100) — the account currently points to a contract. That contract can act for the account. If you recognize the contract (a wallet app you use deliberately), it may be legitimate. If not, treat it as a compromise: reset the delegation andfollow the revocation walkthrough.
- Contract (regular smart contract) — the address is a deployed contract, not a delegated EOA. No EIP-7702 action applies.
What this tool does and does not do
- Does: one read-only
eth_getCodecall to a public RPC node for the address you enter. Nothing is stored, logged, or linked to you. - Does not: connect your wallet, ask for signatures, read balances, or list token approvals. For approvals userevoke.cash.
Why we built this
Following the October 2026 delegation attacks ($1.54M on October 10; sven.eth on October 14), readers asked for a simple way to check exposure without connecting a wallet to an unknown site. This checker is intentionally dumb: one RPC read per click, code open-source in our research, no tracking beyond a plain page-view counter.
FAQ
Is it safe to paste my address here?
An address is public data — anyone who has ever received funds from you knows it. The tool performs a read-only balance-free code check and stores nothing.
My address shows a delegation I do not recognize. What now?
Do not send funds to that address. Follow therevocation walkthrough: re-delegate to the zero address from your wallet's own interface, and treat deposits as exposed until cleared.
Does this prove my wallet is safe?
It proves there is no active EIP-7702 delegation right now. It cannot see token approvals, Permit2 signatures, or a compromised key. For a full audit use revoke.cash plus Etherscan.
Related research
- EIP-7702 Delegation Attacks: How to Check If Your Wallet Is Exposed
- CrimeEnjoyor: The Sweeper Behind 97% of EIP-7702 Drains
- EIP-7702 vs Permit2: Which Signature Drains Your Whole Wallet?
Community tool by Polymarket Research Collective (Srey Leak, security research). Not affiliated with Polymarket or the Ethereum Foundation. Educational purposes only.
