Skip to content

What Changed From Original to Latest


Structural Comparison

AspectOriginal (Jan 29)Latest (May 22)
OpcodesAPPROVE, TXPARAMLOAD, TXPARAMSIZE, TXPARAMCOPY (4)APPROVE, TXPARAM, FRAMEDATALOAD, FRAMEDATACOPY, FRAMEPARAM (5)
APPROVE mechanismReturn codes 0-4 at top-level frameTransaction-scoped with scope operand (0x1, 0x2, 0x3), callable at any depth, double-approval prevention
APPROVE scope0x0 (execution), 0x1 (payment), 0x2 (both)0x1 (payment), 0x2 (execution), 0x3 (both)
APPROVE restrictionMust be top-level frameADDRESS == frame.target only
Frame structure[mode, target, gas_limit, data][mode, flags, target, gas_limit, value, data] (mode/flags split, per-frame value)
Outer envelope signaturesNo outer signatures field; all signatures carried inside frame.data of VERIFY framessignatures outer-envelope list carrying signature + algorithm + signer metadata, verified before frame execution. Default code reads from this list. Forward-compat hook for PQ signature aggregation (PR #11481, merged May 22)
Mode fieldJust mode value (0, 1, 2)Pure mode (0, 1, 2) with separate flags field
Flags fieldN/ABits 0-1 = approval scope constraint; bit 2 = atomic batch flag
Frame modesDEFAULT, VERIFY, SENDERSame three modes plus an expiry-verifier shape (VERIFY with target == EXPIRY_VERIFIER) admitted by PR #11662 (merged May 14)
Atomic batchingNot supportedBit 2 of flags; any frame mode may participate (PR #11652 merged May 12 lifted the previous SENDER-only restriction). Restrictive mempool tier separately forbids the flag inside the validation prefix
MAX_FRAMES10^3 (1,000)64
Per-frame costNoneFRAME_TX_PER_FRAME_COST = 475 gas
EOA supportNoneDefault code: ECDSA secp256k1 (low-s enforced) verification in VERIFY only. P256 removed from default code by PR #11621 (merged May 11). SENDER and DEFAULT no longer revert (PR #11621): top-level value transfer to a default-code account completes. The earlier RLP-call-batch payload was removed by PR #11577 (Apr 29) once native batching plus per-frame value covered the multi-call use case
Signature hashVERIFY data NOT elided (bug)VERIFY data properly elided except for expiry-verifier frames (whose data is the deadline and must be signed, per PR #11662). EIP-2718 type-byte prefix included (PR #11544, merged Apr 22)
Receipt statusNot specified0x0 failure, 0x1 success, 0x3 skipped-batch (introduced by PR #11621, merged May 11)
Expiry mechanismNoneEXPIRY_VERIFIER = address(0x8141) canonical contract; an expiry-verifier VERIFY frame carries an 8-byte unix-seconds deadline as frame.data. Public-mempool admission MUST drop transactions whose expiry has passed; TIMESTAMP opcode gets a carve-out for this canonical runtime only (PR #11662, merged May 14)
Mempool policyNot defined (just "Security Considerations" section)Comprehensive: validation prefixes, canonical paymaster, banned opcodes, MAX_VERIFY_GAS, expiry-verifier admission
Requires header2718, 48441559, 2718, 3607, 4844, 7623, 7702 (PR #11567 dropped 7997 on Apr 30; PR #11272 added 3607 on May 5 with an explicit carve-out for frame transactions; PR #11621 added 7623 and 7702 on May 11)
EIP-3607 origination checkInherited unconditionally (would block contract-account senders)Carved out for frame transactions: SENDER frames may originate from contract accounts; non-frame txs unchanged (PR #11272, merged May 5)
Authors7 co-authors8 co-authors (derekchiang added)
ReceiptNot specified in detailIncludes payer field and per-frame [status, gas_used, logs]; status == 0x3 for skipped batch entries
SENDER frame requirementsCould execute without prior approvalRequires sender_approved == true
Value in framesNot in frame structurePer-frame value field; non-zero only in SENDER frames. DEFAULT/VERIFY observe CALLVALUE = 0
VERIFY frame behaviorState changes allowedBehaves as STATICCALL, no state changes. APPROVE requirement narrowed to self_verify/only_verify/pay shapes (PR #11662 relaxed the previous "every VERIFY frame must call APPROVE" rule to "if the frame reverts, the tx is invalid")
Target resolutionDirect use of frame.targetExplicit resolved_target (null target resolves to tx.sender)
Deterministic deployerNot specifiedEIP-7997 is the canonical-but-optional factory; any stateless factory qualifies under the deploy-frame trace rules (PR #11567, merged Apr 30)
Deploy-frame mempool ruleN/ATrace-rule policy: write carve-out for CREATE/CREATE2/SETDELEGATE installing code at tx.sender and SSTOREs on tx.sender's storage; any contract may be frame.target (PR #11567)
Fork inclusion statusN/ACFI in Hegotá fork meta EIP-8081 (PR #11537, merged Apr 30)
Sibling EIPsN/AEIP-8250 Keyed Nonces (PR #11598 merged May 11) is the first EIP whose requires includes EIP-8141; EIP-8266 Expiring Nonces (PR #11692 merged May 22) is the second, with requires including both EIP-8141 and EIP-8250

Key Philosophical Shifts

The overall trajectory: from expressive abstraction toward deployability, compatibility, and mempool safety. The early drafts prioritized flexibility; the later drafts constrain that flexibility into something the network can reason about.

1. From Smart-Account-Only to EOA-First

The original spec assumed users would have smart accounts. The latest spec makes EOAs first-class citizens with default code, recognizing that most users won't migrate to smart accounts immediately.

This was the single biggest change to the EIP's trajectory, driven by adoption concerns raised by DanielVF and derek's commercial AA experience showing that hardware wallets and most consumer wallets are slow/unwilling to adopt smart contract accounts.

2. From Minimal Mempool Guidance to Full Policy

The original spec had a brief "Security Considerations" section with general warnings about DoS vectors. The latest has a comprehensive mempool policy with:

  • Specific structural rules (four recognized validation prefixes)
  • Banned opcodes list
  • Gas caps (MAX_VERIFY_GAS = 100,000)
  • A canonical paymaster contract (removing ERC-7562's reputation/staking complexity)
  • Non-canonical paymaster handling
  • Explicit acceptance and revalidation algorithms

3. From Top-Level APPROVE to Transaction-Scoped APPROVE

Originally, approval status was determined by the return code of the top-level frame, similar to how RETURN works but with extended codes (2, 3, 4). This had several problems:

  • Proxy-based accounts couldn't adopt it (proxy returns 0 or 1)
  • APPROVE in nested calls required awkward propagation
  • Return codes >1 from CALL broke backwards compatibility assumptions

Now APPROVE is a dedicated opcode that updates transaction-scoped variables (sender_approved, payer_approved) directly, from anywhere in the call stack. It's cleaner and more compatible with existing smart account patterns.

4. From Generic TXPARAM Opcodes to Specialized Data Access

The original TXPARAMLOAD/SIZE/COPY trio treated all transaction parameters uniformly. The redesign recognized that:

  • Most parameters are scalar (32 bytes or less) → TXPARAM handles these
  • Only frame data is variable-length → FRAMEDATALOAD/FRAMEDATACOPY handle this

This is more gas-efficient and easier to reason about.

5. From No Batching Control to Explicit Atomicity

The original spec had no mechanism for atomic multi-call. The latest provides fine-grained control via the atomic batch flag in the flags field (originally bit 11 of the packed mode, now bit 2 of the separate flags after the mode/flags split), allowing users to specify exactly which SENDER frames must succeed together. This was a response to the universal expectation from developers that "if I'm batching operations, they should be atomic," while preserving the non-atomic default needed for paymaster patterns.

6. Mode/Flags Split and Signature Hash Simplification

The original spec simply checked mode == VERIFY to elide frame data from the signature hash. An intermediate version packed flags into the upper bits of mode, requiring (frame.mode & 0xFF) == VERIFY to mask them out. The latest spec (after PR #11521) splits mode and flags into separate fields, so the signature hash check is a direct frame.mode == VERIFY comparison again. The split also makes the frame structure more explicit: approval scope and atomic batch are clearly separate from the execution mode, reducing the risk of accidental interactions.

7. From "No Value Field" to Per-Frame Value

The original spec deliberately had no value field in frames, on the principle that account code could send ETH via its own call encoding. That rationale held as long as every user had a smart account capable of encoding sub-calls. As the spec shifted toward an EOA-first, good-out-of-the-box experience (see Phase 1), the case for native per-frame value became hard to resist: a simple ETH transfer should not require the sender to construct an RLP-encoded call list, and wallets should not have to ship batching boilerplate to achieve parity with a regular transaction. PR #11534 (Apr 16) added a value field to the frame tuple, restricted to SENDER frames so that VERIFY stays STATICCALL-like and DEFAULT does not require ENTRY_POINT to fund transfers. The original rationale section was renamed from "No value in frame" to "Per-frame value."


Active Proposals That May Change the Comparison

As of May 25, 2026, several open PRs propose changes that would extend this comparison table:

ProposalPRImpact
Precompile-based VERIFY#11482Would allow VERIFY frames to target signature precompiles directly, changing the verification model (all reviewers approved)
Guarantors#11555Would introduce a "guarantor" payer that pays even if sender validation fails, letting mempool nodes skip sender simulation and admit shared-state-reading VERIFY frames
Payer approves before sender#11580Alternative to #11555: relaxes the ordering rule so a payer can approve before the sender, letting a payer commit to gas without simulating sender validation. Briefly auto-merged as #11575 on Apr 28 and reverted by #11579 on Apr 29; reopened as a draft
Extend with Guarantors, Flexible Nonces, and Signer Binding#11681Pedro Gomes's +810/-74 bundle folding guarantors (#11555), keyed nonces (EIP-8250-equivalent), and signer binding (EIP-8164-equivalent) into EIP-8141 via one signer envelope field and an AUTH_MANAGER system contract. Successor to the closed PR #11643 after PR #11662 (EXPIRY_VERIFIER) settled the expiry design as a verifier-frame contract; inverts the requires-chain layering that EIP-8250 established by absorbing the keyed-nonce and signer-binding features into EIP-8141 itself
Frame returndata opcodesUnder discussion (post #137)Proposed FRAMERETURNDATASIZE/FRAMERETURNDATACOPY to enable multi-step flows, no PR yet