EIP-8130 Keystore Accounts

Appearance

Appendix ​

Sources ​

Complete PR Timeline ​

Merged ​

DatePRAuthorDescription
2026-02-28#11186chunter-cbOriginal submission: keys/verifiers model, no scope, no lock, TBD transaction-type constants
2026-03-03#11367chunter-cb"Revisions" - unifies account_initialization/key_changes into a single typed account_changes array, introduces Account Lock, adds an ERC-1271 isValidSignature fallback authorization path, adds MAX_ACCOUNT_CHANGES
2026-03-03#11372chunter-cbMotivation section wording update
2026-03-04#11374chunter-cbVerifier gas and cross-chain signature tweaks
2026-03-05#11378chunter-cb"Slot derivations left to final contract" - removes hardcoded storage-slot derivation formulas from the spec
2026-03-06#11380chunter-cb"Simplify for initial EIP" - renames keys to owners, drops on-chain public-key storage
2026-03-07#11382chunter-cb"Clear up naming and k1 behaviour"
2026-03-09#11388chunter-cb"Enable permissionless payer" - introduces the scope byte model, renames IAuthVerifier to IVerifier, replaces the EIP-1153 transient-storage Transaction Context with a dedicated precompile
2026-03-20#11428chunter-cb"Adjust account config interface, small clean up"
2026-04-02#11478chunter-cb"Eip 8130 nonce and EOA delegation changes" - packed nonce field, nonce-free mode via NONCE_KEY_MAX, explicit EOA revocation marker, ECRECOVER_VERIFIER sentinel
2026-04-04#11483chunter-cb"Contract updates" - Account Configuration Contract interface refinements
2026-04-14#11492chunter-cb"Fix sentinel addresses" - drops requires: 7702
2026-05-04#11591pochenai"Prevent cross-sender payer signature replay"
2026-05-11#11526chunter-cb"Move from to sender" - renames the transaction field from to sender
2026-05-11#11647chunter-cb"Add canonical verifier set" - introduces the canonical/allowlisted verifier concept and eth_getAcceptedVerifiers
2026-05-12#11651chunter-cb"Tighten verifier allowlist language"
2026-05-12#11654chunter-cb"Update EIP-8130 gas and verifier validation"
2026-06-02#11757chunter-cb"Resolve constants, gas accounting, and interface cleanups" - assigns AA_TX_TYPE = 0x7B, AA_PAYER_TYPE = 0x7C
2026-06-02#11752chunter-cb"Define signature-invariant nonce-free replay identifier" - introduces replay_id
2026-06-02#11609pochenai"Add create entry existing-account and code-size guards" - adds requires: 170
2026-06-04#11764chunter-cb"Rename owners to actors and finalize Transaction Context naming"
2026-06-04#11765chunter-cbRenames IAccountConfiguration.verify to verifyActor
2026-06-04#11766chunter-cb"Add actor call policies and per-actor expiry"
2026-06-04#11767chunter-cb"Clean up, reorganize and finalize pass"
2026-06-05#11769chunter-cb"Fixes and clarifications"
2026-06-09#11782chunter-cb"Clarifications and clean up"
2026-06-09#11785chunter-cb"Rename verifier to authenticator"
2026-06-10#11791chunter-cb"Rlp abi correction"
2026-06-10#11794chunter-cbauthenticateActor now returns (scope, policyType, policyTarget)
2026-06-15#11805chunter-cbAdds a transaction-level metadata field
2026-06-15#11806chunter-cbPolicy clarification follow-up to #11766/#11794
2026-06-16#11808chunter-cb"Bind payer field into payer signature hash"
2026-06-16#11809chunter-cb"Relax delegate import restriction"
2026-06-17#11812chunter-cb"Charge initial-actor slot writes on account creation"
2026-06-17#11813chunter-cbClarifies the intrinsic-gas schedule is a recommended reference, not a protocol constant
2026-06-18#11815chunter-cb"Fold default-EOA revocation into a state flag" - DEFAULT_EOA_REVOKED, renames ECRECOVER_AUTHENTICATOR to K1_AUTHENTICATOR
2026-06-18#11816chunter-cb"Store self-actor secp256k1 config inline in account-state slot"
2026-07-02#11847chunter-cb"Clarify actor policies and simplify metadata field"
2026-07-08#11903chunter-cb"Renumber AA transaction types and add eth_call/eth_estimateGas RPC extension" - 0x7B/0x7C renumbered to 0x79/0x7A
2026-07-13#11918chunter-cb"Scope grants, PAYER split, operational ERC-1271, account lock" - largest structural rewrite since #11367
2026-08-11#12135chunter-cbKeystore alignment, millisecond validity window, local epochs, unified signed changes, typed signature envelopes, and expanded dependency list
2026-08-12#12148chunter-cbContract-audit reconciliation for self-revocation, canonical checks, and expired actor grants
2026-08-14#12173chunter-cbRight-aligns address-derived actorIds and removes create-code validation detail from the EIP
2026-08-19#12204chunter-cbL1/L2 adoption profiles, MAX_AUTHENTICATION_GAS, transaction context during authentication, and second-or-millisecond timestamps
2026-08-27#12250chunter-cbRemoves CONTRACT_ESTABLISHED and renumbers the account-state flags
2026-09-03#12295chunter-cbRenames EIP-8130 to "Keystore Accounts"
2026-09-14#12333chunter-cbAligns scope bits (SENDER renamed OPERATOR), policy storage by length, and parameterless importAccount() with the canonical repository
2026-09-16#12320chunter-cbApplies the EIP-7623 calldata floor and trims requires
2026-10-08#12386chunter-cbScopes EIP-8130 to the Keystore and moves the transaction type to EIP-8430

Open ​

DatePRAuthorDescription
2026-04-29#11578pochenai"Add opaque_input bytes field" - restores a tx-level metadata role, in tension with the shipped metadata field from #11805
2026-07-13#11919chunter-cb"Allow expiry in initial actors at create and import" - direct extension of #11918's policyData-at-create work
2026-08-19#12210chunter-cbDraft four-tier authenticator classification (CANONICAL, PURE, BOUNDED, ARBITRARY) for mempool policy
2026-09-03#12293pedrouidOptional checkpointed Keystore for non-admin actors with admin co-approval
2026-09-10#12313pedrouidOptional checkpointed actor source, an alternative to #12293
2026-09-14#12334chunter-cbDraft symmetric two-track epochs, IncrementEpoch, and transient actors
2026-09-15#12341AnkushinDaniilOptional model-neutral change digest for portable actor changes
2026-10-08#12462chunter-cbDraft Keystore simplification: two scope bits, no policy manager, no account lock
DateProposalStatusRelationship
2026-02-20ERC-8168 / ERC PR #1555OpenPayer service capability; October updates retargeted it at EIP-8430, the EIP-8130 Keystore, and EIP-8141
2026-07-15ERC-8340 / ERC PR #1883Open draftDeterministic CBOR encoding for the opaque metadata field; dormant since July 16
2026-07-22Base implementation PR #44MergedAdds an ERC-4337-compatible executeAttested path for chains without the transaction-context precompile; implementation only
2026-07-24Base implementation PR #45MergedAdds an account-scoped EIP-712 digest for ERC-1271 replay protection; implementation only
2026-08-06Base implementation PR #46, #55MergedResearch alignment, widened scope, and revised Keystore packing
2026-08-07Base implementation PR #63, #64MergedTyped signature envelopes and local-epoch sequencing
2026-08-10 – 2026-08-18Base implementation PR #76, #79, #82MergedEstablished-contract flag, expired-grant behavior, and final contract-review pass
2026-08-21EIP-8386 / PR #12218OpenTransaction Events View extension of the Transaction Context precompile
2026-08-21EIP-8387 / PR #12221OpenStateless Accounts, requires: 8130
2026-08-21EIP-8388 / PR #12222OpenKeystore Signatures for Execution Txs, requires: 8130
2026-08-25Expired Actor Pruning / PR #12240Open draftConsensus garbage collection of expired Keystore actors
2026-08-26 – 2026-09-02Base implementation PR #92, #95, #100MergedFlag removal, scope-bit reorder, and callback import that EIP PRs #12250 and #12333 then adopted
2026-08-26EIP-8397 / PR #12244Merged Oct 14EIP-8141 companion adding pure, fixed-gas authenticator signatures with an IAuthenticator-shaped interface
2026-08-29ERC-8403 / ERC PR #1979OpenAccount Authority Lifecycle, bound to EIP-8141 and mapped onto the EIP-8130 Keystore
2026-09-08 – 2026-09-29base/base PR #4924, #5250, #5366MergedMoves activation out of Cobalt to Everest and gates the Keystore to the never-scheduled Zenith fork
2026-09-28EIP-8430 / PR #12385OpenAA Transaction Type split out of EIP-8130

The canonical authenticator set's companion ERC still has no assigned number. The Celo CIP-64 discussion (posts #12-23) drove the transaction-type renumbering. Posts #24-26 explored non-admin initiation and actor management. Post #27 (July 30) proposed a permissionless public POLICY actor, answered in posts #28-29 (August 23) as an AlwaysValidAuthenticator. Posts #30-31 (August 28-30) raised cross-chain admin freshness, posts #32 and #34 discussed phase-skipping refunds, and posts #33 and #35 (September 2-11) led to PR #12320's calldata floor.

Closed (not merged) ​

PROpened -> ClosedAuthorReason
#111442026-01-21 -> 2026-01-29chunter-cbDuplicate initial submission, closed in favor of #11186 at maintainer abcoathup's request
#111942026-01-28 -> 2026-03-02chunter-cbCompanion "Token Gas Payments for EIP-8130" proposal; closed without a stated inline reason, functionality not pursued in the core EIP
#116122026-05-07 -> 2026-05-14pochenaiPartially accepted: two of four claimed vulnerabilities (C1, C2) folded into #11654; the other two (C3 multichain-change expiry, C4 auto-revocation on delegation) explicitly rejected by chunter-cb as intentional design choices
#116482026-05-11 -> 2026-06-04chunter-cbSuperseded by a clean rebase, #11766, after becoming unmergeable due to an eth-bot bug
#116552026-05-12 -> 2026-06-15chunter-cbDiscussion-only draft marked "DO NOT MERGE"; superseded by the shipped metadata field design in #11805
#117512026-06-01 -> 2026-06-18chunter-cbDraft-only proposal for delegated account creation at create time; no successor merged as of research date
#117582026-06-02 -> 2026-06-04chunter-cbPartially superseded and partially reversed by #11764, which kept the interface renames but dropped the proposed getter removals
#121852026-08-18 -> 2026-08-19chunter-cbFirst adoption-profile and bounded-authentication-gas draft, superseded by #12204
#121922026-08-18 -> 2026-08-19chunter-cbFollow-up transaction-context and timestamp draft, superseded by #12204
#122482026-08-27 -> 2026-09-03pedrouidProposed separate transaction, Keystore, and advanced-controls EIPs (8398/8401/8402); editors asked for one EIP per PR and abcoathup suggested a separate Keystore EIP

Key Contributors ​

NameRole
Chris Hunter (chunter-cb)EIP-8130 author (Coinbase/Base); authored the original submission, nearly all merged and open PRs, and the EthMagicians thread
abcoathupEIP editor; reviewed the original submission PRs (#11144, #11186), flagged a bad rebase and duplicate-PR cleanup
pochenaiCommunity contributor; submitted security-relevant PRs (#11591, #11609, #11612)
rmeissnerReviewer (Safe wallet); raised the self-call-versus-entrypoint design question and Safe-compatibility considerations on the EthMagicians thread
HelkomineCommunity participant; argued against baking payment semantics into the transaction format, proposed a nonceBitmap simplification
karlbCommunity participant; proposed the Celo CIP-64 migration compatibility path, drove the transaction-type renumbering, and flagged the missing EIP-7623 floor (post #33)
cyrusCommunity participant; prompted the forum clarification separating transaction-sender grants from admin configuration authority
amiecorsoBase implementation contributor; added account-scoped ERC-1271 replay protection in implementation PR #45 and opened the wallet-agnostic policy series
Agusx1211Community participant; raised cross-chain admin freshness (post #30) and reviewed the checkpointed Keystore PR #12293
AnkushinDaniilCommunity contributor; authored ERC-8403 and PR #12341, and reviewed the EIP-8387, EIP-8388, and EIP-8430 drafts
chugarchugarrCommunity participant; flagged the config-change auth blob leaking into replay_id on the EIP-8430 thread
jochem-brouwerEIP editor; requested changes on the EIP-8386, EIP-8387, EIP-8388, and pruning drafts
leekt (taek.eth)Author of EIP-8397, the EIP-8141 companion with an IAuthenticator-shaped authenticator scheme
pedrouidProposed the closed three-EIP decomposition (#12248) and the open checkpointed Keystore PRs (#12293, #12313)

External Resources ​

Competing Standards ​