Account abstraction reaches mainstream wallets, quietly removing seed phrases

Several major wallets now create smart-contract accounts by default for new users, replacing the twelve-word seed phrase with recovery delegated to a set of trusted parties or devices.

The user-experience gain is real. Gas can be sponsored by applications, transactions can be batched, and a lost device no longer means permanent loss of funds.

The risks move rather than disappear. Recovery now depends on the guardian set remaining reachable and honest, and on the account contract itself being free of defects.

Upgradeability is the sharpest edge. An account whose implementation can be changed by a third party is only as secure as that party's key management and governance.

Auditors have concentrated on validation logic, where a permissive signature check allows an attacker to drain an account without ever holding its key. Two such issues were disclosed and patched this year before exploitation.

Advanced users continue to prefer externally owned accounts and hardware signers, and most wallets keep that path available even when it is no longer the default.