ERC-6900 is a standard for modular smart accounts. Instead of building every feature into the account itself, features are added as modules that can be installed and removed: a new way to sign in, a spending limit, a session key for a game, a recovery mechanism. Modules written for one ERC-6900 account work in any other compliant account. It builds on account abstraction and ERC-4337.
Types of Modules
- Validation modules decide whether an action is authorised: a passkey, a multisig check, a session key with limited rights.
- Execution modules add new functions to the account, such as recurring payments or automated actions.
- Hooks run before or after actions to enforce rules, such as daily spending limits or allowlisted contracts.
ERC-6900 or ERC-7579?
There are two modular account standards. ERC-6900 is the more prescriptive one: it defines in detail how modules declare their permissions and how the account manages them, which gives strong guarantees about what a module can do. ERC-7579 is a minimal standard focused on interoperability, with wide adoption among smart account implementations. Which one fits depends on the account you build on and the modules you need. We help you choose based on your ecosystem, not on preference for one camp.
What We Build
- Custom modules: spending limits, session keys for apps and games, social recovery, role-based permissions for teams.
- Integration of modular accounts into wallets and apps, including module installation flows users understand.
- Security reviews of modules, because a module with too many rights can control the whole account.
Frequently Asked Questions about ERC-6900
Why modular accounts instead of one smart account?
Flexibility and reuse. Users and apps can add exactly the features they need, and well-reviewed modules can be shared across accounts instead of rebuilt every time.
Are modules a security risk?
They can be. Installing a module gives it rights over the account, so modules must be reviewed and users must understand what they install. ERC-6900's explicit permission model is designed to limit that risk.
Do modular accounts work with paymasters?
Yes. They are ERC-4337 smart accounts, so paymasters and bundlers work the same way.
Who owns the code?
Ownership of the source code is set out in the contract, and the code can be fully yours, including documentation and tests.
Part of our work on Ethereum standards (EIPs and ERCs) and smart contract development.
See also smart account development.
Extend Your Smart Accounts
Tell us which features your users' accounts need. We will design modules that add them safely.