tx.origin
The original EOA that started the transaction.
A global referring to the transaction's originating account. The `tx.origin == msg.sender` check was used as an 'EOA-only' guard; EIP-7702 makes it unsafe because a delegated EOA can run code.
Related cases
Related attack patterns