After auditing dozens of ERC‑4337 smart accounts, we’ve identified six vulnerability patterns that frequently appear.