Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
github.com/oraclize/ethereum-api
Thanks to this Ethereum API, enriching your smart-contracts with external data using Provable is very easy!
In Solidity it is as simple as inheriting the usingProvable
contract that you'll find in this repository.
This will provide your contract with functions like provable_query(...)
, which make it trivial for you to leverage our oracle technology straight away.
If you're using the Remix IDE it's even easier still - simply import the latest version of Provable into your contract like so:
import "github.com/provable-things/ethereum-api/provableAPI.sol";
Or if you need a specific version of the API, import that directly via:
import "github.com/provable-things/ethereum-api/contracts/solc-v0.8.x/provableAPI.sol";
There are versions of the API targetting the following solc
compilers:
solc-v0.4.25
solc-v0.5.x
solc-v0.6.x
solc-v0.8.x
To learn more about the Provable technology, please refer to our documentation here.
For working examples of how to integrate the Provable API into your own smart-contracts, head on over to the Provable Ethereum Examples repository. Here you'll find various examples that use Provable to feed smart-contracts with data from a variety of external sources.
There are even some examples here showing you how you can use Provable in a local Truffle development environment!
If you want to ask us something, or tell us something, there's loads of ways to get in touch:
❍ We have a Twitter
❍ And a Gitter
❍ Or a Website
❍ Alongside a Youtube
❍ Plus a Github
:skull: CAUTION: It is highly recommended to avoid using Serpent, especially in production. The serpent version of the Provable API herein remains for historical reasons but support for it is no longer maintained. Serpent is considered outdated and audits have shown it to be flawed. Use it at your own risk!
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.