New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details
Socket
Book a DemoSign in
Socket

@rabbitholegg/questdk-plugin-sushi

Package Overview
Dependencies
Maintainers
3
Versions
53
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@rabbitholegg/questdk-plugin-sushi

## Overview Sushi is a popular dex that is deployed on several EVM networks. The sushi plugin filters swap transactions made on sushi through the [route processor contract](https://arbiscan.io/address/0x09bd2a33c47746ff03b86bce4e885d03c74a8e8c#code), or t

latest
npmnpm
Version
1.0.0-alpha.55
Version published
Maintainers
3
Created
Source

Sushi swap Plugin

Overview

Sushi is a popular dex that is deployed on several EVM networks. The sushi plugin filters swap transactions made on sushi through the route processor contract, or the legacy V2 router.

Features

  • Network Support: Compatible with Ethereum, Optimism, Polygon, Base, and Arbitrum One.

Limitations

  • There may be some false positives related to the use of amountOutMin, since this value is affected by the amount of slippage set in the UI.
  • Sushi sometimes migrates their route processor contracts, which is the entry point for most trades. There is no way I can find to track the most current address, as it is not found in their core sdk.
  • Sushi dev mentioned there is also a V3 swapper contract and trident contract. The activity on the Swapper contract appears to only come from a few addresses. [The trident contract(https://arbiscan.io/address/0xd9988b4b5bbc53a794240496cfa9bf5b1f8e0523)] only sees ~1 swap per day on average on arbitrum, and it is very complex to add support for. At this point it is not worth the effort to add in support for.

Sample Transactions

FAQs

Package last updated on 21 Aug 2024

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts