Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@across-protocol/app-sdk
Advanced tools
The official SDK for integrating Across bridge into your dapp.
TypeScript package for building on top of the Across Protocol
The @across-protocol/app-sdk
provides useful abstractions on top of Across' Smart Contracts and Quotes API.
To learn more visit our docs.
To get started, install the app sdk and its peer dependency viem.
pnpm i @across-protocol/app-sdk viem
AcrossClient
Firstly, you need to set up the AcrossClient
and configure the chains you want to support.
import { createAcrossClient } from "@across-protocol/app-sdk";
import { mainnet, optimism, arbitrum } from "viem/chains";
const client = createAcrossClient({
integratorId: "0xdead", // 2-byte hex string
chains: [mainnet, optimism, arbitrum],
});
Now, you can retrieve a quote for a given route.
import { parseEther } from "viem";
// WETH from Arbitrum -> Optimism
const route = {
originChainId: arbitrum.id,
destinationChainId: optimism.id,
inputToken: "0x82aF49447D8a07e3bd95BD0d56f35241523fBab1", // WETH arb
outputToken: "0x4200000000000000000000000000000000000006", // WETH opt
};
const quote = await client.getQuote({
route,
inputAmount: parseEther("1"),
});
Note that we provide additional utilities for retrieving available routes, chain details, and token infos. See here.
After retrieving a quote, you are ready to execute it.
import { useWalletClient } from "wagmi";
const wallet = useWalletClient();
await client.executeQuote({
walletClient: wallet,
deposit: quote.deposit, // returned by `getQuote`
onProgress: (progress) => {
if (progress.step === "approve" && progress.status === "txSuccess") {
// if approving an ERC20, you have access to the approval receipt
const { txReceipt } = progress;
}
if (progress.step === "deposit" && progress.status === "txSuccess") {
// once deposit is successful you have access to depositId and the receipt
const { depositId, txReceipt } = progress;
}
if (progress.step === "fill" && progress.status === "txSuccess") {
// if the fill is successful, you have access the following data
const { fillTxTimestamp, txReceipt, actionSuccess } = progress;
// actionSuccess is a boolean flag, telling us if your cross chain messages were successful
}
},
});
The method will execute a quote by:
You can use the onProgress
callback to act on different stages of the execution.
Have a look at our example app for a more detailed usage of this method.
Across enables users to seamlessly interact with your dApp or chain using assets from other chains.
To stake native ETH in one step:
Note: If your calldata depends on the output amount, you must use the update()
function.
import { type Amount } from "@across-protocol/app-sdk";
import { encodeFunctionData } from "viem";
import { optimism } from "viem/chains";
// constants
const userAddress = "0xFoo";
const multicallHandlerOptimism = "0x924a9f036260DdD5808007E1AA95f08eD08aA569";
export const WETH_OPTIMISM = {
chain: optimism,
abi: WethAbi,
address: "0x4200000000000000000000000000000000000006",
decimals: 18,
logoUrl:
"https://raw.githubusercontent.com/across-protocol/frontend/master/src/assets/token-logos/weth.svg",
name: "Wrapped Ether",
symbol: "WETH",
} as const;
export const STAKE_CONTRACT = {
address: "0x733Debf51574c70CfCdb7918F032E16F686bd9f8",
chain: optimism,
abi: StakerContractABI,
} as const;
// WETH unwrap action
function generateUnwrapCallData(wethAmount: Amount) {
return encodeFunctionData({
abi: WETH_OPTIMISM.abi,
functionName: "withdraw",
args: [BigInt(wethAmount)],
});
}
// STAKE action
function generateStakeCallData(userAddress: Address) {
return encodeFunctionData({
abi: STAKE_CONTRACT.abi,
functionName: "stake",
args: [userAddress],
});
}
const unwrapAndStakeMessage = {
actions: [
{
target: WETH_OPTIMISM.address,
callData: generateUnwrapCallData(inputAmount),
value: 0n,
// we only update the calldata since the unwrap call is non-payable, but we DO care about the output amount.
update: (updatedOutputAmount) => {
return {
callData: generateUnwrapCallData(updatedOutputAmount),
};
},
},
{
target: STAKE_CONTRACT.address,
callData: generateStakeCallData(userAddress),
// 🔔 the initial value may be set equal to the output amount. This MUST be updated via the `update()` function below oir this call will fail!
value: inputAmount,
// now we MUST update msg.value since this last call is calling a payable function.
update: (updatedOutputAmount) => {
return {
value: updatedOutputAmount,
};
},
},
],
fallbackRecipient: userAddress,
};
After specifying a cross-chain message, you simply can fetch a quote the same way as a normal bridge
const route = {
originChainId: arbitrum.id,
destinationChainId: optimism.id,
inputToken: "0x82aF49447D8a07e3bd95BD0d56f35241523fBab1", // WETH arbitrum
outputToken: "0x4200000000000000000000000000000000000006", // WETH optimism
};
const quote = await client.getQuote({
route,
inputAmount: parseEther("1"),
// 🔔 Notice the recipient is not the staking contract itself or even the user, but the contract that will execute our cross chain messages
recipient: multicallHandlerOptimism,
crossChainMessage: unwrapAndStakeMessage,
});
If the quote is available, you can execute like so
import { useWalletClient } from "wagmi";
const wallet = useWalletClient();
await client.executeQuote({
walletClient: wallet,
deposit: quote.deposit, // returned by `getQuote`
onProgress: (progress) => {
// handle progress
},
});
TODO
TODO
TODO
@across-protocol/app-sdk
ReferenceFor the full detailed reference see here.
AcrossClient
FAQs
The official SDK for integrating Across bridge into your dapp.
The npm package @across-protocol/app-sdk receives a total of 194 weekly downloads. As such, @across-protocol/app-sdk popularity was classified as not popular.
We found that @across-protocol/app-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.