
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@aztec/archiver
Advanced tools
Archiver is a service which is used to fetch data on-chain data and present them in a nice-to-consume form.
Archiver is a service which is used to fetch data on-chain data and present them in a nice-to-consume form.
The on-chain data specifically are the following events:
L2BlockProposed
event emitted on Rollup contract,MessageAdded
event emitted on Inbox contract,The interfaces defining how the data can be consumed from the archiver are L2BlockSource
, L2LogsSource
and ContractDataSource
.
The archiver sync process periodically checks its current state against the Rollup contract on L1 and updates its local state.
After the implementation of delayed attestation verification, the Rollup contract on L1 no longer validates committee attestations. Instead, these are posted in calldata, and L2 nodes are expected to verify them as they download blocks. The archiver handles this validation during its sync process.
Whenever the archiver detects a block with invalid attestations, it skips it. These blocks are not meant to be part of the chain, so the archiver ignores them and continues processing the next blocks. It is expected that an honest proposer will eventually invalidate these blocks, removing them from the chain on L1, and then resume the sequence of valid blocks.
[!WARNING]
If the committee for the epoch is also malicious and attests to a descendant of an invalid block, nodes should also ignore these descendants, unless they become proven. This is currently not implemented. Nodes assume that the majority of the committee is honest.
When the current node is elected as proposer, the sequencer
needs to know whether there is an invalid block in L1 that needs to be purged before posting their own block. To support this, the archiver exposes a pendingChainValidationStatus
, which is the state of the tip of the pending chain. This status can be valid in the happy path, or invalid if the tip of the pending chain has invalid attestations. If invalid, this status also contains all the data needed for purging the block from L1 via an invalidate
call to the Rollup contract. Note that, if the head of the chain has more than one invalid consecutive block, this status will reference the earliest one that needs to be purged, since a call to purge an invalid block will automatically purge all descendants. Refer to the InvalidateLib.sol for more info.
[!TIP]
The archiver can be configured toskipValidateBlockAttestations
, which will make it skip this validation. This cannot be set via environment variables, only via a call tonodeAdmin_setConfig
. This setting is only meant for testing purposes.
As an example, let's say the chain has been progressing normally up until block 10, and then:
pendingChainValidationStatus
will point to block 11.pendingChainValidationStatus
will point to the new block 11 that needs to be purged.pendingChainValidationStatus
will point to 11. This is because the archiver does not follow BlockInvalidated
events.FAQs
Archiver is a service which is used to fetch data on-chain data and present them in a nice-to-consume form.
The npm package @aztec/archiver receives a total of 1,790 weekly downloads. As such, @aztec/archiver popularity was classified as popular.
We found that @aztec/archiver demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.