
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@biconomy-devx/account-contracts-v2
Advanced tools
Smart Contract Wallet (SCW) contracts for Biconomy SDK. Enables Account Abstraction, Smart Account, ERC4337, and ERC6900 functionalities.
Biconomy Smart Account is a smart contract wallet focused on implementing Account Abstraction. It builds on the core concepts of Gnosis and Argent safes and is compliant with ERC-4337 and ERC-6900.
Before diving in, place a mnemonic in a .secret
file at the root.
Remember: Never commit this file or share it publicly.
Setup: Clone the repository and install dependencies.
git clone https://github.com/bcnmy/scw-contracts.git
cd scw-contracts
npm install
Configuration: Create a .secret
file at the root to store your mnemonic.
Note: Never commit this file.
shell echo "your mnemonic here" > .secret
Below are the commands you can use for various tasks:
to init or update submodules
git submodule update --remote
git submodule update --init
you can alternatively also run forge install.
Run regular tests:
npx hardhat test
For Bundler Integration Tests, first install realpath
:
brew install coreutils
Then, run the Bundler Integration Tests:
yarn bundler-test
Compile contracts:
npx hardhat compile
Clean the environment:
npx hardhat clean
Start a local Ethereum node:
npx hardhat node
Deploy contracts:
npx hardhat run scripts/deploy.ts
TS_NODE_FILES=true npx ts-node scripts/deploy.ts
Display available accounts:
npx hardhat accounts
Get help on Hardhat commands:
npx hardhat help
Test with gas report:
REPORT_GAS=true npx hardhat test
Generate code coverage report:
npx hardhat coverage
Lint JavaScript and TypeScript files:
npx eslint '**/*.{js,ts}'
Automatically fix linting issues:
npx eslint '**/*.{js,ts}' --fix
Check formatting for JSON, Solidity, and Markdown files:
npx prettier '**/*.{json,sol,md}' --check
Automatically format files:
npx prettier '**/*.{json,sol,md}' --write
Lint Solidity contracts:
npx solhint 'contracts/**/*.sol'
Automatically fix issues in Solidity contracts:
npx solhint 'contracts/**/*.sol' --fix
This format separates the description from the command, making it clearer and more readable.
To verify on Etherscan, deploy a contract to an Ethereum network supported by Etherscan, like Ropsten. Set up your .env
file, deploy your contract, and then verify:
hardhat run --network goerli scripts/deploy.ts
npx hardhat verify --network goerli DEPLOYED_CONTRACT_ADDRESS "Hello, Hardhat!"
Boost your tests and scripts' speed by setting the TS_NODE_TRANSPILE_ONLY
environment variable to 1
in Hardhat's environment. More details are available in the documentation.
We have had our contracts audited by reputable firms to ensure their security. You can find the reports in the audits folder.
Biconomy Smart Account is an open-source project. Contributions are welcome. If you're interested in contributing, please check our contribution guidelines and feel free to submit pull requests or raise issues.
This project is licensed under the MIT License. See the LICENSE.md file for details.
FAQs
Smart Contract Wallet (SCW) contracts for Biconomy SDK. Enables Account Abstraction, Smart Account, ERC4337, and ERC6900 functionalities.
The npm package @biconomy-devx/account-contracts-v2 receives a total of 422 weekly downloads. As such, @biconomy-devx/account-contracts-v2 popularity was classified as not popular.
We found that @biconomy-devx/account-contracts-v2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.