
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
@blessnetwork/bless-time-contract
Advanced tools
A Solana program that manages the Bless token airdrop process, vault reserves, administrator governance, and Merkle tree–based eligibility verification. Built with Anchor.
A Solana program that manages the Bless token airdrop process, vault reserves, administrator governance, and Merkle tree–based eligibility verification. Built with Anchor.
Program State Initialization
Create and configure the Bless Time state account.
Create a secure token vault controlled by the program.
Administrator Management
Vault Management
Recharge vault with additional BLESS tokens.
Track recharge records.
Merkle Tree Airdrop
Off-chain generated Merkle root for participant eligibility.
On-chain proof verification to ensure only eligible users can claim.
Prevent duplicate claims with per-user claim records.
Creates the Bless Time State and its vault account.
Context: InitBlessTimeState Parameters:
bump: u8 – PDA bump for bls_time_state.
vault_bump: u8 – PDA bump for vault_account.
Flow:
Creates bls_time_state PDA.
Creates token vault_account PDA with bls_time_state as authority.
Sets the admin to the payer.
Proposes a new admin account.
Context: BlsTimeProposeAdmin
Notes:
Callable only by the current admin_account.
Stores pending_admin in bls_time_state.
Rejects if proposed admin is the same as current or already pending.
Finalizes admin transfer.
Context: BlsTimeAcceptAdmin Notes:
Callable only by the pending_admin.
Updates admin_account to pending_admin.
Clears pending_admin after acceptance.
Sets the Merkle root for airdrop eligibility.
Context: BlessTimeSetMerkleTreeRoot Parameters:
Notes:
Only callable by admin_account.
Rejects default [0u8; 32] and unchanged roots.
Transfers tokens into the program’s vault.
Context: InitVaultRechargeRecord Parameters:
amount: u64 – Number of tokens to transfer.
Flow:
Uses CPI to SPL Token program.
Transfers from recharge_account to vault_account.
Claims tokens via Merkle proof.
Context: BlsTokenClaim Parameters:
amount: u64 – Claim amount.
locked_time: i64 – Unix timestamp when claim can be made.
proof: Vec<[u8; 32]> – Merkle proof.
record_bump: u8 – PDA bump for user_claim_record.
Flow:
Checks claim_paused flag.
Verifies Merkle proof with payer address, amount, and locked time.
Ensures vault has sufficient balance.
Checks that the current block time ≥ locked_time.
Creates user_claim_record PDA to prevent reclaims.
Transfers tokens from vault to user via CPI with PDA signing.
All admin-sensitive actions require correct signer checks.
Claim verification is backed by off-chain Merkle tree generation.
Duplicate claims prevented via PDA-bound UserClaimRecord.
Vault account is owned by program state PDA to prevent unauthorized transfers.
FAQs
A Solana program that manages the Bless token airdrop process, vault reserves, administrator governance, and Merkle tree–based eligibility verification. Built with Anchor.
We found that @blessnetwork/bless-time-contract demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.