
Security News
curl Shuts Down Bug Bounty Program After Flood of AI Slop Reports
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.
@coolwallets/icx
Advanced tools
ICON API of CoolWalletS.
npm install @coolwallets/icx
import cwsICX from '@coolwallets/icx'
const ICON = new cwsICX(transport, appPrivateKey, appId)
Get address by address index.
const address = await ICON.getAddress(0)
console.log(address)
// hx76f46307b53686f2dd4a2c8ca2f22492e842c4bf
The address generated is compatible to BIP44 with account and change set to 0, which means calling getAddress(i) will get the address of folllowing BIP44 path:
m/44'/60'/0'/0/{i}
In the design of current hardware, we only support path m/44'/60'/0'/0/{i} for speed optimization. This might change in the future and we will then open a more general interface to deal with custom path.
Sign ICON Transaction. We suggest you to use Icon Official SDK to build an unsigned transaction.
const txObj = new IconBuilder.IcxTransactionBuilder()
.from('hx76f46307b53686f2dd4a2c8ca2f22492e842c4bf')
.to('hxe86b015c06145965931aff551d4958256a86226e')
.value(IconAmount.of('0.023', IconAmount.Unit.ICX).toLoop())
.stepLimit(IconConverter.toBigNumber(100000))
.nid(IconConverter.toBigNumber(1))
.version(IconConverter.toBigNumber(3))
.timestamp(timestamp)
.build();
// Returns raw transaction object
const rawTx = IconConverter.toRawTransaction(txObj);
// sign with address index 0
const signedTx = await ETH.signTransaction(rawTx, 0)
The signed transaction will be in form of Object, which you can use the official sdk to broadcast.
FAQs
ICON (ICX) sdk for CoolWalletS
We found that @coolwallets/icx demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.

Product
Scan results now load faster and remain consistent over time, with stable URLs and on-demand rescans for fresh security data.

Product
Socket's new Alert Details page is designed to surface more context, with a clearer layout, reachability dependency chains, and structured review.