
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@excubiae/contracts
Advanced tools
This package contains the smart contracts which define the composable framework for building custom attribute-based access control policies on Ethereum.
You can learn more in the Design section of the current documentation.
The extensions are ready to use Checker / Policy contracts that give unique features (e.g., enforcing a proof of membership for a Semaphore group with frontrunning resistance).
Please, follow the Guides section for an explanation on how to write, integrate & deploy; your own Checker & Policy contracts.
[!IMPORTANT]
Excubiae is currently in the MVP stage. Audits are not yet available. Expect fast development cycles with potential breaking changes — use at your own risk! Please, refer to release section for latest changes and updates.
You can install the excubiae contracts with any node package manager (bun
, npm
, pnpm
,yarn
):
bun add @excubiae/contracts
npm i @excubiae/contracts
pnpm add @excubiae/contracts
yarn add @excubiae/contracts
This package is configured to support the combination of Hardhat and Foundry, see the Hardhat's documentation to learn more.
Compile the smart contracts with Hardhat:
yarn compile:hardhat
Compile the smart contracts with Foundry's Forge:
yarn compile:forge
Run both in one command:
yarn compile
The package provides deployment scripts for the available extensions.
Deploy a Semaphore extension by providing the Semaphore contract address and group ID. This extension enforces membership proofs for a Semaphore group with frontrunning resistance.
Using Hardhat Ignition:
yarn deploy:semaphore-ignition --parameters '{"semaphoreAddress":"0x1234...5678","groupId":1}' --network sepolia
Using Hardhat task:
yarn deploy:semaphore-task --semaphore-address 0x1234...5678 --group-id 1 --network sepolia
Required parameters per deployment:
semaphoreAddress
: Address of the deployed Semaphore contractgroupId
: ID of the Semaphore group to check membership againstnetwork
: Network to deploy to (e.g., sepolia, hardhat, mainnet)Run Mocha to test the contracts (Typescript tests):
yarn test:hardhat
Run Foundry's Forge to test the contracts (Solidity tests):
yarn test:forge
Run both in one command:
yarn test
You can also generate a test coverage report:
yarn test:coverage
Or a test gas report:
yarn test:report-gas
You can generate smart contract documentation (book):
yarn docs:forge
FAQs
Excubiae contracts.
The npm package @excubiae/contracts receives a total of 439 weekly downloads. As such, @excubiae/contracts popularity was classified as not popular.
We found that @excubiae/contracts demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.