Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@gnosis-guild/zodiac
Advanced tools
Zodiac is a composable design philosophy and collection of standards for building DAO ecosystem tooling.
A composable design philosophy for DAOs, Zodiac is a collection of tools built according to an open standard.
The Zodiac collection of tools can be accessed through the Zodiac App available on Safe, as well as through the repositories below. If you have any questions about Zodiac, join the Gnosis Guild Discord.
This repository links to technical tutorials on how to configure each using the CLI. (For operator tutorials, visit zodiac.wiki.)
Zodiac enables:
The Zodiac open standard consists of Avatars, Modules, Modifiers, and Guards architecture:
1. Avatars are programmable Ethereum accounts, like Safe. Avatars are the address that holds balances, owns systems, executes transaction, is referenced externally, and ultimately represents your DAO. Avatars must expose an interface like IAvatar.sol
.
2. Modules are contracts enabled by an Avatar that implement some decision making logic. They should import Module.sol
.
3. Modifiers are contracts that sit between Modules and Avatars to modify the Module's behavior. For example, they might enforce a delay on all functions a Module attempts to execute. Modifiers should import Modifier.sol
and must expose an interface like IAvatar.sol
4. Guards are contracts that can be enabled on Modules and implement pre- or post-checks on each transaction that the Module executes. This allows Avatars to do things like limit the scope of addresses and functions that a module can call or ensure a certain state is never changed by a module. Guards should import BaseGuard.sol
.
yarn add @gnosis-guild/zodiac
Once installed, you can use the contracts in the library by importing them to your contract:
pragma solidity ^0.8.6;
import "@gnosis-guild/zodiac/contracts/core/Module.sol";
contract MyModule is Module {
/// insert your code here
}
Have you built something cool that belongs in this collection of Zodiac tools and want to add it to the list? Follow our contribution guidelines to open a PR!
If you have any questions about Zodiac, join the Gnosis Guild Discord. Follow @GnosisGuild on Twitter for updates.
The Zodiac documentation offers tutorials on how to use the Zodiac App, and detailed developer resources on how to build your own Zodiac module, modifier, or guard will be available soon.
Show your support for Zodiac by adding a badge or banner to your website or repository. Check out the preview images below, and select your preferred design for download. Please wrap the image with a hyperlink to Zodiac.
NOTE: To guarantee the most current design, copy the image URL and use the hosted version for embedding on your platform.
Your support through these badges and banners is greatly appreciated!
Banners
Badges
Copy and paste markdown (for README's) These snippets will render an image that links to this github repo.
[![White on black banner](https://raw.githubusercontent.com/gnosisguild/zodiac/master/branding/zodiac-badge-black-white.svg)](https://github.com/gnosisguild/zodiac)
[![Black on White Banner](https://raw.githubusercontent.com/gnosisguild/zodiac/master/branding/zodiac-banner-white-black.svg)](https://github.com/gnosisguild/zodiac)
Zodiac has been audited by the G0 group.
All issues and notes of the audit have been addressed in the release candidate v0.1.0 with commit hash 8a77e7b224af8004bd9f2ff4e2919642e93ffd85 and the subsequent release v1.0.0.
The audit results are available as a pdf in this repo or in the g0-group's github repo.
All contracts are WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Zodiac is created under the LGPL-3.0+ license.
FAQs
Zodiac is a composable design philosophy and collection of standards for building DAO ecosystem tooling.
We found that @gnosis-guild/zodiac demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.