Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@gnosis.pm/dx-daostack
Advanced tools
[![Build Status](https://travis-ci.org/gnosis/dx-daostack.svg?branch=master)](https://travis-ci.org/gnosis/dx-react?branch=master)
The future of organizations is DAOs. The dxDAO is a next-generation DAO, designed to facilitate global, open trade.
The first dApp governed by the dxDAO will be the DutchX, an open trading protocol for ERC20 tokens using the Dutch auction mechanism. It determines a fair value for tokens, permits trading in low liquidity environments with no third party risk, and mitigates harmful trading practices like front-running
You can find all information and documentation about the DutchX here, and join the discussion in this Forum.
DAOStack's Smart contract Audit:
Useful, for example for working with the console in any deployed network
# Install dependencies
npm run install
# Restore the network info in the compiled contracts
npm run restore
# Check the networks :)
npm run networks
# Install dependencies
npm install
# In one tab: Run ganache
npm run rpc
# In another tab: Run the tests
npm run test
For running a particular test:
npx truffle test <name-of-the-test>
Local:
npm run migrate
Rinkeby:
npm run migrate -- --network rinkeby
Mainnet:
npm run migrate -- --network mainnet
Make sure the dependencies and addresses are updated:
npm run install
npm run restore
For every contract, you need to get the flattened version.
# Get the list of contracts:
ls -Rl contracts
# Flatten a contract
npx truffle-flattener contracts/DxAvatar.sol > build/DxAvatar.sol
To verify you will need to use the exact version of the compiler:
Check it here:
Verify:
FAQs
[![Build Status](https://travis-ci.org/gnosis/dx-daostack.svg?branch=master)](https://travis-ci.org/gnosis/dx-react?branch=master)
The npm package @gnosis.pm/dx-daostack receives a total of 0 weekly downloads. As such, @gnosis.pm/dx-daostack popularity was classified as not popular.
We found that @gnosis.pm/dx-daostack demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.