
Security News
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.
@grappafinance/grappa-contracts
Advanced tools
This is the repository of the core component of Grappa, which is a decentralized settlement layer for options and spreads.
In our design, a option (derivative) token can be created by different margin engine. Users with different risk tolerance can choose among different engines based on gas cost, capital efficiency and risk of liquidation.
We also natively support call spread and put spread that can increase capital efficiency by a lot while being fully collateralized.
For detailed documentation about how the system architecture is designed, please visit docs
forge build
forge test
For auto linting and running gas snapshot, you will also need to setup npm environment, and install husky hooks
# install yarn dependencies
yarn
# install hooks
npx husky install
forge test
forge coverage
forge fmt
Simulate deployment for launch
forge script script/deploy-launch.sol --private-key <your PK> --fork-url <RPC-endpoint>
installation
pip3 install slither-analyzer
pip3 install solc-select
solc-select install 0.8.13
solc-select use 0.8.13
Run analysis
slither ./src/core/FullMargin
slither ./src/core/
With hardhat
yarn add @grappafinance/grappa-contracts
// or
npm install @grappafinance/grappa-contracts
With Foundry
forge install grappafinance/core
Then you will be able to import the libraries or contract interface
pragma solidity ^0.8.0;
import "@grappafinance/grappa-contracts/src/libraries/ActionUtil.sol";
FAQs
option protocol built with forge template
We found that @grappafinance/grappa-contracts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.