
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@intercoin/control
Advanced tools
Smart contract providing the collectively way to manage by calling any method from external contract
Lets a community collectively manage a wallet and tokens by calliing any method from external contract
when deploy it is no need to pass parameters in to constructor,
but need to run method init immediately after deploy
Once installed will be use methods:
| method name | called by | description |
|---|---|---|
| init | anyone | should be executed by the creator immediately after deployment. can be executed only the one time |
| addMethod | owner | setup method, fraction, minimum and roles to invoke/endorse |
| invoke | member who can invoke (see allowInvoke) | initiating transaction |
| endorse | member who can endorse (see allowEndorse) | endorsing transaction |
should be executed by creator immediately after deploy. can be executed only the one time
Params:
| name | type | description |
|---|---|---|
| communityAddr | address | address of community contract |
| GroupRolesSetting[] | tuple | array of groups. Each group should contain two roles: who can invoke and who can endorse. [[invokeRoleGroup1,endorseRoleGroup1], ...] |
method will initiate a creation transaction. return invokeID - invoke identificator and invokeIDWei - value in wei that can be send to contract directly to endorse
Params:
| name | type | description |
|---|---|---|
| contractAddress | address | address of external token |
| method | hexadecimal string | method of external token that would be executed |
| params | hexadecimal string | params of external token's method |
endorsed transaction by invokeID
Params:
| name | type | description |
|---|---|---|
| invokeID | uint256 | invoke identificator |
allow participant with invokeRoleName/endorseRoleName to invoke/endorse transaction with method of contractAddress
Note that attemptштп add method with different fraction/minimum will revert. so can be added only one time. But roles can be added it any time, just add the same fraction/minimum
Params:
| name | type | description |
|---|---|---|
| contractAddress | address | address of external token |
| method | hexadecimal string | method of external token that would be executed |
| invokeRoleName | string | invoke role name |
| endorseRoleName | string | endorse role name |
| minimum | uint256 | minimum |
| fraction | uint256 | fraction value mul by 1e10 |
happens while calling method invoke Params:
| name | type | description |
|---|---|---|
| invokeID | uint256 | invokeID |
| invokeIDWei | uint40 | invokeIDWei |
| contractAddress | address | token's address |
| method | hexadecimal string | method of external token that would be executed |
| params | hexadecimal string | method's params |
happens while calling method endorse or sending eth directly to contract Params:
| name | type | description |
|---|---|---|
| invokeID | uint256 | invokeID |
| invokeIDWei | uint40 | invokeIDWei |
happens when transaction should be executed Params:
| name | type | description |
|---|---|---|
| invokeID | uint256 | invokeID |
| invokeIDWei | uint40 | invokeIDWei |
happens when active group do smth Params:
| name | type | description |
|---|---|---|
| groupIndex | uint256 | group's index that has been active now |
| time | uint256 | timestamp in GMT time |
happens when group regained ownership Params:
| name | type | description |
|---|---|---|
| from | uint256 | group index of old owner |
| to | uint256 | group index of new owner |
| time | uint256 | timestamp in GMT time |
FAQs
Smart contract providing the collectively way to manage by calling any method from external contract
We found that @intercoin/control demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.