Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@latch-wallet/account
Advanced tools
This package provides apis for ERC-4337 based smart account implementations
Using npm
package manager
npm i @latch-wallet/account
OR
Using yarn
package manager
yarn add @latch-wallet/account
Integrating and deploying Smart Accounts, building and sending user operations is a key offering of any toolkit designed for ERC4337. This package seamlessly integrates the essential features associated with ERC-4337 and simplifies the development of your Dapp's account and transaction rails with added usability features.
The account package achieves this by providing a comprehensive set of methods that enable developers to effortlessly create UserOperations. Combined with the sophisticated, developer friendly and scalable infrastructure of Biconomy, it ensures efficient and reliable transmission of these operations across multiple EVM chains.
Key | Description |
---|---|
signer | This signer will be used for signing userOps for any transactions you build. You can supply your your EOA wallet signer |
chainId | This represents the network your smart wallet transactions will be conducted on. Take a look following Link for supported chain id's |
rpcUrl | This represents the EVM node RPC URL you'll interact with, adjustable according to your needs. We recommend to use some private node url for efficient userOp building |
paymaster | you can pass same paymaster instance that you have build in previous step. Alternatively, you can skip this if you are not interested in sponsoring transaction using paymaster |
Note: if you don't pass the paymaster instance, your smart account will need funds to pay for transaction fees. | |
bundler | You can pass same bundler instance that you have build in previous step. Alternatively, you can skip this if you are only interested in building userOP |
// This is how you create BiconomySmartAccount instance in your dapp's
import { BiconomySmartAccount, BiconomySmartAccountConfig } from "@latch-wallet/account";
// Note that paymaster and bundler are optional. You can choose to create new instances of this later and make account API use
const biconomySmartAccountConfig: BiconomySmartAccountConfig = {
signer: wallet.getSigner(),
chainId: ChainId.POLYGON_MAINNET,
rpcUrl: "",
// paymaster: paymaster, // check the README.md section of Paymaster package
// bundler: bundler, // check the README.md section of Bundler package
};
const biconomyAccount = new BiconomySmartAccount(biconomySmartAccountConfig);
const biconomySmartAccount = await biconomyAccount.init();
// native token transfer
// you can create any sort of transaction following same structure
const transaction = {
to: "0x85B51B068bF0fefFEFD817882a14f6F5BDF7fF2E",
data: "0x",
value: ethers.utils.parseEther("0.1"),
};
// building partialUserOp
const partialUserOp = await biconomySmartAccount.buildUserOp([transaction]);
// using the paymaster package one can populate paymasterAndData to partial userOp. by default it is '0x'
const userOpResponse = await smartAccount.sendUserOp(partialUserOp);
const transactionDetails = await userOpResponse.wait();
console.log("transaction details below");
console.log(transactionDetails);
Finally we send the userOp and save the value to a variable named userOpResponse and get the transactionDetails after calling typescript userOpResponse.wait()
const transactionDetails = await userOpResponse.wait();
console.log("transaction details below");
console.log(transactionDetails);
FAQs
This package provides apis for ERC-4337 based smart account implementations
We found that @latch-wallet/account demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.