
Product
Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.
@leap-network/v4-timelocks
Advanced tools
Have questions or want the latest news?
Join the PoolTogether Discord or follow us on Twitter:
Documentation
https://v4.docs.pooltogether.com
Deployments
Timelock contracts assist with Phase 1 in the roll-out of V4. Granting authority to the operations teams to prevent a "bad actor" oracle from incorrectly setting a draw or prize distribution params.
The DrawCalculatorTimelock adds a timelock for PrizeDistributor to execute a claim with the most recently pushed PrizeDistribution params pushed.
Both L1TimelockTrigger/L2TimelockTrigger contracts set a timelock or a "cooldown" period in the linked DrawCalculatorTimelock contract. The DrawCalculatorTimelock routes calculate execution through a DrawCalculator contract for the linked PrizeDistributor contract.
The L1TimelockTrigger contract pushes DrawLib.Draw and DrawLib.PrizeDistribution params onto the DrawBuffer and PrizeDistributionBuffer contracts.
The L2TimelockTrigger pushes DrawLib.PrizeDistribution params onto a PrizeDistributionBuffer contract.
Core and Periphery contracts:
The project is made available as a NPM package.
yarn add @leap-network/pooltogether-contracts
The repo can be cloned from Github for contributions.
git clone https://github.com/pooltogether/v4-timelock
yarn
We use direnv to manage environment variables. You'll likely need to install it.
cp .envrc.example .envrc
To run fork scripts, deploy or perform any operation with a mainnet/testnet node you will need an Infura API key.
We use Hardhat and hardhat-deploy
To run unit & integration tests:
yarn test
To run coverage:
yarn coverage
Ensure your environment variables are set up. Make sure your Alchemy URL is set. Now start a local fork:
yarn start-fork
Setup account impersonation and transfer eth:
./scripts/setup.sh
Start a local node and deploy the top-level contracts:
yarn start
NOTE: When you run this command it will reset the local blockchain.
Deployment is maintained in a different repo.
Deployment is maintained in a different repo.
FAQs
PoolTogether V4 Timelocks
We found that @leap-network/v4-timelocks demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.

Research
/Security News
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.