
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@maci-protocol/coordinator
Advanced tools
Please refer to Offchain relayer service documentation for more information.
.env
file (see .env.example
).pnpm run generate-keypair
.pnpm run download-zkeys:{type}
(only test type is available for now).Authorization
header and coordinator private key for proof generation. Also it can be accessed through API method GET v1/proof/publicKey
.pnpm run start
to run the service.Authorization
header, where the value is encrypted with RSA public key you generated before. Header value contains message signature and message digest created by COORDINATOR_ADDRESSES
. The format is publicEncrypt({signature}:{digest})
.
Make sure you set COORDINATOR_ADDRESSES
env variable and sign any message with the addresses from your application (see AccountSignatureGuard).POST v1/proof/generate
API method or with Websockets (see dto spec, controller and wsgateway).It is possible to deploy subgraph using coordinator service.
First, you need to setup subgraph and create a project. Subgraph dashboard.
Then, set env variables:
# Subgraph name
SUBGRAPH_NAME="maci-subgraph"
# Subgraph provider url
SUBGRAPH_PROVIDER_URL=https://api.studio.thegraph.com/deploy/
# Subgraph deploy key
SUBGRAPH_DEPLOY_KEY=*******
# Subgraph project folder
SUBGRAPH_FOLDER=../subgraph
After deployment, subgraph url will be available in studio dashboard and you can use this type of url to get latest deployed version in your application:
https://api.studio.thegraph.com/.../{SUBGRAPH_NAME}/version/latest
FAQs
Coordinator service for MACI
We found that @maci-protocol/coordinator demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.