Security News
Fluent Assertions Faces Backlash After Abandoning Open Source Licensing
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
@opengsn/paymasters
Advanced tools
A GSN paymaster is a contract that actually pays for a relayed request (as the whole point of GSN is that the calling account require and usually lack eth)
A GSN paymaster is a contract that actually pays for a relayed request (as the whole point of GSN is that the calling account require and usually lack eth)
This is the most naive paymaster: it will accept any request by any client. Obviously, you don't want to deploy that on mainnet, since any client will be able to make any number of requests to drain it.
This paymaster accepts only request from specific, known addresses. This way it is protected from anonymous attack, but requires an extra step of whitelisting all valid addresses.
An example paymaster that tries to mitigate abuse by anonymous clients: It requires the client to perform a "proof of work" that is verified on-chain. the "approval data" should contain a hash over the caller's address and nonce.
A paymaster that requires the calling account to have a specific token. The paymaster will pre-charge the user with the equivalent value of tokens before making the call (and refund it with the excess after the call)
The client doesn't have to have eth, but has to have an approval
for the paymaster to pull tokens from its account (for an ETH-less account, this can be done using DAI's permit
method, or using the next paymaster:)
A specific TokenPaymaster, that can also deploy a proxy account. Since the paymaster also deploys the proxy, it also makes this proxy "approve" the token, so the paymaster can charge the account with tokens - even for the proxy creation - and then for all future requests.
These contracts are provided as an example, and should NOT be deployed as-is into a real network. None of them have passed a security audit. Without a careful configuration, a caller can "grief" the paymaster by making many anonymous calls, and thus drain the paymaster's balance.
FAQs
A GSN paymaster is a contract that actually pays for a relayed request (as the whole point of GSN is that the calling account require and usually lack eth)
The npm package @opengsn/paymasters receives a total of 6 weekly downloads. As such, @opengsn/paymasters popularity was classified as not popular.
We found that @opengsn/paymasters demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.