
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@pendle/core
Advanced tools
This repository contains the core smart contracts for the Pendle Protocol.
Prominent DeFi protocols have introduced various yield bearing tokens, like Aave's aToken or Compound's cToken, which has shown incredible growth and community acceptance. Pendle Protocol builds on top of this layer, by splitting the yield bearing tokens into two tokens: the Yield Token (YT) that represents the right to receive the yield, and the Ownership Token (OT) that represents the right to the underlying yield bearing tokens. This allows for the trading of yield, which has wide-ranging applications.
On top of yield tokenisation, Pendle Protocol has an AMM specifically designed for the trading of time-decaying assets, which aims to minimise impermanent loss (IL) for liquidity providers.
.env
, similar to .env.example
mainnet
and kovan
, the scripts will use the deploying key as all the multisig.scripts/deploy/deploy.ts
)yarn deploy:core --network <network>
deployments/<network>.json
RESET=true
:RESET=true yarn deploy:core --network <network>
scripts/manage/seed_test_contracts.ts
)
EXPIRY=<expiry_to_seed> yarn deploy:seed --network <network>
deployments/<network>.json
as welldeployments/<network>.json
:
tenderly login
scripts/manage/verify_tenderly.ts
)yarn verify --network <network>
ALCHEMY_KEY=<insert your ALCHEMY_KEY key here>
yarn test
yarn coverage:all
yarn hardhat node
yarn dev
yarn teleport
The primary license for Pendle Core is the Business Source License 1.1 (BUSL-1.1), see LICENSE
.
contracts/interfaces/
, contracts/governance/
and contracts/mock
are licensed under MIT
(as indicated in their SPDX headers)contracts/periphery/Timelock.sol
and contracts/tokens/PENDLE.sol
are also licensed under MIT
(as indicated in their SPDX header)contracts/libraries/
are licensed under GPL-2.0-or-later
(as indicated in their SPDX headers), see contracts/libraries/LICENSE
FAQs
Core smart contracts of Pendle Protocol.
The npm package @pendle/core receives a total of 0 weekly downloads. As such, @pendle/core popularity was classified as not popular.
We found that @pendle/core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.