
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@rarimo/evidence-registry
Advanced tools
[](https://www.npmjs.com/package/@rarimo/evidence-registry)
This EIP introduces an on-chain registry system for storing abstract statements, where the state of the system can be proven in zero knowledge without disclosing anything about these statements. Developers may use the singleton EvidenceRegistry
contract to integrate custom business-specific registrars for statement processing and proving.
Link to the ERC-7812.
You will find Solidity smart contracts implementation in the contracts
directory and Circom circuits in the circuits
directory.
Install all the required dependencies:
npm install
The proper tests have been written for both the smart contracts and circuits leveraging hardhat-zkit.
To run the all the tests, execute:
npm run test-all
The EvidenceRegistry
is deployed via a deterministic factory to the address 0x781246D2256dc0C1d8357c9dDc1eEe926a9c7812
. The EvidenceDB
is available at the address 0xb93fb4a2B4c441937b0d4feA4337999943bacf67
.
To reproduce the deployment on other chains, run npx hardhat compile && npx hardhat run ./scripts/deploy.ts --network <network>
.
[!IMPORTANT] Do not modify the code, lint solidity files, or update compiler/hardhat settings as this will change the smart contracts bytecode.
GLHF!
FAQs
[](https://www.npmjs.com/package/@rarimo/evidence-registry)
We found that @rarimo/evidence-registry demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.