
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@satoshipay/stellar-sep-6
Advanced tools
[Stellar Ecosystem Proposal 6 - "Anchor/Client interoperability"](https://github.com/stellar/stellar-protocol/blob/master/ecosystem/sep-0006.md) client SDK, allowing Stellar wallets to withdraw or deposit third-party fiat or crypto assets like USD, EURT,
Stellar Ecosystem Proposal 6 - "Anchor/Client interoperability" client SDK, allowing Stellar wallets to withdraw or deposit third-party fiat or crypto assets like USD, EURT, BTC, ETH, ...
That means that users can send EURT to the anchor, requesting a payout in fiat EUR to their SEPA account via bank transfer, for instance.
Note: This package is still considered experimental. Breaking changes should be expected.
npm install @satoshipay/stellar-sep-6
# or with yarn:
yarn add @satoshipay/stellar-sep-6
import { fetchTransferServerURL } from "@satoshipay/stellar-sep-6"
import { Server } from "stellar-sdk"
const horizon = new Server("https://stellar-horizon.satoshipay.io/")
const eurtIssuer = "GAP5LETOV6YIE62YAM56STDANPRDO7ZFDBGSNHJQIYGGKSMOZAHOOS2S"
const transferServerURL: string | null = await fetchTransferServerURL(
horizon,
eurtIssuer
)
import { TransferServer } from "@satoshipay/stellar-sep-6"
const transferServer = TransferServer(transferServerURL)
const info = await transferServer.fetchInfo()
import { TransferServer } from "@satoshipay/stellar-sep-6"
import { Keypair } from "stellar-sdk"
const myKeypair = Keypair.fromSecret("S...")
const transferServer = TransferServer(transferServerURL)
const result = await transferServer.withdraw("bank_account", "EURT", {
account: myKeypair.publicKey(),
// The `fetchInfo()` result describes what needs to be passed here
dest: "DE00 1234 5678 9012 3456 00",
dest_extra: "NOLADEXYZ"
})
if (result.type === "success") {
// `result.data` contains the information where and how to send the tokens
// to initiate the withdrawal...
} else if (
result.type === "kyc" &&
result.data.type === "interactive_customer_info_needed"
) {
// Redirect to anchor's KYC page...
} else if (
result.type === "kyc" &&
result.data.type === "non_interactive_customer_info_needed"
) {
// Request KYC data from the user in our app, then send to anchor...
} else if (
result.type === "kyc" &&
result.data.type === "customer_info_status"
) {
// `result.data.status` will be "pending" or "denied"
// If the KYC succeeded, the anchor will not send this response, but `result.type = "success"`
}
import {
fetchAssetTransferInfos,
fetchTransferServers,
TransferInfo
} from "@satoshipay/stellar-sep-6"
import { Asset, Server } from "stellar-sdk"
const assets = [
new Asset("EURT", "GAP5LETOV6YIE62YAM56STDANPRDO7ZFDBGSNHJQIYGGKSMOZAHOOS2S"),
new Asset("USD", "GDUKMGUGDZQK6YHYA5Z6AY2G4XDSZPSZ3SW5UN3ARVMO6QSRDWP5YLEX")
]
const horizon = new Server("https://stellar-horizon.satoshipay.io/")
const assetTransferServers: Map<
Asset,
TransferServer | null
> = await fetchTransferServers(horizon, assets)
const assetTransferInfos: Map<
Asset,
AssetTransferInfo
> = await fetchAssetTransferInfos(assetTransferServers)
interface AssetTransferInfo {
deposit: TransferInfo["deposit"][""] // Deposit metadata for this asset
transferInfo: TransferInfo // Complete server metadata of this anchor
withdraw: TransferInfo["withdraw"][""] // Withdrawal metadata for this asset
}
We provide TypeScript type declarations for all responses of the /info
, /deposit
& /withdraw
endpoints. See src/responses.ts
.
GPL v3
FAQs
[Stellar Ecosystem Proposal 6 - "Anchor/Client interoperability"](https://github.com/stellar/stellar-protocol/blob/master/ecosystem/sep-0006.md) client SDK, allowing Stellar wallets to withdraw or deposit third-party fiat or crypto assets like USD, EURT,
The npm package @satoshipay/stellar-sep-6 receives a total of 0 weekly downloads. As such, @satoshipay/stellar-sep-6 popularity was classified as not popular.
We found that @satoshipay/stellar-sep-6 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.