Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@scallop-io/sui-scallop-sdk
Advanced tools
Typescript sdk for interacting with Scallop contract on SUI
This SDK is used to interact with sui-lending-protocol and is written based on another sui-integrated tool, sui-kit. It consists of seven main functional models, here's a brief introduction to each of them:
Scallop: Provide an entry to quickly create an instance (client, address, query, builder, utils) and complete initialization at the same time.
ScallopClient: Helps users encapsulate basic operations for interacting with the contract. Once the instance is created, it can be called directly for use.
ScallopAddress: Used to manage the addresses of the lending contract. It's prepackaged into the client and provides the addresses of mainly production environment for customers to query addresses, usually used in conjunction with the builder.
ScallopQuery: Used to encapsulate all methods for querying on-chain data of the scallop contract. More useful information will be provided here in the future, such as lending, collateral, or borrowing portfolios.
ScallopBuilder: Used for more detailed organization of the lending protocol's transaction blocks. You can build your own transaction combinations according to your needs by this model.
ScallopUtils: Used to encapsulate some useful methods that will be used when interacting with the scallop contract.
ScallopIndexer: It is used to query the on-chain index data through the SDK API. It is mainly used in query instances, effectively reducing the number of RPC requests..
Installation:
pnpm install @scallop-io/sui-scallop-sdk
Create an instance:
Note: Currently, this SDK only supports the mainnet network. When you use the testnet network, it will give errors because there is no address package ID for the testnet.
// Create an instance quickly through the`Scallop` class to construct other models.
const scallopSDK = new Scallop({
networkType: 'mainnet',
...
});
const scallopAddress = await scallopSDK.getScallopAddress(...);
const scallopQuery = await scallopSDK.createScallopQuery(...);
const scallopBuilder = await scallopSDK.createScallopBuilder(...);
const scallopUtils = await scallopSDK.createScallopUtils(...);
const scallopClient = await scallopSDK.createScallopClient(...);
const scallopIndexer = await scallopSDK.createScallopIndexer();
// Or, you can choose to import the class directly to create an instance.
import {
ScallopAddress,
ScallopBuilder,
ScallopQuery,
ScallopUtils,
ScallopIndexer,
ScallopClient,
} from '@scallop-io/sui-scallop-sdk'
const scallopAddress = new ScallopAddress(...);
const ScallopQuery = new ScallopQuery(...);
const ScallopBuilder = new ScallopBuilder(...);
const ScallopUtils = new ScallopUtils(...);
const scallopClient = new ScallopClient(...);
const ScallopIndexer = new ScallopIndexer();
// Remember to initialize the instance before using it
await scallopAddress.read();
await ScallopQuery.init();
await ScallopBuilder.init();
await ScallopUtils.init();
await scallopClient.init();
Below we will give a brief introduction to these instances respectively, and introduce the functions through test codes.
For the original codes, please refer to test
folder.
You need to set up the .env
file before testing. (Reference .env.example
)
Run the test
pnpm run test:unit test/index.spec.ts
pnpm run test:unit test/address.spec.ts
pnpm run test:unit test/builder.spec.ts
pnpm run test:unit test/query.spec.ts
pnpm run test:unit test/utils.spec.ts
pnpm run test:unit test/indexer.spec.ts
FAQs
Typescript sdk for interacting with Scallop contract on SUI
The npm package @scallop-io/sui-scallop-sdk receives a total of 1,240 weekly downloads. As such, @scallop-io/sui-scallop-sdk popularity was classified as popular.
We found that @scallop-io/sui-scallop-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.