Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@slide-web3/safe-singleton-factory
Advanced tools
Singleton factory used by Slide related contracts
Singleton factory used by Safe related contracts based on https://github.com/Arachnid/deterministic-deployment-proxy
The original library used a presigned transaction without a chain id to allow deployment on different chains. Some chains do not allow such transactions to be submitted (e.g. Celo and Avalance) therefore this repository will provide the same factory that can be deployed via a presigned transaction that includes the chain id. The key that is used to sign is controlled by the Safe team.
To add support for new networks the same key used for the existing networks should be used to generate a presigned transaction for a new network. To request support for a new network please open a new issue.
To generate the deployment data for a new network the following steps are necessary:
MNEMONIC
in the .env
fileyarn compile <chain_id>
First send the native token on the network you want to deploy the contract on to the signerAddress
. You'll need about 8e15 wei to pay for the transaction.
Send the transaction. You can do so from your terminal with the following command:
curl -X POST --data '{"jsonrpc":"2.0","method":"eth_sendRawTransaction","params":[<raw_transaction>],"id":1}' <http_rpc_endpoint>
FAQs
Singleton factory used by Slide related contracts
The npm package @slide-web3/safe-singleton-factory receives a total of 0 weekly downloads. As such, @slide-web3/safe-singleton-factory popularity was classified as not popular.
We found that @slide-web3/safe-singleton-factory demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.