Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@solvprotocol/erc-3525
Advanced tools
This is reference implementation of ERC-3525.
ERC-3525, proposed by Solv Protocol, is a standard for the Semi-Fungible Token (or SFT) approved by the Ethereum community.
It defines a new type of digital asset characterized by the following key features:
- Unique ID and expressivity of ERC-721 non-fungible tokens. Compatibility with the ERC-721 token standard.
- It is fractionalizable, combinable, and computable.
- It can work like an account and nest other digital assets, including ERC-20 fungible tokens and NFTs, with support for token-to-token transfer.
- Programmable appearance, functionality, lockup, transfer, etc. Metadata is optimized to support dynamic inputs and more complex financial logic.
🧙Not sure how to get started? Check out ERC-3525 Starter Kit: Developer Edition - a step-by-step guide to get you started with the ERC-3525 reference implementation.🚀
npm install @solvprotocol/erc-3525@latest
Once installed, you can use the contracts in the library by importing them:
pragma solidity ^0.8.9;
import "@solvprotocol/erc-3525/ERC3525.sol";
contract MyERC3525 is ERC3525 {
constructor()
ERC3525("MyERC3525", "MY3525", 18) {
}
}
To keep your system secure, you should always use the installed code as-is, and neither copy-paste it from online sources nor modify it yourself.
This project is maintained by Solv Protocol with the goal of providing a ERC-3525 Reference Implementation for the SFT ecosystem. We address security through risk management in various areas such as engineering and open source best practices, scoping and API design, multi-layered review processes, and incident response preparedness.
Past audits can be found in audits/.
Smart contracts are a nascent technology and carry a high level of technical risk and uncertainty. Although the ERC-3525 Reference Implementation has been audited, using it is not a substitute for a security audit.
ERC-3525 Reference Implementation Contracts is made available under the MIT License, which disclaims all warranties in relation to the project and which limits the liability of those that contribute and maintain the project, including Solv Protocol. As set out further in the Terms, you acknowledge that you are solely responsible for any use of ERC-3525 Reference Implementation Contracts and you assume all risks associated with any such use.
Requirements
Run npm install
in the root directory
Run npm test
to run the unit tests
Run npm run transpile
to transpile the non-upgradable contracts to upgradeable contracts
ERC-3525 Reference Implementation is released under the MIT License.
ERC-3525 Reference Implementation power by Solv Finance
FAQs
ERC-3525 Reference Implementation for Solidity
The npm package @solvprotocol/erc-3525 receives a total of 183 weekly downloads. As such, @solvprotocol/erc-3525 popularity was classified as not popular.
We found that @solvprotocol/erc-3525 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.