
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@synthetixio/bfp-market
Advanced tools
The big fucking freaking perp market (or just BFP-Market) is a perpetual swap market, leveraging the capabilities of Synthetix v3 as its underlying infrastructure. bfp-market inherits core features from v2x, such as dynamic funding rates, PD (Premium/Discount) adjusted market prices, and asynchronous hybrid oracle-based order executions through Pyth.
In addition to these features, it also introduces various enhancements, including native multi-collateral support, improved dynamic keeper fees, user-adjustable keeper fees on order commitments, settlement hooks, account splitting/merging, improved liquidations, a host of quality-of-life improvements, a strong emphasis on gas optimization, and obviously built on Synthetix v3.
bfp-market's primary use case is to allow stable coin issuers, vaults, and other DeFi protocols to create a delta neutral perp, utilizing ETH and ETH LSTs as collateral. The end result is a new defi primitive that's yield bearing (through positive funding) and hyper-stable. All of this done completely decentralised and onchain.
To find more information on how to integrate BFP you can check out the docs here: L1 Perp (BFP) docs
# Ensure you're in the root of project.
cd synthetix-v3
# Install monorepo dependencies.
yarn
# Generate a testable artifacts.
yarn generate-testable
yarn build-testable
# Build and run bfp-market tests.
yarn workspace @synthetixio/bfp-market {build,test,test:stable}
FAQs
L1 perp market implementation
We found that @synthetixio/bfp-market demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.