
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@timeleap/subnet-contracts
Advanced tools
This repository contains the staking logic used in the **Timeleap Network**, enabling participants to stake ERC-20 tokens with defined durations and withdrawal conditions. The system is built with modularity and upgradeability in mind, supporting safe and
This repository contains the staking logic used in the Timeleap Network, enabling participants to stake ERC-20 tokens with defined durations and withdrawal conditions. The system is built with modularity and upgradeability in mind, supporting safe and flexible future enhancements. Refer to TEP-5 for more information.
The staking system is composed of multiple contracts:
Manager contract deployed.By distributing responsibilities across specialized contracts, the system ensures that upgrades to logic can be performed safely without risking data or funds.
The architecture follows a separation-of-concerns pattern to maximize safety and flexibility:
Stakes and Bank) which remain
untouched during logic upgrades.Manager contract contains only logic and can be redeployed as needed
to introduce new functionality or fix issues.Repository contract serves as a pointer to the currently active
Manager contract, allowing frontends and other contracts to reference the
latest logic without requiring migrations or manual updates.This pattern ensures that:
This project is UNLICENSED. All rights reserved to Timeleap SA.
FAQs
This repository contains the staking logic used in the **Timeleap Network**, enabling participants to stake ERC-20 tokens with defined durations and withdrawal conditions. The system is built with modularity and upgradeability in mind, supporting safe and
We found that @timeleap/subnet-contracts demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.