
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@topocount/gasless-conviction-service
Advanced tools
A service that periodically calculates conviction using the Ethereum blockchain and Ceramic
First, copy the .env.example file:
$ cp .env.example .env
and edit it using your preferred file editor.
Second, start the service:
$ npm i && npm run start
Alternatively, start the service in a docker container
$ docker build . -t conviction-voting-service
$ docker run -p 3000:3000 -d conviction-voting-service
This service implements this design outlined by the Ceramic Team, though it doesn't completely abide by the draft schemas in a couple cases, for the purpose of optimizing chain state calculations.
This service allows a community to utilize the ERC20 token of their choice to participate in conviction voting. The design of this service strikes a balance between decentralization and cost of participation. This service does not store any application state locally, save for its own configuration. It relies on access to an evm rpc endpoint to obtain token events and Ceramic to store the state of conviction calculations and proposals.
proposals and information needed to calculate conviction on proposals is stored on [Ceramic]. Each service randomly generates a 32-byte seed used as a Ceramic private key. This allows only the service to manage the conviction state document.
The purpose of the conviction state document is that all the provided details on the document should be used to
This service was designed for use by any community interested is using conviction voting for a part of the decisionmaking process. In order to support this, blockchain state is taken directly from an RPC endpoint, which is effectively unopinionate. The real source can be an Infura endpoint, or even just a full (non-archive) node running in someone's home.
TODO: How do we denote proposals that have been enacted without onchain execution?
Core functionality of the Service:
The generic SDK should be pluggable for arbitrary onchain execution paths.
This means that the watcher service can watch any ERC20 and
The Gnosis Setup Guide details how to set up the module with a multsig and snapshot.
FAQs
A service that periodically calculates conviction using the Ethereum blockchain and Ceramic
We found that @topocount/gasless-conviction-service demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.