Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@walletconnect/core
Advanced tools
@walletconnect/core is a core library for WalletConnect, a protocol for connecting decentralized applications (dApps) to mobile wallets with QR code scanning or deep linking. It allows developers to integrate WalletConnect functionality into their applications, enabling secure and seamless interactions between dApps and wallets.
Initialize WalletConnect
This code initializes a WalletConnect connector with a specified bridge server and QR code modal. The connector is the main interface for establishing a connection between a dApp and a wallet.
const WalletConnect = require('@walletconnect/core');
const connector = new WalletConnect({
bridge: 'https://bridge.walletconnect.org',
qrcodeModal: QRCodeModal,
});
Create Session
This code creates a new WalletConnect session and generates a URI that can be displayed as a QR code. The QR code allows users to scan and connect their wallet to the dApp.
connector.createSession().then(() => {
const uri = connector.uri;
QRCodeModal.open(uri, () => {
console.log('QR Code Modal closed');
});
});
Send Transaction
This code listens for a successful connection event and then sends a transaction from the connected wallet. The transaction details such as recipient address, amount, and gas limit are specified in the `tx` object.
connector.on('connect', (error, payload) => {
if (error) {
throw error;
}
const { accounts } = payload.params[0];
const tx = {
from: accounts[0],
to: '0xRecipientAddress',
value: '0xAmountInWei',
gas: '0xGasLimit',
};
connector.sendTransaction(tx).then((result) => {
console.log('Transaction sent:', result);
}).catch((error) => {
console.error('Transaction error:', error);
});
});
Web3.js is a collection of libraries that allow you to interact with a local or remote Ethereum node using HTTP, IPC, or WebSocket. It provides functionalities for sending transactions, interacting with smart contracts, and more. Unlike @walletconnect/core, Web3.js does not focus on connecting dApps to mobile wallets via QR codes but provides a broader range of Ethereum-related functionalities.
Ethers.js is a library for interacting with the Ethereum blockchain and its ecosystem. It provides a concise and consistent interface for sending transactions, interacting with smart contracts, and more. Similar to Web3.js, Ethers.js does not specifically focus on WalletConnect functionalities but offers a comprehensive set of tools for Ethereum development.
Web3Modal is a library that allows developers to easily integrate multiple wallet providers into their dApps. It supports WalletConnect, MetaMask, and other popular wallets. While Web3Modal includes WalletConnect as one of its options, it provides a more generalized solution for connecting to various wallet providers.
Core Library for WalletConnect
This library is shared with the Browser Client and React-Native Client
For more details, read the documentation
FAQs
Core for WalletConnect Protocol
The npm package @walletconnect/core receives a total of 485,171 weekly downloads. As such, @walletconnect/core popularity was classified as popular.
We found that @walletconnect/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.