
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@walletconnect/ethereum-provider
Advanced tools
@walletconnect/ethereum-provider is an npm package that allows developers to integrate WalletConnect functionality into their Ethereum-based applications. It provides a bridge between decentralized applications (dApps) and mobile wallets, enabling users to interact with dApps using their mobile wallets.
Initialize WalletConnect Provider
This feature allows you to initialize the WalletConnect provider with your Infura ID. The provider can then be enabled to start connecting with mobile wallets.
const WalletConnectProvider = require('@walletconnect/ethereum-provider');
const provider = new WalletConnectProvider({
infuraId: 'YOUR_INFURA_ID' // Required
});
await provider.enable();
Send Transaction
This feature allows you to send a transaction using the WalletConnect provider. You need to specify the transaction parameters such as from, to, value, gas, and gasPrice.
const tx = await provider.request({
method: 'eth_sendTransaction',
params: [{
from: '0xYourAddress',
to: '0xRecipientAddress',
value: '0xAmountInWei',
gas: '0xGasLimit',
gasPrice: '0xGasPrice'
}]
});
Sign Message
This feature allows you to sign a message using the WalletConnect provider. You need to provide the message and the address of the signer.
const message = 'Hello, WalletConnect!';
const signedMessage = await provider.request({
method: 'personal_sign',
params: [message, '0xYourAddress']
});
Switch Ethereum Chain
This feature allows you to switch the Ethereum chain using the WalletConnect provider. You need to specify the chain ID of the desired network.
await provider.request({
method: 'wallet_switchEthereumChain',
params: [{ chainId: '0x1' }] // Chain ID for Ethereum Mainnet
});
Web3Modal is a library that allows developers to easily integrate multiple wallet providers into their dApps. It supports WalletConnect, MetaMask, and other popular wallet providers. Compared to @walletconnect/ethereum-provider, Web3Modal offers a more comprehensive solution for integrating various wallet providers.
Ethers.js is a library for interacting with the Ethereum blockchain and its ecosystem. It provides utilities for connecting to Ethereum nodes, signing transactions, and interacting with smart contracts. While it does not specifically focus on WalletConnect, it can be used in conjunction with WalletConnect to achieve similar functionality.
Web3.js is a collection of libraries that allow you to interact with a local or remote Ethereum node using HTTP, IPC, or WebSocket. It provides functionalities for sending transactions, interacting with smart contracts, and more. Like ethers.js, it can be used alongside WalletConnect for similar purposes.
Ethereum Provider for WalletConnect Protocol.
npm i @walletconnect/ethereum-provider
import { EthereumProvider } from "@walletconnect/ethereum-provider";
const provider = await EthereumProvider.init({
projectId, // REQUIRED your projectId
chains, // DEPRECATED, use `optionalChains` instead
optionalChains, // REQUIRED optional chain ids e.g. 1 (Ethereum), 10 (Optimism), 42161 (Arbitrum)
showQrModal, // REQUIRED set to "true" to use @walletconnect/modal,
methods, // OPTIONAL ethereum methods
events, // OPTIONAL ethereum events
rpcMap, // OPTIONAL rpc urls for each chain
metadata, // OPTIONAL metadata of your app
storage, // OPTIONAL custom storage implementation
storageOptions, // OPTIONAL storage config options
qrModalOptions, // OPTIONAL - `undefined` by default
});
// WalletConnectModal is disabled by default, enable it during init() to display a QR code modal
await provider.connect({
chains, // OPTIONAL chain ids
rpcMap, // OPTIONAL rpc urls
pairingTopic, // OPTIONAL pairing topic
});
// or
await provider.enable();
// If you are not using WalletConnectModal,
// you can subscribe to the `display_uri` event and handle the URI yourself.
provider.on("display_uri", (uri: string) => {
// ... custom logic
});
await provider.connect();
// or
await provider.enable();
const result = await provider.request({ method: "eth_requestAccounts" });
// OR
provider.sendAsync({ method: "eth_requestAccounts" }, CallBackFunction);
// chain changed
provider.on("chainChanged", handler);
// accounts changed
provider.on("accountsChanged", handler);
// session established
provider.on("connect", handler);
// session event - chainChanged/accountsChanged/custom events
provider.on("session_event", handler);
// connection uri
provider.on("display_uri", handler);
// session disconnect
provider.on("disconnect", handler);
Please reference up to date documentation for WalletConnectModal
The Ethereum Provider interacts with browser-specific APIs (like window
, document
, localStorage
) which are not available during Server-Side Rendering (SSR). Attempting to import or initialize the provider directly in code that runs on the server will cause errors (e.g., ReferenceError: HTMLElement is not defined
).
To use @walletconnect/ethereum-provider
with frameworks like Next.js (using the App Router or Pages Router), you must ensure that the library is only imported and used on the client-side.
Recommended Approach (Next.js):
WalletConnectProvider.tsx
or Web3Provider.tsx
) that handles the initialization and interaction with the EthereumProvider
. Mark this component as a Client Component using the "use client";
directive at the top of the file.Example (src/app/page.tsx
or similar):
// src/app/page.tsx (or your main layout/page)
"use client"; // Required if the page itself uses the dynamic import directly
import dynamic from 'next/dynamic';
import { Suspense } from 'react'; // Optional: Add loading UI
// Dynamically import the component that uses EthereumProvider
const WalletConnectLogic = dynamic(
() => import('@/components/WalletConnectLogic'), // Path to your client component
{
ssr: false, // This is crucial to prevent server-side execution
// Optional: Display a loading state while the component is loading
// loading: () => <p>Loading WalletConnect...</p>,
}
);
export default function Home() {
return (
<div>
{/* Other page content */}
<Suspense fallback={<p>Loading WalletConnect...</p>}> {/* Optional Suspense boundary */}
<WalletConnectLogic />
</Suspense>
{/* Other page content */}
</div>
);
}
Example (src/components/WalletConnectLogic.tsx
):
// src/components/WalletConnectLogic.tsx
"use client"; // Mark this component as client-side only
import { EthereumProvider } from "@walletconnect/ethereum-provider";
import { useEffect, useState, useCallback } from "react";
// Your WalletConnect Project ID
const projectId = process.env.NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID!;
let provider: Awaited<ReturnType<typeof EthereumProvider.init>> | null = null;
export default function WalletConnectLogic() {
const [account, setAccount] = useState<string | null>(null);
// ... other state (isConnected, chainId, etc.)
const initialize = useCallback(async () => {
if (!projectId) {
throw new Error("Missing NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID");
}
if (provider) return; // Already initialized
try {
provider = await EthereumProvider.init({
projectId: projectId,
optionalChains: [1, 10, 137], // Example chains
showQrModal: true,
metadata: { /* ... your metadata ... */ }
// ... other options
});
// --- Add event listeners ---
provider.on("connect", (info: { chainId: string }) => {
console.log("connect", info);
// Set initial account/chain state
});
provider.on("accountsChanged", (accounts: string[]) => {
console.log("accountsChanged", accounts);
setAccount(accounts[0] ?? null);
});
// ... other listeners (disconnect, chainChanged)
// Check for existing session
if (provider.session && provider.accounts.length > 0) {
setAccount(provider.accounts[0]);
// set chainId, isConnected etc.
}
} catch (error) {
console.error("Failed to initialize WalletConnect Provider", error);
}
}, []);
useEffect(() => {
// Initialize provider on component mount (client-side)
initialize();
// Optional: Cleanup listeners on unmount
return () => {
// provider?.off(...);
};
}, [initialize]);
const connectWallet = useCallback(async () => {
if (!provider) {
console.error("Provider not initialized");
return;
}
try {
await provider.connect();
} catch (error) {
console.error("Failed to connect:", error);
}
}, []);
// ... other functions (disconnect, signMessage, etc.)
return (
<div>
{/* Your Connect/Disconnect buttons, account display, etc. */}
{!account ? (
<button onClick={connectWallet}>Connect Wallet</button>
) : (
<p>Connected: {account}</p>
)}
{/* ... */}
</div>
);
}
This pattern ensures the provider code only runs in the browser, avoiding SSR compatibility issues. Similar approaches (lazy loading components that use browser APIs) exist for other SSR frameworks.
FAQs
Ethereum Provider for WalletConnect Protocol
The npm package @walletconnect/ethereum-provider receives a total of 407,367 weekly downloads. As such, @walletconnect/ethereum-provider popularity was classified as popular.
We found that @walletconnect/ethereum-provider demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.