
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
@walletconnect/ethereum-provider
Advanced tools
Ethereum Provider for WalletConnect Protocol.
npm i @walletconnect/ethereum-provider
import { EthereumProvider } from "@walletconnect/ethereum-provider";
const provider = await EthereumProvider.init({
projectId, // REQUIRED your projectId
chains, // DEPRECATED, use `optionalChains` instead
optionalChains, // REQUIRED optional chain ids e.g. 1 (Ethereum), 10 (Optimism), 42161 (Arbitrum)
showQrModal, // REQUIRED set to "true" to use @walletconnect/modal,
methods, // OPTIONAL ethereum methods
events, // OPTIONAL ethereum events
rpcMap, // OPTIONAL rpc urls for each chain
metadata, // OPTIONAL metadata of your app
storage, // OPTIONAL custom storage implementation
storageOptions, // OPTIONAL storage config options
qrModalOptions, // OPTIONAL - `undefined` by default
});
// WalletConnectModal is disabled by default, enable it during init() to display a QR code modal
await provider.connect({
chains, // OPTIONAL chain ids
rpcMap, // OPTIONAL rpc urls
pairingTopic, // OPTIONAL pairing topic
});
// or
await provider.enable();
// If you are not using WalletConnectModal,
// you can subscribe to the `display_uri` event and handle the URI yourself.
provider.on("display_uri", (uri: string) => {
// ... custom logic
});
await provider.connect();
// or
await provider.enable();
const result = await provider.request({ method: "eth_requestAccounts" });
// OR
provider.sendAsync({ method: "eth_requestAccounts" }, CallBackFunction);
// chain changed
provider.on("chainChanged", handler);
// accounts changed
provider.on("accountsChanged", handler);
// session established
provider.on("connect", handler);
// session event - chainChanged/accountsChanged/custom events
provider.on("session_event", handler);
// connection uri
provider.on("display_uri", handler);
// session disconnect
provider.on("disconnect", handler);
Please reference up to date documentation for WalletConnectModal
The Ethereum Provider interacts with browser-specific APIs (like window, document, localStorage) which are not available during Server-Side Rendering (SSR). Attempting to import or initialize the provider directly in code that runs on the server will cause errors (e.g., ReferenceError: HTMLElement is not defined).
To use @walletconnect/ethereum-provider with frameworks like Next.js (using the App Router or Pages Router), you must ensure that the library is only imported and used on the client-side.
Recommended Approach (Next.js):
WalletConnectProvider.tsx or Web3Provider.tsx) that handles the initialization and interaction with the EthereumProvider. Mark this component as a Client Component using the "use client"; directive at the top of the file.Example (src/app/page.tsx or similar):
// src/app/page.tsx (or your main layout/page)
"use client"; // Required if the page itself uses the dynamic import directly
import dynamic from 'next/dynamic';
import { Suspense } from 'react'; // Optional: Add loading UI
// Dynamically import the component that uses EthereumProvider
const WalletConnectLogic = dynamic(
() => import('@/components/WalletConnectLogic'), // Path to your client component
{
ssr: false, // This is crucial to prevent server-side execution
// Optional: Display a loading state while the component is loading
// loading: () => <p>Loading WalletConnect...</p>,
}
);
export default function Home() {
return (
<div>
{/* Other page content */}
<Suspense fallback={<p>Loading WalletConnect...</p>}> {/* Optional Suspense boundary */}
<WalletConnectLogic />
</Suspense>
{/* Other page content */}
</div>
);
}
Example (src/components/WalletConnectLogic.tsx):
// src/components/WalletConnectLogic.tsx
"use client"; // Mark this component as client-side only
import { EthereumProvider } from "@walletconnect/ethereum-provider";
import { useEffect, useState, useCallback } from "react";
// Your WalletConnect Project ID
const projectId = process.env.NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID!;
let provider: Awaited<ReturnType<typeof EthereumProvider.init>> | null = null;
export default function WalletConnectLogic() {
const [account, setAccount] = useState<string | null>(null);
// ... other state (isConnected, chainId, etc.)
const initialize = useCallback(async () => {
if (!projectId) {
throw new Error("Missing NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID");
}
if (provider) return; // Already initialized
try {
provider = await EthereumProvider.init({
projectId: projectId,
optionalChains: [1, 10, 137], // Example chains
showQrModal: true,
metadata: { /* ... your metadata ... */ }
// ... other options
});
// --- Add event listeners ---
provider.on("connect", (info: { chainId: string }) => {
console.log("connect", info);
// Set initial account/chain state
});
provider.on("accountsChanged", (accounts: string[]) => {
console.log("accountsChanged", accounts);
setAccount(accounts[0] ?? null);
});
// ... other listeners (disconnect, chainChanged)
// Check for existing session
if (provider.session && provider.accounts.length > 0) {
setAccount(provider.accounts[0]);
// set chainId, isConnected etc.
}
} catch (error) {
console.error("Failed to initialize WalletConnect Provider", error);
}
}, []);
useEffect(() => {
// Initialize provider on component mount (client-side)
initialize();
// Optional: Cleanup listeners on unmount
return () => {
// provider?.off(...);
};
}, [initialize]);
const connectWallet = useCallback(async () => {
if (!provider) {
console.error("Provider not initialized");
return;
}
try {
await provider.connect();
} catch (error) {
console.error("Failed to connect:", error);
}
}, []);
// ... other functions (disconnect, signMessage, etc.)
return (
<div>
{/* Your Connect/Disconnect buttons, account display, etc. */}
{!account ? (
<button onClick={connectWallet}>Connect Wallet</button>
) : (
<p>Connected: {account}</p>
)}
{/* ... */}
</div>
);
}
This pattern ensures the provider code only runs in the browser, avoiding SSR compatibility issues. Similar approaches (lazy loading components that use browser APIs) exist for other SSR frameworks.
Web3Modal is a library that allows developers to easily integrate multiple wallet providers into their dApps. It supports WalletConnect, MetaMask, and other popular wallet providers. Compared to @walletconnect/ethereum-provider, Web3Modal offers a more comprehensive solution for integrating various wallet providers.
Ethers.js is a library for interacting with the Ethereum blockchain and its ecosystem. It provides utilities for connecting to Ethereum nodes, signing transactions, and interacting with smart contracts. While it does not specifically focus on WalletConnect, it can be used in conjunction with WalletConnect to achieve similar functionality.
Web3.js is a collection of libraries that allow you to interact with a local or remote Ethereum node using HTTP, IPC, or WebSocket. It provides functionalities for sending transactions, interacting with smart contracts, and more. Like ethers.js, it can be used alongside WalletConnect for similar purposes.
FAQs
Ethereum Provider for WalletConnect Protocol
The npm package @walletconnect/ethereum-provider receives a total of 296,371 weekly downloads. As such, @walletconnect/ethereum-provider popularity was classified as popular.
We found that @walletconnect/ethereum-provider demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.