
Product
Socket Now Protects the Microsoft Edge Extension Ecosystem
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.
@x402/evm EVM (Ethereum Virtual Machine) implementation of the x402 payment protocol using the Exact payment scheme with EIP-3009 TransferWithAuthorization.
npm install @x402/evm
This package provides three main components for handling x402 payments on EVM-compatible blockchains:
@x402/evm)V2 Protocol Support - Modern x402 protocol with CAIP-2 network identifiers
Client:
ExactEvmClient - V2 client implementation using EIP-3009toClientEvmSigner(account) - Converts viem accounts to x402 signersClientEvmSigner - TypeScript type for client signersFacilitator:
ExactEvmFacilitator - V2 facilitator for payment verification and settlementtoFacilitatorEvmSigner(wallet, options?) - Converts viem wallets to facilitator signers. Pass { confirmationTimeoutMs } to bound receipt waits below a platform request deadline.FacilitatorEvmSigner - TypeScript type for facilitator signersService:
ExactEvmServer - V2 service for building payment requirements@x402/evm/v1)V1 Protocol Support - Legacy x402 protocol with simple network names
Exports:
ExactEvmClientV1 - V1 client implementationExactEvmFacilitatorV1 - V1 facilitator implementationNETWORKS - Array of all supported V1 network namesSupported V1 Networks:
[
"abstract", "abstract-testnet",
"base-sepolia", "base",
"avalanche-fuji", "avalanche",
"iotex", "sei", "sei-testnet",
"polygon", "polygon-amoy",
"peaq", "story", "educhain",
"skale-base-sepolia"
]
eip155:8453)eip155:*)base-sepolia)import { x402Client } from "@x402/core/client";
import { ExactEvmClient } from "@x402/evm";
import { ExactEvmClientV1 } from "@x402/evm/v1";
const client = new x402Client()
.register("eip155:*", new ExactEvmClient(signer))
.registerSchemeV1("base-sepolia", new ExactEvmClientV1(signer))
.registerSchemeV1("base", new ExactEvmClientV1(signer));
ExactEvmClient only requires signer support for address + signTypedData.
Permit2 extension enrichment (EIP-2612 / ERC-20 approval gas sponsoring) can
optionally use explicit RPC config when signer read/fee helpers are unavailable.
No chain-default RPC fallback is applied by the SDK.
// Per-network explicit registration
const client = new x402Client()
.register("eip155:137", new ExactEvmClient(signer, { rpcUrl: polygonRpcUrl }))
.register("eip155:8453", new ExactEvmClient(signer, { rpcUrl: baseRpcUrl }));
// Wildcard registration with chain-id keyed config map
const wildcardClient = new x402Client().register(
"eip155:*",
new ExactEvmClient(signer, {
137: { rpcUrl: polygonRpcUrl },
8453: { rpcUrl: baseRpcUrl },
}),
);
import { x402Client } from "@x402/core/client";
import { ExactEvmClient } from "@x402/evm";
const client = x402Client.fromConfig({
schemes: [
{ network: "eip155:*", client: new ExactEvmClient(signer) },
{ network: "base-sepolia", client: new ExactEvmClientV1(signer), x402Version: 1 }
],
policies: [myCustomPolicy]
});
V2 Networks (via CAIP-2):
eip155:1 - Ethereum Mainneteip155:8453 - Base Mainneteip155:84532 - Base Sepoliaeip155:* - Wildcard (matches all EVM chains)eip155:<chainId> networkV1 Networks (simple names):
See NETWORKS constant in @x402/evm/v1
Supports two asset transfer methods:
transferWithAuthorization() (e.g., USDC, EURC) — simplest, truly gaslessFor the current list of chains with default assets configured, see Default Assets for Dollar-String Pricing in the x402 docs. To add default asset support for a new chain, see Adding Support for New Networks.
# Build
npm run build
# Test
npm run test
# Integration tests
npm run test:integration
# Lint & Format
npm run lint
npm run format
@x402/core - Core protocol types and client@x402/fetch - HTTP wrapper with automatic payment handling@x402/svm - Solana/SVM implementation@x402/stellar - Stellar implementationFAQs
x402 Payment Protocol EVM Implementation
The npm package @x402/evm receives a total of 147,315 weekly downloads. As such, @x402/evm popularity was classified as popular.
We found that @x402/evm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.

Research
/Security News
Socket researchers found 18 Chrome extensions and one Edge extension delivering a wallet drainer, credential theft, and other malicious payloads.

Product
Create ClickUp tasks from Socket alerts, automate ticketing with custom rules, and keep alert and task status synchronized.