
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
blockchainer
Advanced tools
A simple daemon process that checkpoints your blockchain onto a public network (e.g. Ethereum)
A simple command line tool to checkpoint your blockchain's state on another blockchain.
Blockchainer takes your blockchain's state snapshot and imprints it on a higher level chain.
Any database or Ethereum-based blockchain can have its state snapshotted by taking a hash on the formatted data. In the case of Ethereum-based blockchains, this hash can be saved along with a block number and used to prove that a set of data is consistent with the current history of the blockchain.
This lends credibility to the private blockchain because its history can be proven to have existed at a certain point in time (enforced by the trust in the public Ethereum blockchain).
Parity creates state snapshots by default when your node syncs (snapshots taken by default every 30,000 blocks). It stores a hash and a block number corresponding to these snapshots in a MANIFEST
file. For more information, see this page. Blockchainer references this MANIFEST
and imprints the state hash and block number onto a higher level chain (usually public Ethereum, but configurable). As of now, Parity is the only client that takes state snapshots, so it is a requirement to run blockchainer.
The following information needs to be captured in config.json
:
MNEMONIC
GAS_PRICE
and GAS_LIMIT
- I recommend 0x5F5E100
and 0x7A120
, respectively.PARITY_DIR
. On mac, this should be ~/Library/Application\ Support/io.parity.ethereum/
ethereum
.http://localhost:7545
. Save this variable as PUBLIC_HOST
.contracts/Checkpoint.sol
with truffle migrate
. Get the address of this contract and save it as CONTRACT
.Your config.json
file should look like this:
{
"PUBLIC_HOST": "http://localhost:7545",
"CONTRACT": "0xf12b5dd4ead5f743c6baa640b0216200e89b60da",
"MNEMONIC": "candy maple cake sugar pudding cream honey rich smooth crumble sweet treat",
"PARITY_DIR": "~/Library/Application Support/io.parity.ethereum",
"CHAIN_NAME": "ethereum",
"GAS_PRICE": "0x5F5E100",
"GAS_LIMIT": "0x7A120"
}
With the configuration set, you're ready to start blockchainer with the following command:
blockchainer run <interval> <chainId>
Where <interval>
is the number of seconds between checkpoints and <chainId>
can be anything you want. Typically this would be the identifier that goes along with your blockchain (each private chain will have its own chainId
, which you can find in web3.version.network
), but there are no restrictions so you can leave this as 0 if you want. For more information on chainId
s, see here).
FAQs
A simple daemon process that checkpoints your blockchain onto a public network (e.g. Ethereum)
The npm package blockchainer receives a total of 0 weekly downloads. As such, blockchainer popularity was classified as not popular.
We found that blockchainer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.