
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
bls-wallet-clients
Advanced tools
Client libraries for interacting with BLS Wallet components
Deployed contract addresses and metadata.
import { NetworkConfig, getConfig } from 'bls-wallet-clients';
const netCfg: NetworkConfig = await getConfig(
'/path/to/network/config',
async (path) => ... /* fetch, fs.readFile, etc. */
);
// Read from netCfg.addresses.verificationGateway, etc.
Exposes typed functions for interacting with the Aggregator's HTTP API.
import { Aggregator } from "bls-wallet-clients";
const aggregator = new Aggregator("https://arbitrum-goerli.blswallet.org");
const resp = await aggregator.add(bundle); // See BlsWalletWrapper section below
// Aggregator did not accept bundle
if ("failures" in resp) {
throw new Error(resp.failures.join(", "));
}
You will have to poll for the bundle receipt once you have added a bundle to an aggregator. The transaction hash is located on the bundle receipt. The property you need is bundleReceipt.transactionHash
. This represents the transaction hash for the bundle submitted to the Verification Gatewaty, and can be used in a block explorer.
Note this transaction is reprentative of the entire bundle submitted by the aggregator, and does not represent individual operations. To retrieve information about individual operations, use the get getOperationResults
helper method which is explained under the VerificationGateway section below.
import { Aggregator } from "bls-wallet-clients";
const aggregator = new Aggregator("https://arbitrum-goerli.blswallet.org");
const resp = await aggregator.add(bundle); // See BlsWalletWrapper section below
// Aggregator did not accept bundle
if ("failures" in resp) {
throw new Error(resp.failures.join(", "));
}
let receipt;
while (!receipt) {
receipt = await aggregator.lookupReceipt(resp.hash);
// There was an issue submitting the bundle on chain
if (receipt && "submitError" in receipt) {
throw new Error(receipt.submitError);
}
// Some function which waits i.e. setTimeout
await sleep(5000);
}
Wraps a BLS wallet, storing the private key and providing .sign(...)
to
produce a Bundle
, that can be used with aggregator.add(...)
. Make sure the bls wallet you're trying to use has enough ETH to send transactions. You can either fund a wallet before it's created, or after the wallet is lazily created from its first transaction (bundle).
import { BlsWalletWrapper } from "bls-wallet-clients";
const wallet = await BlsWalletWrapper.connect(
privateKey,
verificationGatewayAddress,
provider,
);
const bundle = wallet.sign({
nonce: await wallet.Nonce(),
actions: [
{
ethValue: 0,
contractAddress: someToken.address, // An ethers.Contract
encodedFunction: someToken.interface.encodeFunctionData("transfer", [
"0x...some address...",
ethers.BigNumber.from(1).pow(18),
]),
},
// Additional actions can go here. When using multiple actions, they'll
// either all succeed or all fail.
],
});
await aggregator.add(bundle);
// Follow the same steps as the first BlsWalletWrapper example, but construct the bundle actions like so:
const amountToTransfer = ethers.utils.parseUnits("1");
const reciever = "0x1234...";
const bundle = wallet.sign({
nonce,
actions: [
{
ethValue: amountToTransfer, // amount of ETH you want to transfer
contractAddress: reciever, // receiver address. Can be a contract address or an EOA
encodedFunction: "0x", // leave this as "0x" when just sending ETH
},
],
});
// Follow the same steps as the first BlsWalletWrapper example, but construct the bundle actions like so:
const transactions = [
{
value: ethers.utils.parseUnits("1"), // amount of ETH you want to transfer
to: "0x1234...", // to address. Can be a contract address or an EOA
},
];
const actions: ActionData[] = transactions.map((tx) => ({
ethValue: tx.value ?? "0",
contractAddress: tx.to,
encodedFunction: tx.data ?? "0x", // in this example, there is no data property on the tx object, so "0x" will be used
}));
const bundle = wallet.sign({
nonce,
actions,
});
User bundles must pay fees to compensate the aggregator. Fees can be paid by adding an additional action to the users bundle that pays tx.origin. For more info on how fees work, see aggregator fees.
Practically, this means you have to first estimate the fee using aggregator.estimateFee
, and then add an additional action to a user bundle that pays the aggregator with the amount returned from estimateFee
. When estimating a payment, you should include this additional action with a payment of zero wei, otherwise the additional action will increase the fee that needs to be paid. Additionally, the feeRequired
value returned from estimateFee
is the absolute minimum fee required at the time of estimation, therefore, you should pay slightly extra to ensure the bundle has a good chance of being submitted successfully.
import { BlsWalletWrapper, Aggregator } from "bls-wallet-clients";
const wallet = await BlsWalletWrapper.connect(
privateKey,
verificationGatewayAddress,
provider,
);
const aggregator = new Aggregator("https://arbitrum-goerli.blswallet.org");
// Create a fee estimate bundle
const estimateFeeBundle = wallet.sign({
nonce,
actions: [
...actions, // ... add your user actions here (approve, transfer, etc.)
{
ethValue: 1,
// Provide 1 wei with this action so that the fee transfer to
// tx.origin can be included in the gas estimate.
contractAddress: aggregatorUtilitiesContract.address,
encodedFunction:
aggregatorUtilitiesContract.interface.encodeFunctionData(
"sendEthToTxOrigin",
),
},
],
});
const feeEstimate = await aggregator.estimateFee(estimateFeeBundle);
// Add a safety premium to the fee to account for fluctuations in gas estimation
const safetyDivisor = 5;
const feeRequired = BigNumber.from(feeEstimate.feeRequired);
const safetyPremium = feeRequired.div(safetyDivisor);
const safeFee = feeRequired.add(safetyPremium);
const bundle = wallet.sign({
nonce: await wallet.Nonce(),
actions: [
...actions, // ... add your user actions here (approve, transfer, etc.)
{
ethValue: safeFee, // fee amount
contractAddress: aggregatorUtilitiesContract.address,
encodedFunction:
aggregatorUtilitiesContract.interface.encodeFunctionData(
"sendEthToTxOrigin",
),
},
],
});
The aggregator must be set up to accept ERC20 tokens in order for this to work.
import { BlsWalletWrapper, Aggregator } from "bls-wallet-clients";
const wallet = await BlsWalletWrapper.connect(
privateKey,
verificationGatewayAddress,
provider,
);
const aggregator = new Aggregator("https://arbitrum-goerli.blswallet.org");
// Create a fee estimate bundle
const estimateFeeBundle = wallet.sign({
nonce,
actions: [
...actions, // ... add your user actions here (approve, transfer, etc.)
{
ethValue: 0,
contractAddress: tokenContract.address,
encodedFunction: tokenContract.interface.encodeFunctionData("approve", [
aggregatorUtilitiesContract.address,
1,
]),
},
{
ethValue: 0,
contractAddress: aggregatorUtilitiesContract.address,
encodedFunction: aggregatorUtilitiesContract.interface.encodeFunctionData(
"sendTokenToTxOrigin",
[tokenContract.address, 1],
),
},
],
});
const feeEstimate = await aggregator.estimateFee(estimateFeeBundle);
// Add a safety premium to the fee to account for fluctuations in gas estimation
const safetyDivisor = 5;
const feeRequired = BigNumber.from(feeEstimate.feeRequired);
const safetyPremium = feeRequired.div(safetyDivisor);
const safeFee = feeRequired.add(safetyPremium);
const bundle = wallet.sign({
nonce: await wallet.Nonce(),
actions: [
...actions, // ... add your user actions here (approve, transfer, etc.)
// Note the additional approve action when transfering ERC20 tokens
{
ethValue: 0,
contractAddress: tokenContract.address,
encodedFunction: tokenContract.interface.encodeFunctionData("approve", [
aggregatorUtilitiesContract.address,
safeFee, // fee amount
]),
},
{
ethValue: 0,
contractAddress: aggregatorUtilitiesContract.address,
encodedFunction: aggregatorUtilitiesContract.interface.encodeFunctionData(
"sendTokenToTxOrigin",
[
tokenContract.address,
safeFee, // fee amount
],
),
},
],
});
Exposes VerificationGateway
and VerificationGateway__factory
generated by
typechain to enable typed
interactions with the VerificationGateway
.
import { VerificationGateway__factory } from "bls-wallet-clients";
const verificationGateway = VerificationGateway__factory.connect(
verificationGatewayAddress,
signer, // An ethers signer
);
await verificationGateway.processBundle(bundle);
You can get the results of the operations in a bundle using getOperationResults
.
import { getOperationResults, decodeError } from 'bls-wallet-clients';
...
const txn = await verificationGateway.processBundle(bundle);
const txnReceipt = txn.wait();
const opResults = getOperationResults(txnReceipt);
// Includes data from WalletOperationProcessed event,
// as well as parsed errors with action index
const { error } = opResults[0];
console.log(error?.actionIndex); // ex. 0 (as BigNumber)
console.log(error?.message); // ex. "some require failure message"
// If you want more granular ability to decode an error message
// you can use the decodeError function.
const errorData = '0x5c66760100000000.............000000000000';
const opResultError = decodeError(errorData);
console.log(opResultError.actionIndex); // ex. 0 (as BigNumber)
console.log(opResultError.message); // ex. "ERC20: insufficient allowance"
Utilities for signing, aggregating and verifying transaction bundles using the bls signature scheme. Bundles are actioned in contracts.
Useful in the aggregator for verification and aggregation, and in the extension for signing and aggregation.
import ethers from "ethers";
import { initBlsWalletSigner } from "bls-wallet-clients";
(async () => {
const privateKey = "0x...256 bits of private hex data here";
const signer = await initBlsWalletSigner({ chainId: 10, privateKey });
const someToken = new ethers.Contract(
...
// See https://docs.ethers.io/v5/getting-started/
);
const bundle = signer.sign(
{
nonce: ethers.BigNumber.from(0),
ethValue: ethers.BigNumber.from(0),
contractAddress: someToken.address,
// If you don't want to call a function and just send `ethValue` above,
// use '0x' to signify an empty byte array here
encodedFunction: someToken.interface.encodeFunctionData("transfer", [
"0x...some address...",
ethers.BigNumber.from(10).pow(18),
]),
},
);
// Send bundle to an aggregator or use it with VerificationGateway directly.
})();
yarn install
yarn build
yarn test
yarn build
yarn link
cd other/project/dir
yarn "link bls-wallet-clients"
FAQs
Client libraries for interacting with BLS Wallet components
The npm package bls-wallet-clients receives a total of 156 weekly downloads. As such, bls-wallet-clients popularity was classified as not popular.
We found that bls-wallet-clients demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.