
Security News
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.
This is a simple utility library to facilitate cUSD point of sale payments on the Celo network. CeloPay follows a simple payment flow where a client (ex. web browser) is making a cUSD payment to a server (ex. off-chain web store).
Note that this library requires the user to track state for accounts and paymentIds. It's highly recommended to authenticate the user to ensure they own the account they're paying with (see EIP-712). This prevents a user from claiming someone else's payment as their own. Additionally, to ensure that you don't double count a payment in your database, create a lock on the paymentId to prevent a separate server from processing the same payment.
var toAddress = "0x..." // the server's Celo wallet or multisig
var paymentAmount = 1000000000000000000 // $1 in cUSD, note 18 decimal places
// the web3 should be retrieved using WalletConnect or similar
const paymentId = await createPayment(web3, toAddress, paymentAmount)
Client sends paymentId and their Celo address to the server. This can be done with a regular POST request to your server API.
Server verifies payment, marking the paymentId as consumed and incrementing the client's balance in the database.
var fromAddress = "0x..." // client's wallet address
var paymentId = "0x..." // response from createPayment() on the client
var toAddress = "0x..." // the server's Celo wallet or multisig
// Lock paymentId in your database to prevent payment double counting
// Note that paymentIds will be unique per tx
// Check if paymentId is consumed in your DB
// response will be a BigNumber with 18 decimal places
const amountReceived = await getPaymentAmount(
paymentId,
fromAddress,
toAddress
)
// Mark paymentId as consumed in DB
// Increment account's balance
FAQs
Simple point of sale library for Celo payments
We found that celopay demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.