
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
crypto-weddings-contracts
Advanced tools
crypto-weddings is a DApp which allows anyone to display their marriage for the world to see forever on the ethereum blockchain. crypto-weddings has no opinions on who can marry.
Anyone who wants to show their love forever to the world. There are few things more permanent and unchangeable than the ethereum blockchain.
The ethereum blockchain is immutable and uncensorable.
This means that non traditional couples in more conservative societies are able freely participate no matter what the political situation is at their current location. Because of the immutable nature of blockchain technology, no government or person can ever deny or change a blockchain marriage.
The following smart contracts perform all needed functions:
WeddingManager.solWedding.solWeddingEventEmitter.solWeddingProxy.solUpgradeable.solUpgradeableProxy.solContracts in /interfaces are used for communication between contracts.
Contracts in /stubs for making testing certain functionality easier.
Because all events are emitted through the WeddingManager contract and event emitting permissions are only given to registered weddings,
Wedding contracts which are not registered would not be able to do anything due to failing calls to WeddingManager in order to allow
for failing calls to WeddingManager, low level calls are used and encapsulated in its own contract with internal methods which can be used by Wedding
which inherits from WeddingEventEmitter. Encapsulating this in a seperate contract also alows for better testing through stubs.
These two contracts enable upgrades through the upgradeable proxy pattern. This is only used for the WeddingManager contract.
Wedding contracts are not upgradeable! That would invalidate the whole idea of an immmutable wedding.
For more information on how upgradeable proxies work, check here.
This contract enables for much, much cheaper weddings to be created through proxies. WeddingProxy is NOT upgradeable! It simply uses the proxy pattern
for cost savings.
WeddingManager.sol is a smart contract that does the following:
Wedding from WeddingManager
weddings that have been created/registered
Wedding.sol contracts do the following:
acceptProposal functionInitialized or InProgress statusMarried statusMarried event emittedrejectProposal functionInitialized or InProgress statusFlexibleWedding contract instance destroyedpartner1 and partner2 have run the divorce functionDivorce event emittedWedding selfdestructsWedding is deregistered from WeddingManagerpartner1 or partner2 can change the weddingPhotoInstall dependencies using yarn:
yarn
Run tests:
yarn test
To run locally with the DApp:
yarn link
You can then use the folowing command to use the contracts without having to reinstall:
yarn link crypto-weddings-contracts
To deploy onto local blockchain: start a blockchain:
yarn start:blockchain
deploy the contracts:
yarn deploy:private
seed with some data if you want:
yarn create:weddings:private
You can also use the crypto-weddings-repl to do a variety of tasks...
yarn repl:cryptoweddings
This will open node with ethers connected to the network and setup wallets using the mnemonic dictated in the .env file.
From there you can easily interact with a wedding or the weddingManager contract. For more information on function arguments, see weddingGenerator.js
The following functions/constants are available:
.env.envFAQs
smart contracts for blockchain weddings
We found that crypto-weddings-contracts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.