
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
BlockBolt is a decentralized payment protocol on the multichain. It offers seamless, secure, and efficient transactions for businesses and consumers, encouraging cryptocurrency adoption. BlockBolt provides an open-source SDK, plug-and-play services, and resources for developers to create or integrate payment solutions.
The Boltpay SDK for the Sui wallet app is an advantageous feature that can be seamlessly incorporated. It enables users to conveniently and safely make payments on the Sui chain. With its QR code scanning and payment request interpretation features, users can conveniently confirm their payments directly within their Sui wallet app. The Boltpay SDK manages the transaction on the Sui chain, ensuring that the payment is safely delivered to the merchant's wallet.
Please take a look at the sequence diagram that explains the process of the Boltpay SDK.

As a developer, you can make use of the Boltpay SDK for wallet, a powerful tool that allows seamless integration with the BlockBolt Payment Protocol. In this guide, you will be taken through the steps of setting up and utilizing the Boltpay SDK for transaction creation on the Sui blockchain.
To ensure successful transaction execution, it is essential to have a signer. This component is linked to your wallet and possesses the necessary credentials to authorize transactions. By using your own wallet's signer during the execution process, you affirm and authorize transactions, leading to successful completion. It is crucial to keep your signer secure to maintain your wallet's security.
npm i react-qr-reader
Installing the Boltpay SDK is straightforward using npm:
Using npm:
Note : use this version we will update to latest version end of this month.
npm i @mysten/sui.js@0.41.2
npm i @blockbolt/boltpay-sui-wallet
To get started, the first step is to connect to the Sui network using the BlockBolt Payment Protocol. The Boltpay SDK offers three pre-set connections to choose from: testnet, devnet, and mainnet.
To obtain the essential details from a QR code, all you need to do is scan it with your Sui wallet. This will furnish you with the necessary values to initiate the transaction creation process.
const details = {
merchant_id: 123,
merchant_name: "MERCHANT_NAME",
merchant_address: "MERCHANT_ADDRESS",
merchant_amount: 1,
merchant_network: "testnet", // Options: mainnet, testnet, devnet
};
To initiate a transaction, simply use the values obtained from the QR code and pass your wallet signer to the createTransaction field. This action will create the transaction for you.
Here's an example of how you can do this:
import { createTransaction } from "@blockbolt/boltpay-sui-wallet";
const handleTransaction = async () => {
const tx = createTransaction(signer, details);
};
Running the SDK locally on your system without a wallet is possible, but it's not advisable for production environments. Therefore, we don't recommend it.
npm i @mysten/sui.js
To get started, the first step is to connect to the Sui network using the BlockBolt Payment Protocol. The Boltpay SDK offers three pre-set connections to choose from: testnet, devnet, and mainnet.
Here's how you can establish a connection to the mainnet:
import { Connection, JsonRpcProvider } from "@mysten/sui.js";
export const mainnetConnection = new JsonRpcProvider(
new Connection({
fullnode: "https://wallet-rpc.mainnet.sui.io/",
faucet: "https://wallet-rpc.mainnet.sui.io/gas",
})
);
In order to initiate a transaction, you must first generate a key pair from a phrase and create a signer using that information. Once the signer is established, it can be used to initiate the transaction.
Here's an example:
import { Ed25519Keypair, RawSigner, JsonRpcProvider } from "@mysten/sui.js";
import { createTransaction } from "@blockbolt/boltpay-sui-wallet";
const handleTransaction = async () => {
const details = {
merchant_id: 123,
merchant_name: "MERCHANT_NAME",
merchant_address: "MERCHANT_ADDRESS",
merchant_amount: 1,
merchant_network: "testnet", // Options: mainnet, testnet, devnet
};
const phrase = "YOUR_SEED_PHRASE";
const keyPair = Ed25519Keypair.deriveKeypair(phrase, "m/44'/784'/0'/0'/0'");
const provider: JsonRpcProvider = new JsonRpcProvider(testnetConnection);
const signer: RawSigner = new RawSigner(keyPair, provider)
const tx = createTransaction(signer, details);
console.log(tx)
};
For the sake of security, it is highly advisable to store confidential details like your seed phrase and private keys in a .env file or opt for other secure environment variable solutions. These are not part of your codebase and remain confidential.
Disclaimer: Please note that the BlockBolt protocol relies solely on blockchain verification for payment confirmation and process.
Do you encounter any issues or require assistance? Kindly send us an email at support@blockbolt.io or submit a support ticket on our Discord server https://discord.gg/Fb8CA6ny67. We are ready to help you out.
FAQs
BoltPay SDK for Sui Wallet
We found that demo-war demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.