
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
erc20-snapshot
Advanced tools
This command-line utility creates a snapshot of any ERC20 token in JSON or CSV format. Use your own fully synced Ethereum node or any Ethereum node as a service like Infura.
npm install erc20-snapshot -g
None. Prompts for user input and produces a configuration file on the first run.
Navigate to a directory where you'd like to save the token snapshot to.
cd path/to/a/directory
Run the program:
erc20-snapshot
{
"provider": "https://mainnet.infura.io/v3/<key>",
"contractAddress": "",
"fromBlock": 0,
"toBlock": "latest",
"format": "json",
"blocksPerBatch": 2500,
"delay": 0,
"checkIfContract": "yes"
}
Enter your fully synced Ethereum node. Could be a local node or remote services like Infura.
Address of your ERC20 token.
The block height to scan from. To save time, enter the block number of the transaction your token was created on.
The block height to end the scan at.
The number of blocks to query per batch.
If you are using remote service like Infura, keep this number relative low (2000-5000) to avoid rate limits. If you are using a dedicated Ethereum node, you can increase this number to suit your needs.
The delay (in ms) between each request in the loop. Tweak this if you are experiencing rate limit from your provider.
Checks each address to determine whether it is a smart contract or an Ethereum wallet.
FAQs
ERC20 Token Snapshot
The npm package erc20-snapshot receives a total of 2 weekly downloads. As such, erc20-snapshot popularity was classified as not popular.
We found that erc20-snapshot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.