Security News
cURL Project and Go Security Teams Reject CVSS as Broken
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
evm-proxy-detection
Advanced tools
Detect proxy contracts and their target addresses using an EIP-1193 compatible JSON-RPC request function
A zero dependencies module to detect proxy contracts and their target addresses using an EIP-1193 compatible JSON-RPC request
function.
It detects the following kinds of proxies:
This module is distributed via npm. For adding it to your project, run:
npm install --save evm-proxy-detection
To install it using yarn, run:
yarn add evm-proxy-detection
The function requires an EIP-1193 compatible request
function that it uses to make JSON-RPC requests to run a set of checks against the given address.
It returns a promise that resolves to result object with the proxy target address, i.e., the address of the contract implementing the logic, and information about the detected proxy type.
The promise resolves to null
if no proxy can be detected.
import { createPublicClient, http } from 'viem'
const client = createPublicClient({
chain,
// enable json-rpc batching to reduce the number of http requests
transport: http(undefined, { batch: true }),
})
const result = await detectProxy(address, client.request)
// logs: { target: "0x4bd844F72A8edD323056130A86FC624D0dbcF5b0", type: 'EIP-1967', immutable: false }
import { InfuraProvider } from '@ethersproject/providers'
import detectProxy from 'evm-proxy-detection'
const infuraProvider = new InfuraProvider(1, process.env.INFURA_API_KEY)
const requestFunc = ({ method, params }) => infuraProvider.send(method, params)
const target = await detectProxy(
'0xA7AeFeaD2F25972D80516628417ac46b3F2604Af',
requestFunc
)
console.log(target)
// logs: { target: "0x4bd844F72A8edD323056130A86FC624D0dbcF5b0", type: 'EIP-1967', immutable: false }
Web3.js doesn't have a way to export an EIP1193 provider, so you need to ensure that the underlying provider you use is EIP1193 compatible. Most Ethereum-supported browsers like MetaMask and TrustWallet have an EIP-1193 compliant provider. Otherwise, you can use providers like eip1193-provider.
import Web3 from 'web3'
import detectProxy from 'evm-proxy-detection'
const web3 = new Web3(Web3.givenProvider || 'ws://localhost:8545')
const result = await detectProxy(
'0xA7AeFeaD2F25972D80516628417ac46b3F2604Af',
web3.currentProvider.request
)
console.log(result)
// logs: { target: "0x4bd844F72A8edD323056130A86FC624D0dbcF5b0", type: 'EIP-1967', immutable: false }
detectProxy(address: `0x${string}`, jsonRpcRequest: EIP1193ProviderRequestFunc, blockTag?: BlockTag): Promise<Result | null>
Arguments
address
: The address of the proxy contractjsonRpcRequest
: A JSON-RPC request function, compatible with EIP-1193 ((method: string, params: any[]) => Promise<any>
)blockTag
(optional: BlockTag): "earliest"
, "latest"
, "pending"
or hex block number, default is "latest"
Return value
The function returns a promise that will generally resolve to either a Result
object describing the detected proxy or null
if it couldn't detect one.
interface Result {
target: `0x${string}`
immutable: boolean
type: ProxyType
}
target
: The address (non-checksummed) of the proxy targetimmutable
: Indicates if the proxy is immutable, meaning that the target address will never changetype
: Identifies the detected proxy type (possible values shown below)enum ProxyType {
Eip1167 = 'Eip1167',
Eip1967Direct = 'Eip1967Direct',
Eip1967Beacon = 'Eip1967Beacon',
Eip1822 = 'Eip1822',
Eip897 = 'Eip897',
OpenZeppelin = 'OpenZeppelin',
Safe = 'Safe',
Comptroller = 'Comptroller',
}
FAQs
Detect proxy contracts and their target addresses using an EIP-1193 compatible JSON-RPC request function
The npm package evm-proxy-detection receives a total of 4,270 weekly downloads. As such, evm-proxy-detection popularity was classified as popular.
We found that evm-proxy-detection demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.
Security News
Biden's executive order pushes for AI-driven cybersecurity, software supply chain transparency, and stronger protections for federal and open source systems.