
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
fungible-token-contract
Advanced tools
A configurable token contract for Mina, designed for flexibility and compatibility.
The FungibleToken
contract stores:
decimals
: Token decimal precisionadmin
: Administrator public key with special privilegespackedDynamicProofConfigs
: Configuration for dynamic proof verificationvKeyMapRoot
: Root hash for verification key Merkle map (for side-loaded proofs)When deploying a token contract, deploy it with a reference to the token contract implementation, and initialize it with your configuration:
await Mina.transaction(
{
sender: deployer,
fee,
},
async () => {
AccountUpdate.fundNewAccount(deployer, 2);
await token.deploy({
symbol: 'TKN', // Token symbol
src: 'https://github.com/o1-labs-XT/fungible-token-contract/blob/main/src/FungibleTokenContract.ts', // Source code reference
});
await token.initialize(
adminPublicKey, // Admin account
UInt8.from(9), // Decimals (e.g., 9)
MintDynamicProofConfig.default,
BurnDynamicProofConfig.default,
TransferDynamicProofConfig.default,
UpdatesDynamicProofConfig.default
);
}
);
mint/mintWithProof
: Create new tokensburn/burnWithProof
: Destroy tokenstransferCustom/transferCustomWithProof
: Transfer tokens between accountsapproveBaseCustom/approveBaseCustomWithProof
: Approve custom token account updatesupdateDynamicProofConfig
: Update the dynamic proof configuration for a specific operationupdateSideLoadedVKeyHash
: Update the verification key for side loaded proofssetAdmin
: Change the admin accountThe repository includes several example applications:
# Build the project
npm run build
# Run the end-to-end example
node build/src/examples/e2e.eg.js
# Run the escrow example
node build/src/examples/escrow.eg.js
# Run the token manager example
node build/src/examples/token-manager.eg.js
# Build the project
npm run build
# Run all tests
npm run test
# Run coverage
npm run coverage
FAQs
A configurable token contract for Mina
The npm package fungible-token-contract receives a total of 5 weekly downloads. As such, fungible-token-contract popularity was classified as not popular.
We found that fungible-token-contract demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.