Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
provably-fair-framework
Advanced tools
This library aims to provide a flexible but thorough provably fair framework.
randomInteger(algorithm, inputs, min, max)
randomSequence(algorithm, inputs, array)
Accepted Hash Functions are currently sha256 and sha512.
"A provably fair seeding event makes it possible to generate publicSeed using a trustless randomization service (e.g. the hash of a specific upcoming block in the blockchain of a cryptocurrency), disallowing participants to have a direct influence on in-game randomization"
The default proof of commitment strategy is as follows:
Take an initial Server Seed (it could be a private key of Bitcoin wallet) and recusively sha256 hash it 10,000,000 times.
You can set your own custom Proof of Commitment strategy.
The default proof of existence strategy is as follows:
Broadcast via the Blockstream Satellite API a message containing the Terminating Hash, and chosen Block Height of future block. The blockhash of this will be used as a client seed.
You can set your own custom Proof of Existence strategy.
import {
Algorithm,
AmericanRoulette,
Config,
Crash,
createSystem,
Dice,
distribute,
EuropeanRoulette,
randomInteger,
randomSequence,
System
} from "..";
// Default config
const config: Config = {
algorithm: "sha256",
proofOfCommitment() {
log("Custom proof of commitment..");
},
proofOfExistence() {
log("Custom proof of existence...");
},
seedingEvent() {
log("Custom seeding event...");
},
strategies: [AmericanRoulette, Crash, Dice, EuropeanRoulette],
strategy: Dice
};
const system = createSystem(config);
const [serverSeed, clientSeed] = await system.createSeedPair();
// A dice strategy
system.setStrategy(Dice);
const dice = system.calculate(serverSeed, clientSeed);
console.log(dice); // 1-6
// A european roulette example
system.setStrategy(EuropeanRoulette);
const roulette = system.calculate(serverSeed, clientSeed);
console.log(roulette); // 0-36
// A custom roulette example
import { StrategyInterface, randomInteger } from "provably-fair-system";
class CustomRoulette implements StrategyInterface {
calculate(algorithm: Algorithm, inputs: [string, string]) {
return randomInteger(algorithm, inputs, 0, 15);
}
}
// Set custom strategy programatically
system.setStrategy(new CustomRouletteStrategy());
const roulette = system.calculate(serverSeed, clientSeed);
console.log(roulette); // 0-15
// default seeding event
system.seedingEvent();
// Set custom seeding event programatically
system.setSeedingEvent(new CustomSeedingEvent());
system.seedingEvent();
// default proof of existence
system.proofOfExistence();
// Set custom proof of existence programatically
system.setProofOfExistence(new CustomProofOfExistance());
system.proofOfExistence();
// default proof of commitment
system.proofOfCommitment();
// Set custom proof of commitment programatically
system.setProofOfCommitment(new CustomProofOfCommitment());
system.proofOfCommitment();
https://matthewlilley.github.io/provably-fair-framework/
Want to contribute? Awesome! Feel free to create an issue and/or pull request.
MIT
FAQs
Provably Fair Framework
The npm package provably-fair-framework receives a total of 0 weekly downloads. As such, provably-fair-framework popularity was classified as not popular.
We found that provably-fair-framework demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.