Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
test_signature_verifier
Advanced tools
A Python library for verifying Ethereum signatures in compliance with EIP-6492, supporting both smart contracts and externally owned accounts (EOA).
The EIP6492-Signature-Verifier library is a Python package designed to verify Ethereum signatures in compliance with EIP-6492. It supports both smart contract and externally owned account (EOA) signatures, automatically selecting the appropriate verification method based on the length of the signature. This library simplifies the process of signature verification for Ethereum-based applications.
You can install the EIP6492-Signature-Verifier library from PyPI using pip:
pip install signature-verifier
Here’s a quick guide on how to use the SignatureVerifier
class:
from signature_verifier import SignatureVerifier
# Initialize the verifier with your Web3 provider URL
verifier = SignatureVerifier("YOUR_WEB3_PROVIDER_URL")
# Example data
signature = "0x..." # Replace with the actual signature
message = "Hello, world!"
signer = "0x..." # Replace with the actual signer's Ethereum address
# Verify the signature
is_valid = verifier.verify_signature(signature, message, signer)
print(f"Signature valid: {is_valid}")
SignatureVerifier(web3_provider: str)
: Initializes the verifier with the specified Web3 provider URL.verify_signature(signature: str, message: str, signer: str) -> bool
: Verifies the given signature. The method automatically selects whether to use smart contract or EOA verification based on the signature length.To contribute to the development of this library, follow these steps:
Clone the Repository
git clone https://github.com/Sajad-Salehi/EIP6492-Signature-Verifier.git
cd EIP6492-Signature-Verifier
Install Development Dependencies
poetry install
Build and Publish
To build the library, use:
poetry build
To upload the package to PyPI, use:
poetry publish --build --username __token__ --password <your-pypi-token>
This project is licensed under the MIT License - see the LICENSE file for details.
For issues or feature requests, please open an issue on the GitHub repository.
For direct contact, email: SajadSolidity@gmail.com
FAQs
A Python library for verifying Ethereum signatures in compliance with EIP-6492, supporting both smart contracts and externally owned accounts (EOA).
We found that test_signature_verifier demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.