hookmate

hookmate أدوات ومرافق ومكونات Solidity تجريبية لتطوير Uniswap v4 Hook التثبيت يتطلبfoundry forge install uniswapfoundation/hookmate التوثيق المكتبات PoolStateLibrary.sol ⚠️ غير جاهزة للإنتاج. ستشهد تغييرات كاسرة في المستقبل ⚠️ حتى يتم تجميد كود v4-core، فإن الواجهات عرضة للتغييرات مكتبة Solidity...

Malicious code in uniswap-sdk-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d01efda86c7ce792f8396d425dce51600262660989f438dd13a17068d9df6d The package presents itself as a Uniswap V4 SDK but its WalletClient constructor captures the caller-supplied private key and POSTs it, along with th...

MAL-2026-12490 Malicious code in uniswap-sdk-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d01efda86c7ce792f8396d425dce51600262660989f438dd13a17068d9df6d The package presents itself as a Uniswap V4 SDK but its WalletClient constructor captures the caller-supplied private key and POSTs it, along with th...

Malware in uniswap-v4-scratchpad-poc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Arbitrary delegatecalls from LlamaAccount can be used to steal assets

Lines of code Vulnerability details Impact Using delegatecall to call arbitrary contracts is highly dangerous as it can be used to steal assets. An attacker could sneak in a contract that steals all the assets owned by the LlamaAccount contract. Proof of Concept Below is a diff to the existing...