First Audit Fixes

This release sets a milestone/checkpoint for the bls-wallet contracts, aggregator service, npm packages bls-wallet-clients & bls-wallet-aggregator-proxy, and prototype browser extension Quill.

This repo/those components are still under heavy active development and the contracts are under audit. Therefore, they are NOT recommended for mainnet/production use. Here be dragons

These components are ready for testnet use. See ./contracts/networks for a list of active contract deployments, and the remote development guide for how you can use them with this repo. If you would like the contracts and an aggregator deployed to a testnet that is not listed, feel free to open an issue.

Breaking Changes

• The signature payload for operations has changed to include the address for the wallet that the operation will run against to prevent an attack. Make sure you are using the latest deployed contracts and bls-wallet-clients@0.8.0.

Overview

• First round of contract updates from audit to improve contract security.
• Aggregator now returns L2 transaction hash as part of receipt.
• Add getOperationResults to clients to aid in displaying/triaging errors from actions in submitted bundles.
• You can now switch networks & select a default fiat currency in the extension from the settings page.
• Extension can now generate a QR code to receive funds & displays balances of ETH & tokens.

What’s Changed

• Switch to supported contracts when testing aggregator (#313) @voltrevo
• Switch extension upload to more relevant GH action (#291) @jacque006

aggregator

• Pin bls-wallet-clients@0.8.0 (#400) @jacque006
• Contract Updates & Client Integration (#367) @jacque006
• Fix encodedFunction type and update client pins (#397) @voltrevo
• Update clients package (experimental) and pinned versions (#393) @voltrevo
• Return txhash from aggregator and display in Quill (#369) @blakecduncan
• Audit fixes 1-4 and BLSWalletWrapper changes (#350) @jzaki
• Add documentation for aggregator env vars (#357) @jacque006
• Return results in Operation event for visibility of actions (#336) @jacque006
• Update to bls-wallet-clients 0.7.1 (#335) @voltrevo
• Add network switching (#273) @voltrevo
• updated default env to use arbitrum nitro goerli (#323) @kautukkundan
• Update contracts (#333) @voltrevo
• Update private key (#307) @JohnGuilding
• Local testing fixes (#269) @voltrevo

aggregator-proxy

• Pin bls-wallet-clients@0.8.0 (#400) @jacque006
• Contract Updates & Client Integration (#367) @jacque006
• Fix encodedFunction type and update client pins (#397) @voltrevo
• Update clients package (experimental) and pinned versions (#393) @voltrevo
• Audit fixes 1-4 and BLSWalletWrapper changes (#350) @jzaki
• Update docs (#352) @JohnGuilding
• Return results in Operation event for visibility of actions (#336) @jacque006
• Update to bls-wallet-clients 0.7.1 (#335) @voltrevo

contracts

• Contract Updates & Client Integration (#367) @jacque006
• Update clients package (experimental) and pinned versions (#393) @voltrevo
• Test prohibit renounce ownership (#391) @voltrevo
• Update dependencies (#368) @voltrevo
• Audit fixes 1-4 and BLSWalletWrapper changes (#350) @jzaki
• Return results in Operation event for visibility of actions (#336) @jacque006
• Add network switching (#273) @voltrevo
• updated default env to use arbitrum nitro goerli (#323) @kautukkundan
• Update contracts (#333) @voltrevo
• New testnet deployments - Arb Rinkeby and Arb Goerli (#308) @kautukkundan

clients

• Contract Updates & Client Integration (#367) @jacque006
• Fix encodedFunction type and update client pins (#397) @voltrevo
• Test prohibit renounce ownership (#391) @voltrevo
• Remove redundant disables (#390) @voltrevo
• Update dependencies (#368) @voltrevo
• Audit fixes 1-4 and BLSWalletWrapper changes (#350) @jzaki
• WIP Update components with contract changes from audit (#351) @jacque006
• Return results in Operation event for visibility of actions (#336) @jacque006
• Update to bls-wallet-clients 0.7.1 (#335) @voltrevo
• Add network switching (#273) @voltrevo

docs

• Contract Updates & Client Integration (#367) @jacque006
• Audit fixes 1-4 and BLSWalletWrapper changes (#350) @jzaki
• Add links to contract deployments to README. (#358) @jacque006
• Add documentation for aggregator env vars (#357) @jacque006
• Update docs (#352) @JohnGuilding
• Improve clients docs (#344) @voltrevo
• Add network switching (#273) @voltrevo
• updated default env to use arbitrum nitro goerli (#323) @kautukkundan
• Update contracts (#333) @voltrevo
• Add checkout commands to contract deployment and explanation (#304) @voltrevo
• Ignore watching node_modules during extension dev (#296) @jacque006
• Add guide for using BLS Wallet/Quill in a dApp (#292) @jacque006
• Fix broken links (#285) @voltrevo
• Specify node version (#276) @blakecduncan
• The Big One (#243) @voltrevo

extension

• Pin bls-wallet-clients@0.8.0 (#400) @jacque006
• Contract Updates & Client Integration (#367) @jacque006
• Fix encodedFunction type and update client pins (#397) @voltrevo
• Update clients package (experimental) and pinned versions (#393) @voltrevo
• Return txhash from aggregator and display in Quill (#369) @blakecduncan
• Audit fixes 1-4 and BLSWalletWrapper changes (#350) @jzaki
• updated inputDecode to parse params (#353) @kautukkundan
• Import pre-existing seed phrase during Onboarding (#356) @kautukkundan
• update config for extension (#349) @kautukkundan
• Add currency switching and use currency conversions (#282) @voltrevo
• Return results in Operation event for visibility of actions (#336) @jacque006
• Update to bls-wallet-clients 0.7.1 (#335) @voltrevo
• Add network switching (#273) @voltrevo
• updated default env to use arbitrum nitro goerli (#323) @kautukkundan
• Update contracts (#333) @voltrevo
• New testnet deployments - Arb Rinkeby and Arb Goerli (#308) @kautukkundan
• Added QR Code for receive button (#324) @kautukkundan
• Ignore watching node_modules during extension dev (#296) @jacque006
• created clickable actions modal (#298) @kautukkundan
• Create Historical Transactions list (#293) @kautukkundan
• Encrypting necessary local storage data (#286) @blakecduncan
• When wrapping className, use one class per line (#275) @voltrevo
• Support node 18 (#280) @voltrevo
• Linting overhaul (#267) @voltrevo
• Specify deps for carousel correctly (#266) @voltrevo
• Fix react table typing (#265) @voltrevo
• Use QuillContext in Confirm dialog (#264) @voltrevo
• Show nonce on transactions tab (#263) @voltrevo
• Confirmation Popup and Transaction Lifecycle (#254) @kautukkundan
• Confirmation dialog followup (#261) @voltrevo
• Send eth (#253) @voltrevo
• Allow omitting params key when empty (#250) @voltrevo
• Show account balances (#248) @voltrevo
• Copy addresses on click (#247) @voltrevo
• Use prefixKeys to avoid shadowing (#239) @voltrevo
• The Big One (#243) @voltrevo