@exodus/ethereum-api 8.66.0 → 8.67.0

package/CHANGELOG.md

@@ -3,21 +3,29 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
-## [8.66.0](https://github.com/ExodusMovement/assets/compare/@exodus/ethereum-api@8.64.5...@exodus/ethereum-api@8.66.0) (2026-03-04)
+## [8.67.0](https://github.com/ExodusMovement/assets/compare/@exodus/ethereum-api@8.66.0...@exodus/ethereum-api@8.67.0) (2026-03-09)
 
 
 ### Features
 
 
-* feat: add USDT blacklist status APIs for ETH and TRX and expose TRX raw account (#7444)
+* feat: add hasLostPermission api method to asset plugins (#7524)
 
 
 ### Bug Fixes
 
 
-* fix: avoid race conditions resulting in a `tipGasPrice` of `0` where possible (#7458)
+* fix: queued/invalid Ethereum transactions being offered for RBF acceleration (#7463)
 
-* fix: harden EthlikeError and improve error handling in tx-send (#7308)
+
+
+## [8.66.0](https://github.com/ExodusMovement/assets/compare/@exodus/ethereum-api@8.65.0...@exodus/ethereum-api@8.66.0) (2026-03-04)
+
+
+### Features
+
+
+* feat: add USDT blacklist status APIs for ETH and TRX and expose TRX raw account (#7444)
 
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exodus/ethereum-api",
-  "version": "8.66.0",
+  "version": "8.67.0",
   "description": "Transaction monitors, fee monitors, RPC with the blockchain node, and other networking code for Ethereum and EVM-based blockchains",
   "type": "module",
   "main": "src/index.js",
@@ -69,5 +69,5 @@
     "type": "git",
     "url": "git+https://github.com/ExodusMovement/assets.git"
   },
-  "gitHead": "c715aabef7146610ab562c184a971c675f6d088f"
+  "gitHead": "f27651709a0a2c70f3c0867afc543fcfa5cfd5c2"
 }

package/src/create-asset.js

@@ -272,6 +272,11 @@ export const createAssetFactory = ({
       addressHasHistory,
       broadcastTx: (...args) => server.sendRawTransaction(...args),
       createAccountState: () => accountStateClass,
+      hasLostPermission: ({ accountState }) => {
+        if (!eip7702Supported) return false
+        const delegation = accountState?.eip7702Delegation
+        return Boolean(delegation?.isDelegated) && !delegation?.isWhitelisted
+      },
       createFeeMonitor,
       createHistoryMonitor,
       createToken,

package/src/tx-create.js

@@ -159,6 +159,63 @@ const resolveTxFactoryGasPrices = async ({
   }
 }
 
+// Pre-broadcast safety check for RBF replacements.
+//
+// Clarity can lag behind the node: it may still report a tx as pending after
+// the node has evicted it, or show a queued (gapped) tx as acceleratable.
+// Broadcasting an RBF for a gapped tx — one whose predecessor slot is empty in
+// the node's mempool — produces ErrFutureReplacePending.
+//
+// This check is best-effort: if either RPC call fails (network error, unsupported
+// endpoint, etc.) we fall through and let the broadcast surface the error.
+async function verifyBumpTxCanReplace({ baseAsset, bumpTxId, fromAddress, nonce }) {
+  let rpcTx, pendingNonceHex
+
+  try {
+    ;[rpcTx, pendingNonceHex] = await Promise.all([
+      baseAsset.server.getTransactionByHash(bumpTxId),
+      baseAsset.server.getTransactionCount(fromAddress, 'pending'),
+    ])
+  } catch (err) {
+    console.warn(
+      `verifyBumpTxCanReplace: pre-broadcast RPC check failed for ${bumpTxId}, falling through`,
+      err.message
+    )
+    return
+  }
+
+  if (!rpcTx) {
+    // The tx was dropped from the node's mempool — Clarity hasn't caught up yet.
+    // TODO: eagerly mark this tx as dropped in the tx log so the UI updates
+    // immediately instead of waiting for Clarity's next polling cycle.
+    throw new Error(
+      `ERR_BUMP_TX_DROPPED: Cannot bump transaction ${bumpTxId}: transaction was dropped from the network`
+    )
+  }
+
+  // pendingNonce = 4
+  // [0][1][2][3]{4}{5}{6}...
+  //              ^--- next empty slot (pendingNonce)
+  //
+  // Nonce to replace must be < pendingNonce (i.e. slot is already accounted for).
+  // If nonce >= pendingNonce, the slot is empty or gapped — not safe to replace.
+  const pendingNonce = parseInt(pendingNonceHex, 16)
+  if (pendingNonce <= nonce) {
+    // A predecessor tx was dropped by the node, leaving a gap below this tx.
+    // The tx itself is still in the node's queued pool but can't execute until
+    // the missing nonce slot is filled.
+    // TODO: identify the dropped predecessor (scan nonces from pendingNonce to
+    // nonce - 1), mark it as dropped in the tx log, and surface a clear message
+    // to the user: "a previous transaction was dropped — send a new transaction
+    // first, then you'll be able to accelerate this one."
+    throw new Error(
+      `ERR_BUMP_TX_NONCE_GAP: Cannot bump transaction ${bumpTxId}: nonce gap detected — ` +
+        `node's pending nonce (${pendingNonce}) ≤ tx nonce (${nonce}), ` +
+        `broadcasting would produce ErrFutureReplacePending`
+    )
+  }
+}
+
 const createBumpUnsignedTx = async ({
   fromAddress,
   chainId,
@@ -223,6 +280,8 @@ const createBumpUnsignedTx = async ({
 
   const nonce = maybeProvidedNonce ?? replacedTxNonce
 
+  await verifyBumpTxCanReplace({ baseAsset, bumpTxId, fromAddress, nonce })
+
   const resolvedTxAttributes = await resolveTxAttributesByTxType({
     asset,
     assetClientInterface,