@exodus/ethereum-api 8.73.2 → 8.73.3

package/CHANGELOG.md

@@ -3,6 +3,22 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.73.3](https://github.com/ExodusMovement/assets/compare/@exodus/ethereum-api@8.73.2...@exodus/ethereum-api@8.73.3) (2026-05-06)
+
+
+### Bug Fixes
+
+
+* fix: correct misleading assertion and error messages (#7965)
+
+* fix(ethereum-api): avoid mutating caller's txLog in resolveNonce (#7996)
+
+* fix(ethereum-api): filter hints before pushing to stack in EthLikeError (#7991)
+
+* fix: missing matic claim unstake transactions (#8006)
+
+
+
 ## [8.73.2](https://github.com/ExodusMovement/assets/compare/@exodus/ethereum-api@8.73.1...@exodus/ethereum-api@8.73.2) (2026-05-05)
 
 **Note:** Version bump only for package @exodus/ethereum-api

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exodus/ethereum-api",
-  "version": "8.73.2",
+  "version": "8.73.3",
   "description": "Transaction monitors, fee monitors, RPC with the blockchain node, and other networking code for Ethereum and EVM-based blockchains",
   "type": "module",
   "main": "src/index.js",
@@ -49,8 +49,7 @@
     "make-concurrent": "^4.0.0",
     "minimalistic-assert": "^1.0.1",
     "ms": "^2.1.1",
-    "socket.io-client": "^2.1.1",
-    "ws": "^6.1.0"
+    "socket.io-client": "^2.1.1"
   },
   "devDependencies": {
     "@exodus/assets-testing": "^1.0.0",
@@ -68,5 +67,5 @@
     "type": "git",
     "url": "git+https://github.com/ExodusMovement/assets.git"
   },
-  "gitHead": "69553b4abf01b543d0e6006299166b8f7cc6271c"
+  "gitHead": "fe7c27f31aa14bf777660af02300c92def4b4a8c"
 }

package/src/error-wrapper.js

@@ -293,9 +293,12 @@ export class EthLikeError extends Error {
   constructor({ message, errorReasonInfo, hint, traceId, baseAssetName }) {
     super(message)
     this.name = safeString`EthLikeError`
-    this.#hintStack = [hint] // NOTE: we can add more hints to the stack
+    const filteredHint = this.#extractHint(hint)
+    // Only filtered hints are kept on the stack so that subsequent joins via
+    // `addHint` cannot leak sensitive info or untruncated content.
+    this.#hintStack = filteredHint ? [filteredHint] : []
     this.reason = errorReasonInfo.reason
-    this.hint = this.#extractHint(hint)
+    this.hint = filteredHint
     this.type = errorReasonInfo.type
     this.traceId = traceId
     this.baseAssetName = baseAssetName
@@ -307,8 +310,8 @@ export class EthLikeError extends Error {
       return this
     }
 
-    this.#hintStack.push(hint)
-    this.hint = `${this.#hintStack.join(':')}`
+    this.#hintStack.push(filteredHint)
+    this.hint = this.#hintStack.join(':')
     return this
   }
 

package/src/staking/ethereum/api.js

@@ -300,7 +300,7 @@ export class EthereumStaking {
         throw new Error(err)
       }
     } else {
-      throw new Error(`Min Amount ${this.minAmount}`)
+      throw new Error(`Max Amount for unstakePending ${pendingBalance}`)
     }
   }
 }

package/src/tx-log-staking-processor/asset-staking-tx-data.js

@@ -28,7 +28,10 @@ const getEthereumStakingTxData = ({ tx, currency }) => {
   const txAmount = tx.coinAmount.toDefaultString()
 
   if (isEthereumDelegate(tx)) {
-    return { delegate: txAmount, txAmount }
+    return {
+      coinAmount: currency.ZERO,
+      data: { delegate: txAmount, txAmount },
+    }
   }
 
   // undelegate must be taken in consideration, if unstaked ETH is still
@@ -38,28 +41,33 @@ const getEthereumStakingTxData = ({ tx, currency }) => {
       .baseUnit(decodeEthLikeStakingTxInputAmount(tx))
       .toDefaultString()
     return {
-      undelegatePending,
-      txAmount,
+      coinAmount: currency.ZERO,
+      data: { undelegatePending, txAmount },
     }
   }
 
   if (isEthereumUndelegate(tx)) {
     const undelegate = currency.baseUnit(decodeEthLikeStakingTxInputAmount(tx)).toDefaultString()
-    return { undelegate, txAmount }
+    return {
+      coinAmount: currency.ZERO,
+      data: { undelegate, txAmount },
+    }
   }
 
   // In the case of the ETH being actually staked and earning,
   // unstake has a withdraw period, after that, unstaked can be claimed.
   if (isEthereumClaimUndelegate(tx)) {
-    return { claimUndelegate: txAmount, txAmount }
+    return {
+      coinAmount: currency.ZERO,
+      data: { claimUndelegate: txAmount, txAmount },
+    }
   }
 }
 
 const getPolygonStakingTxData = ({ tx, currency }) => {
-  if (
-    ['delegate', 'undelegate', 'claimUndelegate'].some((stakeTx) => tx.data?.[stakeTx]) &&
-    tx.coinAmount.isZero
-  ) {
+  if (tx.data?.claimUndelegate) return
+
+  if (['delegate', 'undelegate'].some((stakeTx) => tx.data?.[stakeTx]) && tx.coinAmount.isZero) {
     return
   }
 
@@ -69,22 +77,41 @@ const getPolygonStakingTxData = ({ tx, currency }) => {
     const delegate = currency.baseUnit(decodePolygonStakingTxInputAmount(tx)).toDefaultString()
     // MATIC returned in unstake tx is always reward
     const rewards = calculateRewardsFromStakeTx({ tx, currency })
-    return { delegate, txAmount, ...(rewards ? { rewards } : {}) }
+    return {
+      coinAmount: currency.ZERO,
+      data: {
+        delegate,
+        txAmount,
+        ...(rewards ? { rewards } : {}),
+      },
+    }
   }
 
   if (isPolygonUndelegate(tx)) {
     const undelegate = currency.baseUnit(decodePolygonStakingTxInputAmount(tx)).toDefaultString()
     // MATIC returned in unstake tx is always reward
     const rewards = txAmount
-    return { undelegate, txAmount, rewards }
+    return {
+      coinAmount: currency.ZERO,
+      data: { undelegate, txAmount, rewards },
+    }
   }
 
   if (isPolygonClaimUndelegate(tx)) {
-    return { claimUndelegate: txAmount, txAmount }
+    return {
+      // NOTE: We intentionally omit for compatibility with `rx`:
+      //       https://github.com/ExodusMovement/exodus-mobile/blob/229c9c0634af3e8e17eb1624019682c6fffe29bf/src/utils/getTxTag.js#L186
+      //
+      // coinAmount: currency.ZERO,
+      data: {
+        claimUndelegate: txAmount,
+        txAmount,
+      },
+    }
   }
 }
 
-export const assetStakingTxData = {
+export const assetStakingTxProps = {
   polygon: getPolygonStakingTxData,
   ethereum: getEthereumStakingTxData,
   ethereumholesky: getEthereumStakingTxData,

package/src/tx-log-staking-processor/index.js

@@ -1,9 +1,5 @@
 import { getPolygonUndelegateTxInEthereumTxLog } from '../staking/matic/matic-staking-utils.js'
-import { assetStakingTxData } from './asset-staking-tx-data.js'
-
-const getTxStakingData = ({ assetName, currency, tx }) => {
-  return assetStakingTxData[assetName]({ tx, currency })
-}
+import { assetStakingTxProps } from './asset-staking-tx-data.js'
 
 const getAssetExpandedTxLog = async ({ assetName, aci, txs, walletAccount }) => {
   const additionalTxs = []
@@ -27,14 +23,14 @@ const processTxLog = async ({ asset, assetClientInterface: aci, walletAccount, b
 
   const newTxs = []
   for (const tx of txs) {
-    const stakingData = getTxStakingData({ assetName, currency, tx })
-    if (stakingData) {
-      newTxs.push({
-        ...tx,
-        coinAmount: currency.ZERO,
-        data: { ...tx.data, ...stakingData },
-      })
-    }
+    const stakingProps = assetStakingTxProps[assetName]?.({ tx, currency })
+    if (!stakingProps) continue
+
+    newTxs.push({
+      ...tx,
+      ...stakingProps,
+      data: { ...tx.data, ...stakingProps.data },
+    })
   }
 
   const expandedTxs = await getAssetExpandedTxLog({ assetName, aci, txs, walletAccount })

package/src/tx-send/nonce-utils.js

@@ -55,7 +55,9 @@ const getNonceFromTxLog = ({ txLog, useAbsoluteNonce, tag }) => {
   let absoluteNonce = 0
 
   if (useAbsoluteNonce) {
-    const reversedTxLog = txLog.reverse()
+    // NOTE: Use a copy to avoid mutating the caller's `txLog` array, since
+    //       `Array.prototype.reverse()` reverses in-place.
+    const reversedTxLog = [...txLog].reverse()
     const maybeLatestTxWithNonceChange = getLatestTxWithNonceChange({ reversedTxLog })
 
     if (maybeLatestTxWithNonceChange) {

package/src/etherscan/account.js

@@ -1,50 +0,0 @@
-import assert from 'minimalistic-assert'
-
-import request from './request.js'
-
-const isValidResponseCheck = (x) =>
-  (x.status === '1' && x.message === 'OK') || x.message === 'No transactions found'
-const _request = async (...args) => request(isValidResponseCheck, 'account', ...args)
-
-export async function fetchBalance(address) {
-  const balance = await _request('balance', { address })
-
-  const isValid = /^\d+$/.test(balance)
-  if (!isValid) throw new RangeError(`Invalid balance: ${balance}`)
-
-  return balance
-}
-
-export async function fetchTxlist(address, options) {
-  const params = { startblock: 0, endblock: 'latest', ...options, address }
-  const txlist = await _request('txlist', params)
-
-  // simple check
-  assert(Array.isArray(txlist), `Invalid transactions: ${txlist}`)
-
-  return txlist
-}
-
-export async function fetchTxlistinternal(address, options) {
-  const params = { startblock: 0, endblock: 'latest', ...options, address }
-  const txlist = await _request('txlistinternal', params)
-
-  // simple check
-  assert(Array.isArray(txlist), `Invalid transactions: ${txlist}`)
-
-  return txlist
-}
-
-export async function tokenBalance(token, address) {
-  const params = {
-    [token.length === 42 ? 'contractaddress' : 'tokenname']: token,
-    address,
-    tag: 'latest',
-  }
-  const balance = await _request('tokenbalance', params)
-
-  const isValid = /^\d+$/.test(balance)
-  if (!isValid) throw new RangeError(`Invalid balance: ${balance}`)
-
-  return balance
-}

package/src/etherscan/index.js

@@ -1,28 +0,0 @@
-import createWebSocket from './ws.js'
-
-export const ETHERSCAN_WS_URL = 'wss://socket.etherscan.io/wshandler'
-
-export const ws = createWebSocket(ETHERSCAN_WS_URL)
-
-export function filterTxsSent(addr, etherscanTxs) {
-  return etherscanTxs.filter((tx) => tx.from.toLowerCase() === addr.toLowerCase())
-}
-
-export function filterTxsReceived(addr, etherscanTxs) {
-  return etherscanTxs.filter((tx) => tx.to.toLowerCase() === addr.toLowerCase())
-}
-
-export { fetchBalance, fetchTxlistinternal, fetchTxlist, tokenBalance } from './account.js'
-export {
-  sendRawTransaction,
-  getTransactionCount,
-  estimateGas,
-  getTransactionReceipt,
-  getCode,
-  ethCall,
-  gasPrice,
-} from './proxy.js'
-
-export { setEtherscanApiKey as setApiKey } from './request.js'
-
-export { getLogs } from './logs.js'

package/src/etherscan/logs.js

@@ -1,17 +0,0 @@
-import assert from 'minimalistic-assert'
-
-import request from './request.js'
-
-const isValidResponseCheck = (x) =>
-  (x.status === '1' && x.message === 'OK') || x.message === 'No records found'
-const _request = async (...args) => request(isValidResponseCheck, 'logs', ...args)
-
-export async function getLogs(address, fromBlock, toBlock, options) {
-  const params = { ...options, address, fromBlock, toBlock }
-  const events = await _request('getLogs', params)
-
-  // simple check
-  assert(Array.isArray(events), `Invalid transactions: ${events}`)
-
-  return events
-}

package/src/etherscan/proxy.js

@@ -1,48 +0,0 @@
-import request from './request.js'
-
-const isValidResponseCheck = (x) => x.result !== undefined
-const _request = async (...args) => request(isValidResponseCheck, 'proxy', ...args)
-
-export async function sendRawTransaction(data) {
-  const _data = data instanceof Uint8Array ? Buffer.from(data).toString('hex') : data
-  const txhash = await _request('eth_sendRawTransaction', { hex: '0x' + _data })
-
-  const isValidTxHash = /^0x[\dA-Fa-f]{64}$/.test(txhash)
-  if (!isValidTxHash) throw new Error(`Invalid tx hash: ${txhash}`)
-
-  return txhash.slice(2)
-}
-
-export async function getTransactionCount(address, tag = 'latest') {
-  return _request('eth_getTransactionCount', { address, tag })
-}
-
-export async function getTransactionReceipt(txhash) {
-  return _request('eth_getTransactionReceipt', { txhash })
-}
-
-export async function estimateGas(data) {
-  return _request('eth_estimateGas', data)
-}
-
-export async function getCode(address) {
-  const code = await _request('eth_getCode', { address })
-
-  const isValidCode = /^0x[\dA-Fa-f]*$/.test(code) && code.length % 2 === 0
-  if (!isValidCode) throw new Error(`Invalid address code: ${code}`)
-
-  return code
-}
-
-export async function gasPrice() {
-  const price = await _request('eth_gasPrice')
-
-  const isValidPrice = /^0x[\dA-Fa-f]+$/.test(price)
-  if (!isValidPrice) throw new Error(`Invalid price: ${price}`)
-
-  return price
-}
-
-export async function ethCall(data) {
-  return _request('eth_call', data)
-}

package/src/etherscan/request.js

@@ -1,26 +0,0 @@
-import fetchival from '@exodus/fetch/experimental/fetchival'
-import makeConcurrent from 'make-concurrent'
-import ms from 'ms'
-
-const ETHERSCAN_API_URL = 'https://api.etherscan.io/api'
-const DEFAULT_ETHERSCAN_API_KEY = 'XM3VGRSNW1TMSIR14I9MVFP15X74GNHTRI'
-
-let etherscanApiKey = DEFAULT_ETHERSCAN_API_KEY
-
-export function setEtherscanApiKey(apiKey) {
-  etherscanApiKey = apiKey || DEFAULT_ETHERSCAN_API_KEY
-}
-
-export default makeConcurrent(
-  async function (isValidResponseCheck, module, action, params = {}) {
-    const data = await fetchival(new URL(ETHERSCAN_API_URL), { timeout: ms('15s') }).get({
-      ...params,
-      module,
-      action,
-      apiKey: etherscanApiKey,
-    })
-    if (!isValidResponseCheck(data)) throw new Error(`Invalid response: ${JSON.stringify(data)}`)
-    return data.result
-  },
-  { concurrency: 3 }
-)

package/src/etherscan/ws.js

@@ -1,88 +0,0 @@
-import WebSocket from '@exodus/fetch/websocket'
-import EventEmitter from 'events/events.js' // forces it to use the module from node_modules
-import ms from 'ms'
-
-const RECONNECT_INTERVAL = ms('10s')
-const PING_INTERVAL = ms('20s')
-
-export default function createWebSocket(url) {
-  const addresses = new Set()
-  const events = new EventEmitter().setMaxListeners(20)
-  const pingMessage = JSON.stringify({ event: 'ping' })
-  let ws
-  let wsOpened = false
-  let opened = false
-  let openTimeoutId
-  let pingIntervalId
-
-  function subscribeAddress(address) {
-    const data = JSON.stringify({ event: 'txlist', address })
-    ws.send(data)
-  }
-
-  function onMessage(data) {
-    data = JSON.parse(data)
-    switch (data.event) {
-      case 'txlist':
-        for (const tx of data.result) events.emit(`address-${data.address}`, tx)
-        break
-
-      case 'subscribe-txlist':
-        const match = data.message.toLowerCase().match(/0x[\da-f]{40}/)
-        if (match && data.status === '1') events.emit(`address-${match[0]}-subscribed`)
-        else ws.close()
-        break
-    }
-  }
-
-  function isOpened() {
-    return wsOpened
-  }
-
-  function open() {
-    opened = true
-    clearTimeout(openTimeoutId)
-    if (ws) return
-
-    ws = new WebSocket(url)
-
-    ws.on('message', (data) => {
-      try {
-        onMessage(data)
-      } catch {}
-    })
-    ws.once('open', () => {
-      for (const address of addresses.values()) subscribeAddress(address)
-      pingIntervalId = setInterval(() => ws && ws.send(pingMessage), PING_INTERVAL)
-      wsOpened = true
-      events.emit('open')
-    })
-    ws.once('close', () => {
-      ws = null
-      clearInterval(pingIntervalId)
-      if (opened) openTimeoutId = setTimeout(open, RECONNECT_INTERVAL)
-      wsOpened = false
-      events.emit('close')
-    })
-  }
-
-  function close() {
-    opened = false
-    clearTimeout(openTimeoutId)
-    if (!ws) return
-
-    ws.close()
-    ws = null
-  }
-
-  function watch(address) {
-    address = address.toLowerCase()
-
-    if (addresses.has(address)) return
-    addresses.add(address)
-
-    if (wsOpened) subscribeAddress(address)
-  }
-
-  return { events, isOpened, open, close, watch }
-}