@exodus/ethereum-api 8.76.4 → 8.76.5

package/CHANGELOG.md

@@ -3,6 +3,14 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [8.76.5](https://github.com/ExodusMovement/assets/compare/@exodus/ethereum-api@8.76.4...@exodus/ethereum-api@8.76.5) (2026-06-03)
+
+**Note:** Version bump only for package @exodus/ethereum-api
+
+
+
+
+
 ## [8.76.4](https://github.com/ExodusMovement/assets/compare/@exodus/ethereum-api@8.76.3...@exodus/ethereum-api@8.76.4) (2026-06-02)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exodus/ethereum-api",
-  "version": "8.76.4",
+  "version": "8.76.5",
   "description": "Transaction monitors, fee monitors, RPC with the blockchain node, and other networking code for Ethereum and EVM-based blockchains",
   "type": "module",
   "main": "src/index.js",
@@ -70,5 +70,5 @@
     "type": "git",
     "url": "git+https://github.com/ExodusMovement/assets.git"
   },
-  "gitHead": "f0c007138096bf627e21fc9e757637394fe2a5b0"
+  "gitHead": "651f8346570d40e724109e3df1cd2a3e10323a6f"
 }

package/src/check-tx/create-assess-transaction.js

@@ -0,0 +1,23 @@
+import { fetchival } from '@exodus/fetch'
+import assert from 'minimalistic-assert'
+
+export const DEFAULT_ASSESS_TRANSACTION_API_URL =
+  'https://simulation.a.exodus.io/simulation/transaction/assessment'
+
+export const createAssessTransaction = (
+  { apiUrl = DEFAULT_ASSESS_TRANSACTION_API_URL, headers, request = fetchival } = Object.create(
+    null
+  )
+) => {
+  assert(typeof apiUrl === 'string' && apiUrl.length > 0, 'apiUrl must be a non-empty string')
+
+  return async function assessTransaction({ payload }) {
+    return request(apiUrl, {
+      method: 'POST',
+      headers: {
+        ...headers,
+        'Content-Type': 'application/json',
+      },
+    }).post(payload)
+  }
+}

package/src/check-tx/create-check-tx.js

@@ -1,5 +1,4 @@
 import { memoizeLruCache } from '@exodus/asset-lib'
-import { makeSimulationAPICall } from '@exodus/web3-utils'
 import assert from 'minimalistic-assert'
 import ms from 'ms'
 
@@ -37,25 +36,25 @@ const isRecipientFinding = ({ finding, recipientAddress }) => {
   })
 }
 
-const pickFindingForRecipient = ({ findings, recipientAddress }) => {
-  if (!Array.isArray(findings) || !recipientAddress) return GENERIC_RISK_REASON
-  const finding = findings.find((candidate) =>
-    isRecipientFinding({ finding: candidate, recipientAddress })
-  )
-  return finding?.title || GENERIC_RISK_REASON
+const findRecipientFinding = ({ findings, recipientAddress }) => {
+  if (!Array.isArray(findings) || !recipientAddress) return
+  return findings.find((candidate) => isRecipientFinding({ finding: candidate, recipientAddress }))
 }
 
 const parseAssessment = ({ body, recipientAddress }) => {
   if (!body?.success) return { action: 'NONE' }
   if (body.data?.recommendation !== 'deny') return { action: 'NONE' }
+  const finding = findRecipientFinding({ findings: body.data?.findings, recipientAddress })
+  if (!finding) return { action: 'NONE' }
+
   return {
     action: 'WARN',
-    reason: pickFindingForRecipient({ findings: body.data?.findings, recipientAddress }),
+    reason: finding.title || GENERIC_RISK_REASON,
   }
 }
 
-// Rejects after `timeoutMs`. The underlying request keeps running because
-// `makeSimulationAPICall` doesn't accept an AbortSignal.
+// Rejects after `timeoutMs`. The underlying request keeps running because the
+// API helper doesn't accept an AbortSignal.
 const withTimeout = async (promise, timeoutMs) => {
   let timeoutId
   const timeoutPromise = new Promise((_resolve, reject) => {
@@ -71,14 +70,9 @@ const withTimeout = async (promise, timeoutMs) => {
 const noopLogger = { warn: () => {} }
 
 export const createCheckTx = (
-  {
-    apiUrl,
-    timeout = DEFAULT_TIMEOUT_MS,
-    makeApiCall = makeSimulationAPICall,
-    logger = noopLogger,
-  } = Object.create(null)
+  { timeout = DEFAULT_TIMEOUT_MS, makeApiCall, logger = noopLogger } = Object.create(null)
 ) => {
-  assert(apiUrl, 'apiUrl is required')
+  assert(typeof makeApiCall === 'function', 'makeApiCall is required')
 
   const warn = typeof logger?.warn === 'function' ? logger.warn.bind(logger) : noopLogger.warn
 
@@ -90,13 +84,7 @@ export const createCheckTx = (
       if (input !== undefined) transaction.input = input
       if (hash !== undefined) transaction.hash = hash
 
-      const body = await withTimeout(
-        makeApiCall({
-          url: apiUrl,
-          payload: { serviceProvider: 'hypernative', transaction },
-        }),
-        timeout
-      )
+      const body = await withTimeout(makeApiCall({ payload: { transaction } }), timeout)
 
       if (!body) throw new Error('checkTx: empty response')
       return parseAssessment({ body, recipientAddress: toAddress })

package/src/create-asset.js

@@ -1,3 +1,4 @@
+import { createConsoleLogger } from '@exodus/asset-lib'
 import { ASSET_FAMILY, connectAssetsList } from '@exodus/assets'
 import bip44Constants from '@exodus/bip44-constants/by-ticker.js'
 import {
@@ -21,6 +22,7 @@ import lodash from 'lodash'
 import assert from 'minimalistic-assert'
 
 import { addressHasHistoryFactory } from './address-has-history.js'
+import { createAssessTransaction } from './check-tx/create-assess-transaction.js'
 import { createCheckTx } from './check-tx/index.js'
 import {
   createGetBlackListStatus,
@@ -78,9 +80,9 @@ export const createAssetFactory = ({
   useAbsoluteBalanceAndNonce = false,
   delisted = false,
   privacyRpcUrl: defaultPrivacyRpcUrl,
-  riskAssessment: defaultRiskAssessment,
   wsGatewayUri: defaultWsGatewayUri,
   eip7702Supported,
+  transactionAssessment: defaultTransactionAssessment,
 }) => {
   assert(assetsList, 'assetsList is required')
   assert(providedFeeData || feeDataConfig, 'feeData or feeDataConfig is required')
@@ -104,7 +106,7 @@ export const createAssetFactory = ({
     nfts: defaultNfts,
     customTokens: defaultCustomTokens,
     privacyRpcUrl: defaultPrivacyRpcUrl,
-    riskAssessment: defaultRiskAssessment,
+    transactionAssessment: defaultTransactionAssessment,
   }
   return (
     {
@@ -125,7 +127,7 @@ export const createAssetFactory = ({
       supportsCustomFees,
       useAbsoluteBalanceAndNonce: overrideUseAbsoluteBalanceAndNonce,
       privacyRpcUrl,
-      riskAssessment,
+      transactionAssessment,
     } = configWithOverrides
 
     const asset = assets[base.name]
@@ -294,16 +296,18 @@ export const createAssetFactory = ({
 
     const securityChecks = createSecurityChecks({ eip7702Supported })
 
+    const web3 = createWeb3API({ asset })
+
     let checkTx
-    if (riskAssessment?.apiUrl) {
+    let sendValidations = []
+    if (transactionAssessment?.enabled) {
       checkTx = createCheckTx({
-        apiUrl: riskAssessment.apiUrl,
-        logger: riskAssessment.logger,
+        makeApiCall: createAssessTransaction({ apiUrl: transactionAssessment.apiUrl }),
+        logger: createConsoleLogger('@exodus/ethereum-api:check-tx'),
       })
+      sendValidations = createSendValidations({ assetClientInterface, checkTx })
     }
 
-    const sendValidations = checkTx ? createSendValidations({ assetClientInterface, checkTx }) : []
-
     const moveFunds = moveFundsFactory({
       baseAssetName: asset.name,
       assetClientInterface,
@@ -365,7 +369,7 @@ export const createAssetFactory = ({
           }),
         }),
       validateAssetId: address.validate,
-      web3: createWeb3API({ asset }),
+      web3,
     }
 
     const fullAsset = {

package/src/send-validations.js

@@ -39,14 +39,13 @@ export const createSendValidations = ({ assetClientInterface, checkTx }) => {
       })
       if (!fromAddress) return
 
-      // Match Hypernative's documented native-send payload shape.
+      // Native send: empty calldata, no signed tx hash to pass yet.
       const result = await checkTx({
         chain: asset.chainId,
         fromAddress,
         toAddress: destinationAddress,
         value: sendAmount.toBaseString({ unit: false }),
         input: '0x',
-        hash: '0x1',
       })
 
       if (result?.action !== 'WARN') return