@exodus/ethereum-plugin 2.34.1 → 2.35.1

package/CHANGELOG.md

@@ -3,6 +3,48 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [2.35.1](https://github.com/ExodusMovement/assets/compare/@exodus/ethereum-plugin@2.33.0...@exodus/ethereum-plugin@2.35.1) (2026-09-09)
+
+
+### Features
+
+* source eip7702 delegation whitelist from remote config ([#8356](https://github.com/ExodusMovement/assets/issues/8356)) ([1a0966b](https://github.com/ExodusMovement/assets/commit/1a0966b08befb6e9310993f323c21d003dea2754))
+
+
+### Bug Fixes
+
+* disable @exodus/hydra/no-param-reassign-prop-only warnings ([#8531](https://github.com/ExodusMovement/assets/issues/8531)) ([ddae556](https://github.com/ExodusMovement/assets/commit/ddae556361285919fe82cd10a81cfeae79ccc6b5))
+* **ethereum-api:** preserve live pending txs across refresh to prevent nonce reuse ([#8430](https://github.com/ExodusMovement/assets/issues/8430)) ([a24ad82](https://github.com/ExodusMovement/assets/commit/a24ad82d303ce50606143bc5d1d917fbbad45ef1))
+* **integration-tests:** solana safe report, foundry setup, anvil 1.8 fork-test races ([#8574](https://github.com/ExodusMovement/assets/issues/8574)) ([a8268b8](https://github.com/ExodusMovement/assets/commit/a8268b875ec85dd7818e3b8e5795aad02d1bcaaa))
+* **lint:** add braces for multi-line if statements ([#8515](https://github.com/ExodusMovement/assets/issues/8515)) ([3891645](https://github.com/ExodusMovement/assets/commit/38916457ad0651163bd37843fc12d16656e214df))
+* **lint:** fix easy auto-fixable oxlint warnings ([#8491](https://github.com/ExodusMovement/assets/issues/8491)) ([23407c5](https://github.com/ExodusMovement/assets/commit/23407c56aabd9f6968c5477306910f6702d59c39))
+* **lint:** fix no-await-expression-member warnings and upgrade to error ([#8503](https://github.com/ExodusMovement/assets/issues/8503)) ([a7fb2c3](https://github.com/ExodusMovement/assets/commit/a7fb2c3bcb4e6b9e97e7f8bb3b8434b78036fe68))
+* **lint:** fix no-throw-literal warnings and upgrade to error ([#8498](https://github.com/ExodusMovement/assets/issues/8498)) ([8fc68eb](https://github.com/ExodusMovement/assets/commit/8fc68eb65682e0b5a7da9415410ee1dedf309696))
+* lower ETH min staking amount ([#8319](https://github.com/ExodusMovement/assets/issues/8319)) ([461e4c4](https://github.com/ExodusMovement/assets/commit/461e4c4f46e58e3750363edb9d0b6cddbfae5478))
+* missing liquidRewards prop for polygon staking ([#8382](https://github.com/ExodusMovement/assets/issues/8382)) ([7d7d8ba](https://github.com/ExodusMovement/assets/commit/7d7d8ba62570fc3bf8ea9c58d514e0fc4dc70697))
+
+
+### Performance Improvements
+
+* **ethereum:** reduce background staking request volume ([#8617](https://github.com/ExodusMovement/assets/issues/8617)) ([a9746d9](https://github.com/ExodusMovement/assets/commit/a9746d98ee0a2a04f5fd0131d3f1228cbc0aacf2))
+
+
+
+## [2.35.0](https://github.com/ExodusMovement/assets/compare/@exodus/ethereum-plugin@2.33.0...@exodus/ethereum-plugin@2.35.0) (2026-08-04)
+
+
+### Features
+
+* source eip7702 delegation whitelist from remote config ([#8356](https://github.com/ExodusMovement/assets/issues/8356)) ([1a0966b](https://github.com/ExodusMovement/assets/commit/1a0966b08befb6e9310993f323c21d003dea2754))
+
+
+### Bug Fixes
+
+* lower ETH min staking amount ([#8319](https://github.com/ExodusMovement/assets/issues/8319)) ([461e4c4](https://github.com/ExodusMovement/assets/commit/461e4c4f46e58e3750363edb9d0b6cddbfae5478))
+* missing liquidRewards prop for polygon staking ([#8382](https://github.com/ExodusMovement/assets/issues/8382)) ([7d7d8ba](https://github.com/ExodusMovement/assets/commit/7d7d8ba62570fc3bf8ea9c58d514e0fc4dc70697))
+
+
+
 ## [2.34.1](https://github.com/ExodusMovement/assets/compare/@exodus/ethereum-plugin@2.33.0...@exodus/ethereum-plugin@2.34.1) (2026-07-14)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exodus/ethereum-plugin",
-  "version": "2.34.1",
+  "version": "2.35.1",
   "description": "Ethereum plugin for Exodus SDK powered wallets",
   "type": "module",
   "main": "src/index.js",
@@ -16,9 +16,7 @@
     "provenance": false
   },
   "scripts": {
-    "test": "run -T exodus-test --jest",
-    "lint": "run -T eslintc .",
-    "lint:fix": "yarn lint --fix"
+    "test": "exodus-test --jest"
   },
   "dependencies": {
     "@exodus/asset-lib": "^5.9.2",
@@ -53,5 +51,5 @@
     "type": "git",
     "url": "git+https://github.com/ExodusMovement/assets.git"
   },
-  "gitHead": "b132e8c636b3fb9d15611a70e4c6ba1f615bff8f"
+  "gitHead": "53bdb90b8e90413468dc13cf8960ef2aa64dac4b"
 }

package/src/index.js

@@ -59,20 +59,9 @@ const createAsset = createAssetFactory({
   confirmationsNumber: 30,
   // https://ethereum.org/roadmap/pectra/
   eip7623Supported: true,
-  eip7702Supported: [
-    { address: '0xD2e28229F6f2c235e57De2EbC727025A1D0530FB', name: 'Trust Wallet' },
-    { address: '0x63c0c19a282a1B52b07dD5a65b58948A07DAE32B', name: 'MetaMask' },
-    { address: '0x5A7FC11397E9a8AD41BF10bf13F22B0a63f96f6d', name: 'Ambire' },
-    { address: '0x000000009B1D0aF20D8C6d0A44e162d11F9b8f00', name: 'Uniswap' },
-    { address: '0xa845C74344Fc9405b1Fcf712f04668979573c1bf', name: 'Bitget' },
-    { address: '0xe6Cae83BdE06E4c305530e199D7217f42808555B', name: 'Pimlico' },
-    { address: '0xb15Bed8FC30D3E82672bF7cD75417B414983934B', name: 'SafePal' },
-    { address: '0x000000004F43C49e93C970E84001853a70923B03', name: 'Biconomy' },
-    { address: '0x80296FF8D1ED46f8e3C7992664D13B833504c2Bb', name: 'OKX Wallet' },
-    { address: '0xd6CEDDe84be40893d153Be9d467CD6aD37875b28', name: 'ZeroDev' },
-    { address: '0x4428a93B478fa76A5BD9c7641F54EC6373855433', name: 'Bitdev 2' },
-    { address: '0x7702cb554e6bFb442cb743A7dF23154544a7176C', name: 'Coinbase Wallet' },
-  ],
+  // Whitelist is populated exclusively from remote config (eip7702Whitelist),
+  // delivered through the history monitor's setServer. Empty until then.
+  eip7702Supported: [],
   transactionAssessment: {
     enabled: true,
   },

package/src/staking/polygon/api.js

@@ -1,4 +1,6 @@
 import {
+  createCachedStakingRead,
+  EthLikeRpcRequestAccumulator,
   EVM_ERROR_REASONS,
   fromHexToBN,
   fromHexToString,
@@ -16,7 +18,15 @@ import { mainnetContracts } from './contracts/index.js'
 const RETRY_DELAYS = ['10s']
 
 class StakingServer {
-  constructor({ asset, server, contracts = mainnetContracts }) {
+  constructor({ asset, server, contracts = mainnetContracts, createRpcRequestAccumulator }) {
+    // Only the reviewed mainnet getters are caller-independent. Custom contracts
+    // retain isolated JSON-RPC execution rather than inheriting that assumption.
+    this.createRpcRequestAccumulator =
+      Object.entries(mainnetContracts).every(
+        ([key, address]) => contracts[key]?.toLowerCase() === address
+      ) && createRpcRequestAccumulator
+        ? createRpcRequestAccumulator
+        : () => new EthLikeRpcRequestAccumulator()
     this.asset = asset
     // harcoded exchange rate from the validator share contract
     // in order to calculate claim unstake amount off-chain
@@ -54,6 +64,51 @@ class StakingServer {
     })
   }
 
+  // Reviewed ValidatorShare getters use explicit user arguments, public storage
+  // getters and caller-independent exchange-rate/reward calculations. Unlike
+  // transaction simulation, none requires the original eth_call msg.sender.
+  // aggregate is all-or-nothing: a reverted/malformed read must reject the state.
+  getStakingState = async (address) => {
+    const read = () => {
+      const requests = this.createRpcRequestAccumulator()
+      for (const [contract, method, ...args] of [
+        [this.validatorShareContract, 'getTotalStake', address],
+        [this.validatorShareContract, 'minAmount'],
+        [this.validatorShareContract, 'getLiquidRewards', address],
+        [this.validatorShareContract, 'unbondNonces', address],
+        [this.stakingManagerContract, 'withdrawalDelay'],
+        [this.stakingManagerContract, 'epoch'],
+        [this.validatorShareContract, 'withdrawExchangeRate'],
+      ]) {
+        requests.contractStaticCallRequest(contract, method, ...args)
+      }
+      return requests.flush(this.server)
+    }
+    const [[stake], [minimum], [liquid], [nonce], [delay], [epoch], [rate]] = await withErrorReason(
+      {
+        promise: retry(read, { delayTimesMs: RETRY_DELAYS })(),
+        errorReasonInfo: EVM_ERROR_REASONS.ethCallFailed,
+        hint: safeString`stakingPolygonReadFunctionContract`,
+        baseAssetName: this.server.baseAssetName,
+      }
+    )
+    const unbondNonce = Number(nonce)
+    if (!Number.isSafeInteger(unbondNonce)) throw new Error('Invalid Polygon unbond nonce')
+    return {
+      delegatedBalance: this.asset.currency.baseUnit(stake),
+      minRewardsToWithdraw: this.asset.currency.baseUnit(minimum),
+      liquidRewards: this.asset.currency.baseUnit(liquid),
+      unbondNonce,
+      withdrawalDelay: new BN(delay),
+      currentEpoch: new BN(epoch),
+      withdrawExchangeRate: new BN(rate),
+    }
+  }
+
+  getCachedTotalRewards = createCachedStakingRead({
+    read: (address) => this.getTotalRewards(address, { throwOnError: true }),
+  })
+
   getWithdrawalDelay = async () => {
     const withdrawalDelay = await this.#callReadFunctionContract(
       this.stakingManagerContract,
@@ -127,7 +182,7 @@ class StakingServer {
     return this.asset.currency.baseUnit(liquidRewards)
   }
 
-  getTotalRewards = async (address) => {
+  getTotalRewards = async (address, { throwOnError = false } = {}) => {
     // use external everstake API to get total rewards
     const EVERSTAKE_API_URL = 'https://polygon-clarity.a.exodus.io/everstake-rewards'
     const url = new URL(EVERSTAKE_API_URL)
@@ -142,11 +197,22 @@ class StakingServer {
 
     try {
       const response = await fetch(url.toString(), options)
+      if (!response.ok) throw new Error('Failed to fetch Polygon total rewards')
       const res = await response.json()
-      if (res === 'address' || !res?.rewards) return this.asset.currency.ZERO // address not found
-      return this.asset.currency.baseUnit(res.rewards)
+      if (res === 'address') return this.asset.currency.ZERO // address not found
+      const rewards = res?.rewards
+      if (
+        !(
+          (typeof rewards === 'string' && /^\d+$/.test(rewards)) ||
+          (Number.isSafeInteger(rewards) && rewards >= 0)
+        )
+      ) {
+        throw new Error('Malformed Polygon total rewards')
+      }
+      return this.asset.currency.baseUnit(rewards)
     } catch (error) {
       console.warn('Error fetching Polygon total rewards:', error)
+      if (throwOnError) throw error
       return this.asset.currency.ZERO
     }
   }
@@ -218,5 +284,16 @@ class StakingServer {
   }
 }
 
-export const stakingServerFactory = ({ assetName, currency, contracts, server }) =>
-  new StakingServer({ asset: { name: assetName, currency }, contracts, server })
+export const stakingServerFactory = ({
+  assetName,
+  currency,
+  contracts,
+  server,
+  createRpcRequestAccumulator,
+}) =>
+  new StakingServer({
+    asset: { name: assetName, currency },
+    contracts,
+    server,
+    createRpcRequestAccumulator,
+  })

package/src/staking/polygon/service.js

@@ -1,5 +1,4 @@
 import { memoize } from '@exodus/basic-utils'
-// eslint-disable-next-line @exodus/import/no-deprecated
 import NumberUnit, { isNumberUnit } from '@exodus/currency'
 import {
   estimateGasLimit,
@@ -42,7 +41,6 @@ export function stakingServiceFactory({ assetClientInterface, server: _server, s
   const assetName = 'ethereum'
 
   function amountToCurrency({ asset, amount }) {
-    // eslint-disable-next-line @exodus/import/no-deprecated
     return isNumberUnit(amount) ? amount : asset.currency.parse(amount)
   }
 
@@ -589,22 +587,6 @@ export function stakingServiceFactory({ assetClientInterface, server: _server, s
   }
 }
 
-async function fetchUnstakedClaimInfo({ stakingServer, delegator }) {
-  const [unbondNonce, withdrawalDelay, currentEpoch, withdrawExchangeRate] = await Promise.all([
-    stakingServer.getCurrentUnbondNonce(delegator),
-    stakingServer.getWithdrawalDelay(),
-    stakingServer.getCurrentCheckpoint(),
-    stakingServer.getWithdrawExchangeRate(),
-  ])
-
-  return {
-    unbondNonce,
-    withdrawalDelay,
-    currentEpoch,
-    withdrawExchangeRate,
-  }
-}
-
 function calculateUnclaimedTokens({
   currency,
   exchangeRatePrecision,
@@ -665,40 +647,34 @@ async function getUnstakedUnclaimedInfo({
   }
 }
 
-async function fetchRewardsInfo({ stakingServer, delegator, currency }) {
-  const [minRewardsToWithdraw, lastRewards, rewardsBalance] = await Promise.all([
-    stakingServer.getMinRewardsToWithdraw(),
-    stakingServer.getLiquidRewards(delegator),
-    stakingServer.getTotalRewards(delegator),
-  ])
-  const withdrawable = lastRewards.sub(minRewardsToWithdraw).gte(currency.ZERO)
-    ? lastRewards
-    : currency.ZERO
-
-  return {
-    rewardsBalance: rewardsBalance.add(lastRewards), // all time accrued rewards
-    liquidRewards: lastRewards, // current pending rewards (on-chain)
-    minRewardsToWithdraw,
-    withdrawable, // unclaimed rewards
-  }
-}
-
 export function getPolygonStakingInfo({ assetClientInterface, stakingServer }) {
-  return async function ({ address }) {
+  return async function ({ address, useCache = false, background = false }) {
     const { polygon: asset } = await assetClientInterface.getAssetsForNetwork({
       baseAssetName: 'ethereum', // Polygon token lives in ETH network
     })
     const { currency } = asset
     const delegator = address.toLowerCase()
     const [
-      delegatedBalance,
-      { rewardsBalance, liquidRewards, minRewardsToWithdraw, withdrawable },
-      { unbondNonce, withdrawalDelay, currentEpoch, withdrawExchangeRate },
+      {
+        delegatedBalance,
+        liquidRewards,
+        minRewardsToWithdraw,
+        unbondNonce,
+        withdrawalDelay,
+        currentEpoch,
+        withdrawExchangeRate,
+      },
+      totalRewards,
     ] = await Promise.all([
-      stakingServer.getTotalStake(delegator),
-      fetchRewardsInfo({ stakingServer, delegator, currency }),
-      fetchUnstakedClaimInfo({ stakingServer, delegator }),
+      stakingServer.getStakingState(delegator),
+      // Preserve rewards metadata on provider failure without blocking discovery
+      // of real on-chain stake during restore.
+      stakingServer
+        .getCachedTotalRewards(delegator, { useCache })
+        .catch(() => (background ? null : currency.ZERO)),
     ])
+    const rewardsBalance = totalRewards?.add(liquidRewards)
+    const withdrawable = liquidRewards.gte(minRewardsToWithdraw) ? liquidRewards : currency.ZERO
     const minDelegateAmount = currency.defaultUnit(1)
     const isDelegating = !delegatedBalance.isZero
 
@@ -713,7 +689,7 @@ export function getPolygonStakingInfo({ assetClientInterface, stakingServer }) {
     })
 
     return {
-      rewardsBalance,
+      ...(rewardsBalance !== undefined && { rewardsBalance }),
       liquidRewards,
       withdrawable,
       unbondNonce,

package/src/staking/polygon/staking-utils.js

@@ -177,7 +177,7 @@ const calculateRewardsFromStakeTxFactory =
 
     if (stakeTxContainsReward) {
       const txAmount = stakedAmount.sub(tx.coinAmount.abs()).abs()
-      // eslint-disable-next-line @exodus/mutable/no-param-reassign-prop-only -- TODO: Fix this the next time the file is edited.
+      // eslint-disable-next-line @exodus/hydra/no-param-reassign-prop-only -- TODO: Fix this the next time the file is edited.
       return txAmount.toDefaultString()
     }
   }