@exodus/ethereum-plugin 2.35.0 → 2.35.2

package/CHANGELOG.md

@@ -3,6 +3,41 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [2.35.2](https://github.com/ExodusMovement/assets/compare/@exodus/ethereum-plugin@2.35.1...@exodus/ethereum-plugin@2.35.2) (2026-09-28)
+
+**Note:** Version bump only for package @exodus/ethereum-plugin
+
+
+
+
+
+## [2.35.1](https://github.com/ExodusMovement/assets/compare/@exodus/ethereum-plugin@2.33.0...@exodus/ethereum-plugin@2.35.1) (2026-09-09)
+
+
+### Features
+
+* source eip7702 delegation whitelist from remote config ([#8356](https://github.com/ExodusMovement/assets/issues/8356)) ([1a0966b](https://github.com/ExodusMovement/assets/commit/1a0966b08befb6e9310993f323c21d003dea2754))
+
+
+### Bug Fixes
+
+* disable @exodus/hydra/no-param-reassign-prop-only warnings ([#8531](https://github.com/ExodusMovement/assets/issues/8531)) ([ddae556](https://github.com/ExodusMovement/assets/commit/ddae556361285919fe82cd10a81cfeae79ccc6b5))
+* **ethereum-api:** preserve live pending txs across refresh to prevent nonce reuse ([#8430](https://github.com/ExodusMovement/assets/issues/8430)) ([a24ad82](https://github.com/ExodusMovement/assets/commit/a24ad82d303ce50606143bc5d1d917fbbad45ef1))
+* **integration-tests:** solana safe report, foundry setup, anvil 1.8 fork-test races ([#8574](https://github.com/ExodusMovement/assets/issues/8574)) ([a8268b8](https://github.com/ExodusMovement/assets/commit/a8268b875ec85dd7818e3b8e5795aad02d1bcaaa))
+* **lint:** add braces for multi-line if statements ([#8515](https://github.com/ExodusMovement/assets/issues/8515)) ([3891645](https://github.com/ExodusMovement/assets/commit/38916457ad0651163bd37843fc12d16656e214df))
+* **lint:** fix easy auto-fixable oxlint warnings ([#8491](https://github.com/ExodusMovement/assets/issues/8491)) ([23407c5](https://github.com/ExodusMovement/assets/commit/23407c56aabd9f6968c5477306910f6702d59c39))
+* **lint:** fix no-await-expression-member warnings and upgrade to error ([#8503](https://github.com/ExodusMovement/assets/issues/8503)) ([a7fb2c3](https://github.com/ExodusMovement/assets/commit/a7fb2c3bcb4e6b9e97e7f8bb3b8434b78036fe68))
+* **lint:** fix no-throw-literal warnings and upgrade to error ([#8498](https://github.com/ExodusMovement/assets/issues/8498)) ([8fc68eb](https://github.com/ExodusMovement/assets/commit/8fc68eb65682e0b5a7da9415410ee1dedf309696))
+* lower ETH min staking amount ([#8319](https://github.com/ExodusMovement/assets/issues/8319)) ([461e4c4](https://github.com/ExodusMovement/assets/commit/461e4c4f46e58e3750363edb9d0b6cddbfae5478))
+* missing liquidRewards prop for polygon staking ([#8382](https://github.com/ExodusMovement/assets/issues/8382)) ([7d7d8ba](https://github.com/ExodusMovement/assets/commit/7d7d8ba62570fc3bf8ea9c58d514e0fc4dc70697))
+
+
+### Performance Improvements
+
+* **ethereum:** reduce background staking request volume ([#8617](https://github.com/ExodusMovement/assets/issues/8617)) ([a9746d9](https://github.com/ExodusMovement/assets/commit/a9746d98ee0a2a04f5fd0131d3f1228cbc0aacf2))
+
+
+
 ## [2.35.0](https://github.com/ExodusMovement/assets/compare/@exodus/ethereum-plugin@2.33.0...@exodus/ethereum-plugin@2.35.0) (2026-08-04)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exodus/ethereum-plugin",
-  "version": "2.35.0",
+  "version": "2.35.2",
   "description": "Ethereum plugin for Exodus SDK powered wallets",
   "type": "module",
   "main": "src/index.js",
@@ -16,15 +16,13 @@
     "provenance": false
   },
   "scripts": {
-    "test": "run -T exodus-test --jest",
-    "lint": "run -T eslintc .",
-    "lint:fix": "yarn lint --fix"
+    "test": "exodus-test --jest"
   },
   "dependencies": {
     "@exodus/asset-lib": "^5.9.2",
     "@exodus/basic-utils": "^3.0.1",
     "@exodus/currency": "^6.0.1",
-    "@exodus/ethereum-api": "^8.77.2",
+    "@exodus/ethereum-api": "^9.0.0",
     "@exodus/ethereum-lib": "^5.25.0",
     "@exodus/ethereum-meta": "^2.9.0",
     "@exodus/ethereumjs": "^1.0.0",
@@ -38,10 +36,10 @@
     "@exodus/assets": "^11.4.0",
     "@exodus/assets-testing": "^1.0.0",
     "@exodus/crypto": "^1.0.0-rc.13",
-    "@exodus/evm-fork-testing": "^0.7.1",
+    "@exodus/evm-fork-testing": "^0.7.2",
     "@exodus/models": "^13.0.0",
     "@exodus/solidity-contract": "^1.3.0",
-    "@exodus/web3-ethereum-utils": "^4.7.6",
+    "@exodus/web3-ethereum-utils": "^5.0.1",
     "delay": "^4.0.1",
     "ms": "^2.1.1"
   },
@@ -53,5 +51,5 @@
     "type": "git",
     "url": "git+https://github.com/ExodusMovement/assets.git"
   },
-  "gitHead": "e878130c84c596ee86050984806b0da491e14910"
+  "gitHead": "92d6cdde313e5244fb05a99b1be964a96f989c3b"
 }

package/src/staking/polygon/api.js

@@ -1,4 +1,6 @@
 import {
+  createCachedStakingRead,
+  EthLikeRpcRequestAccumulator,
   EVM_ERROR_REASONS,
   fromHexToBN,
   fromHexToString,
@@ -16,7 +18,15 @@ import { mainnetContracts } from './contracts/index.js'
 const RETRY_DELAYS = ['10s']
 
 class StakingServer {
-  constructor({ asset, server, contracts = mainnetContracts }) {
+  constructor({ asset, server, contracts = mainnetContracts, createRpcRequestAccumulator }) {
+    // Only the reviewed mainnet getters are caller-independent. Custom contracts
+    // retain isolated JSON-RPC execution rather than inheriting that assumption.
+    this.createRpcRequestAccumulator =
+      Object.entries(mainnetContracts).every(
+        ([key, address]) => contracts[key]?.toLowerCase() === address
+      ) && createRpcRequestAccumulator
+        ? createRpcRequestAccumulator
+        : () => new EthLikeRpcRequestAccumulator()
     this.asset = asset
     // harcoded exchange rate from the validator share contract
     // in order to calculate claim unstake amount off-chain
@@ -54,6 +64,51 @@ class StakingServer {
     })
   }
 
+  // Reviewed ValidatorShare getters use explicit user arguments, public storage
+  // getters and caller-independent exchange-rate/reward calculations. Unlike
+  // transaction simulation, none requires the original eth_call msg.sender.
+  // aggregate is all-or-nothing: a reverted/malformed read must reject the state.
+  getStakingState = async (address) => {
+    const read = () => {
+      const requests = this.createRpcRequestAccumulator()
+      for (const [contract, method, ...args] of [
+        [this.validatorShareContract, 'getTotalStake', address],
+        [this.validatorShareContract, 'minAmount'],
+        [this.validatorShareContract, 'getLiquidRewards', address],
+        [this.validatorShareContract, 'unbondNonces', address],
+        [this.stakingManagerContract, 'withdrawalDelay'],
+        [this.stakingManagerContract, 'epoch'],
+        [this.validatorShareContract, 'withdrawExchangeRate'],
+      ]) {
+        requests.contractStaticCallRequest(contract, method, ...args)
+      }
+      return requests.flush(this.server)
+    }
+    const [[stake], [minimum], [liquid], [nonce], [delay], [epoch], [rate]] = await withErrorReason(
+      {
+        promise: retry(read, { delayTimesMs: RETRY_DELAYS })(),
+        errorReasonInfo: EVM_ERROR_REASONS.ethCallFailed,
+        hint: safeString`stakingPolygonReadFunctionContract`,
+        baseAssetName: this.server.baseAssetName,
+      }
+    )
+    const unbondNonce = Number(nonce)
+    if (!Number.isSafeInteger(unbondNonce)) throw new Error('Invalid Polygon unbond nonce')
+    return {
+      delegatedBalance: this.asset.currency.baseUnit(stake),
+      minRewardsToWithdraw: this.asset.currency.baseUnit(minimum),
+      liquidRewards: this.asset.currency.baseUnit(liquid),
+      unbondNonce,
+      withdrawalDelay: new BN(delay),
+      currentEpoch: new BN(epoch),
+      withdrawExchangeRate: new BN(rate),
+    }
+  }
+
+  getCachedTotalRewards = createCachedStakingRead({
+    read: (address) => this.getTotalRewards(address, { throwOnError: true }),
+  })
+
   getWithdrawalDelay = async () => {
     const withdrawalDelay = await this.#callReadFunctionContract(
       this.stakingManagerContract,
@@ -127,7 +182,7 @@ class StakingServer {
     return this.asset.currency.baseUnit(liquidRewards)
   }
 
-  getTotalRewards = async (address) => {
+  getTotalRewards = async (address, { throwOnError = false } = {}) => {
     // use external everstake API to get total rewards
     const EVERSTAKE_API_URL = 'https://polygon-clarity.a.exodus.io/everstake-rewards'
     const url = new URL(EVERSTAKE_API_URL)
@@ -142,11 +197,22 @@ class StakingServer {
 
     try {
       const response = await fetch(url.toString(), options)
+      if (!response.ok) throw new Error('Failed to fetch Polygon total rewards')
       const res = await response.json()
-      if (res === 'address' || !res?.rewards) return this.asset.currency.ZERO // address not found
-      return this.asset.currency.baseUnit(res.rewards)
+      if (res === 'address') return this.asset.currency.ZERO // address not found
+      const rewards = res?.rewards
+      if (
+        !(
+          (typeof rewards === 'string' && /^\d+$/.test(rewards)) ||
+          (Number.isSafeInteger(rewards) && rewards >= 0)
+        )
+      ) {
+        throw new Error('Malformed Polygon total rewards')
+      }
+      return this.asset.currency.baseUnit(rewards)
     } catch (error) {
       console.warn('Error fetching Polygon total rewards:', error)
+      if (throwOnError) throw error
       return this.asset.currency.ZERO
     }
   }
@@ -218,5 +284,16 @@ class StakingServer {
   }
 }
 
-export const stakingServerFactory = ({ assetName, currency, contracts, server }) =>
-  new StakingServer({ asset: { name: assetName, currency }, contracts, server })
+export const stakingServerFactory = ({
+  assetName,
+  currency,
+  contracts,
+  server,
+  createRpcRequestAccumulator,
+}) =>
+  new StakingServer({
+    asset: { name: assetName, currency },
+    contracts,
+    server,
+    createRpcRequestAccumulator,
+  })

package/src/staking/polygon/contracts/index.js

@@ -1,6 +1,8 @@
+import { EVERSTAKE_VALIDATOR_CONTRACT_ADDR, STAKING_MANAGER_ADDR } from '@exodus/ethereum-api'
+
 export const mainnetContracts = {
-  VALIDATOR_SHARES_CONTRACT_ADDR: '0xf30cf4ed712d3734161fdaab5b1dbb49fd2d0e5c',
-  STAKING_MANAGER_ADDR: '0x5e3ef299fddf15eaa0432e6e66473ace8c13d908',
+  VALIDATOR_SHARES_CONTRACT_ADDR: EVERSTAKE_VALIDATOR_CONTRACT_ADDR,
+  STAKING_MANAGER_ADDR,
   TOKEN_CONTRACT: '0x7d1afa7b718fb893db30a3abc0cfc608aacfebb0',
 }
 

package/src/staking/polygon/index.js

@@ -17,6 +17,12 @@ export const polygonStakingConfig = {
     claimRewards: true,
   },
   contracts: mainnetContracts,
+  // The token contract is deliberately excluded: plain POL transfers are not
+  // staking activity.
+  activityContracts: [
+    mainnetContracts.VALIDATOR_SHARES_CONTRACT_ADDR,
+    mainnetContracts.STAKING_MANAGER_ADDR,
+  ],
   methodIds,
 }
 

package/src/staking/polygon/service.js

@@ -1,5 +1,4 @@
 import { memoize } from '@exodus/basic-utils'
-// eslint-disable-next-line @exodus/import/no-deprecated
 import NumberUnit, { isNumberUnit } from '@exodus/currency'
 import {
   estimateGasLimit,
@@ -42,7 +41,6 @@ export function stakingServiceFactory({ assetClientInterface, server: _server, s
   const assetName = 'ethereum'
 
   function amountToCurrency({ asset, amount }) {
-    // eslint-disable-next-line @exodus/import/no-deprecated
     return isNumberUnit(amount) ? amount : asset.currency.parse(amount)
   }
 
@@ -589,22 +587,6 @@ export function stakingServiceFactory({ assetClientInterface, server: _server, s
   }
 }
 
-async function fetchUnstakedClaimInfo({ stakingServer, delegator }) {
-  const [unbondNonce, withdrawalDelay, currentEpoch, withdrawExchangeRate] = await Promise.all([
-    stakingServer.getCurrentUnbondNonce(delegator),
-    stakingServer.getWithdrawalDelay(),
-    stakingServer.getCurrentCheckpoint(),
-    stakingServer.getWithdrawExchangeRate(),
-  ])
-
-  return {
-    unbondNonce,
-    withdrawalDelay,
-    currentEpoch,
-    withdrawExchangeRate,
-  }
-}
-
 function calculateUnclaimedTokens({
   currency,
   exchangeRatePrecision,
@@ -665,40 +647,34 @@ async function getUnstakedUnclaimedInfo({
   }
 }
 
-async function fetchRewardsInfo({ stakingServer, delegator, currency }) {
-  const [minRewardsToWithdraw, lastRewards, rewardsBalance] = await Promise.all([
-    stakingServer.getMinRewardsToWithdraw(),
-    stakingServer.getLiquidRewards(delegator),
-    stakingServer.getTotalRewards(delegator),
-  ])
-  const withdrawable = lastRewards.sub(minRewardsToWithdraw).gte(currency.ZERO)
-    ? lastRewards
-    : currency.ZERO
-
-  return {
-    rewardsBalance: rewardsBalance.add(lastRewards), // all time accrued rewards
-    liquidRewards: lastRewards, // current pending rewards (on-chain)
-    minRewardsToWithdraw,
-    withdrawable, // unclaimed rewards
-  }
-}
-
 export function getPolygonStakingInfo({ assetClientInterface, stakingServer }) {
-  return async function ({ address }) {
+  return async function ({ address, useCache = false, background = false }) {
     const { polygon: asset } = await assetClientInterface.getAssetsForNetwork({
       baseAssetName: 'ethereum', // Polygon token lives in ETH network
     })
     const { currency } = asset
     const delegator = address.toLowerCase()
     const [
-      delegatedBalance,
-      { rewardsBalance, liquidRewards, minRewardsToWithdraw, withdrawable },
-      { unbondNonce, withdrawalDelay, currentEpoch, withdrawExchangeRate },
+      {
+        delegatedBalance,
+        liquidRewards,
+        minRewardsToWithdraw,
+        unbondNonce,
+        withdrawalDelay,
+        currentEpoch,
+        withdrawExchangeRate,
+      },
+      totalRewards,
     ] = await Promise.all([
-      stakingServer.getTotalStake(delegator),
-      fetchRewardsInfo({ stakingServer, delegator, currency }),
-      fetchUnstakedClaimInfo({ stakingServer, delegator }),
+      stakingServer.getStakingState(delegator),
+      // Preserve rewards metadata on provider failure without blocking discovery
+      // of real on-chain stake during restore.
+      stakingServer
+        .getCachedTotalRewards(delegator, { useCache })
+        .catch(() => (background ? null : currency.ZERO)),
     ])
+    const rewardsBalance = totalRewards?.add(liquidRewards)
+    const withdrawable = liquidRewards.gte(minRewardsToWithdraw) ? liquidRewards : currency.ZERO
     const minDelegateAmount = currency.defaultUnit(1)
     const isDelegating = !delegatedBalance.isZero
 
@@ -713,7 +689,7 @@ export function getPolygonStakingInfo({ assetClientInterface, stakingServer }) {
     })
 
     return {
-      rewardsBalance,
+      ...(rewardsBalance !== undefined && { rewardsBalance }),
       liquidRewards,
       withdrawable,
       unbondNonce,

package/src/staking/polygon/staking-utils.js

@@ -177,7 +177,7 @@ const calculateRewardsFromStakeTxFactory =
 
     if (stakeTxContainsReward) {
       const txAmount = stakedAmount.sub(tx.coinAmount.abs()).abs()
-      // eslint-disable-next-line @exodus/mutable/no-param-reassign-prop-only -- TODO: Fix this the next time the file is edited.
+      // eslint-disable-next-line @exodus/hydra/no-param-reassign-prop-only -- TODO: Fix this the next time the file is edited.
       return txAmount.toDefaultString()
     }
   }

package/src/staking.js

@@ -1,11 +1,14 @@
-import { ethereumStakingDeps } from '@exodus/ethereum-api'
+import { EthereumStaking, ethereumStakingDeps } from '@exodus/ethereum-api'
 import { ethStakeAccountState } from '@exodus/ethereum-lib'
 import { asset } from '@exodus/ethereum-meta'
 
 import { polygonStakingConfig, polygonStakingDeps } from './staking/polygon/index.js'
 
 export const stakingConfiguration = {
-  ethereum: { accountStateExtraData: ethStakeAccountState(asset) },
+  ethereum: {
+    accountStateExtraData: ethStakeAccountState(asset),
+    activityContracts: Object.values(EthereumStaking.addresses.ethereum),
+  },
   polygon: polygonStakingConfig,
 }