@exodus/solana-api 3.19.0 → 3.20.1

package/CHANGELOG.md

@@ -3,6 +3,26 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [3.20.1](https://github.com/ExodusMovement/assets/compare/@exodus/solana-api@3.20.0...@exodus/solana-api@3.20.1) (2025-06-11)
+
+
+### Bug Fixes
+
+
+* fix: SOL owner changed check (#5805)
+
+
+
+## [3.20.0](https://github.com/ExodusMovement/assets/compare/@exodus/solana-api@3.19.0...@exodus/solana-api@3.20.0) (2025-06-11)
+
+
+### Features
+
+
+* feat(solana): implement unconfirmedSent/unconfirmedReceived in solana balances (#5802)
+
+
+
 ## [3.19.0](https://github.com/ExodusMovement/assets/compare/@exodus/solana-api@3.18.2...@exodus/solana-api@3.19.0) (2025-06-10)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exodus/solana-api",
-  "version": "3.19.0",
+  "version": "3.20.1",
   "description": "Transaction monitors, fee monitors, RPC with the blockchain node, and other networking code for Solana",
   "type": "module",
   "main": "src/index.js",
@@ -46,7 +46,7 @@
     "@exodus/assets-testing": "^1.0.0",
     "@exodus/solana-web3.js": "^1.63.1-exodus.9-rc3"
   },
-  "gitHead": "86087d4d05ab6aa603b936c24723e5999f826424",
+  "gitHead": "8302af88cf085350c4c0149ab5e581e8297c548b",
   "bugs": {
     "url": "https://github.com/ExodusMovement/assets/issues?q=is%3Aissue+is%3Aopen+label%3Asolana-api"
   },

package/src/account-state.js

@@ -21,6 +21,7 @@ export const createAccountState = ({ assetList }) => {
       tokenBalances: Object.create(null),
       rentExemptAmount: asset.currency.ZERO,
       accountSize: 0,
+      ownerChanged: false,
       stakingInfo: {
         loaded: false,
         staking: {

package/src/api.js

@@ -953,6 +953,19 @@ export class Api {
     return owner && owner !== address
   }
 
+  async ownerChanged(address, accountInfo) {
+    // method to check if the owner of the account has changed, compared to standard programs.
+    // as there could be malicious dapps that reassign the ownership of the account (see https://github.com/coinspect/solana-assign-test)
+    const value = accountInfo || (await this.getAccountInfo(address))
+    const owner = value?.owner // program owner
+    if (!owner) return false // not initialized account (or purged)
+    return ![
+      SYSTEM_PROGRAM_ID.toBase58(),
+      TOKEN_PROGRAM_ID.toBase58(),
+      TOKEN_2022_PROGRAM_ID.toBase58(),
+    ].includes(owner)
+  }
+
   ataOwnershipChangedCached = memoizeLruCache(
     (...args) => this.ataOwnershipChanged(...args),
     (address, tokenAddress) => `${address}:${tokenAddress}`,

package/src/get-balances.js

@@ -8,7 +8,15 @@ export const getBalancesFactory =
   ({ asset, accountState, txLog }) => {
     const zero = asset.currency.ZERO
 
-    const { balance, locked, activating, withdrawable, pending } = fixBalances({
+    const {
+      balance,
+      locked,
+      activating,
+      withdrawable,
+      pending,
+      unconfirmedSent,
+      unconfirmedReceived,
+    } = fixBalances({
       txLog,
       balance: getBalanceFromAccountState({ asset, accountState }),
       locked: accountState.stakingInfo?.locked || zero,
@@ -16,6 +24,8 @@ export const getBalancesFactory =
       activating: accountState.stakingInfo?.activating || zero,
       pending: accountState.stakingInfo?.pending || zero,
       asset,
+      unconfirmedSent: zero,
+      unconfirmedReceived: zero,
     })
     if (asset.baseAsset.name !== asset.name) {
       return {
@@ -70,6 +80,8 @@ export const getBalancesFactory =
       unstaking,
       networkReserve,
       walletReserve: zero,
+      unconfirmedSent,
+      unconfirmedReceived,
     }
   }
 
@@ -81,41 +93,56 @@ const fixBalances = ({
   activating,
   pending,
   asset,
+  unconfirmedSent,
+  unconfirmedReceived,
 }) => {
   for (const tx of txLog) {
-    if ((tx.sent || tx.data.staking) && tx.pending && !tx.error) {
+    if (!tx.pending || tx.error) {
+      continue
+    }
+
+    if (tx.data.staking) {
+      if (tx.coinAmount.unitType.equals(tx.feeAmount.unitType)) {
+        unconfirmedSent = unconfirmedSent.add(tx.feeAmount)
+      }
+
+      // staking tx
+      switch (tx.data.staking?.method) {
+        case 'delegate':
+          activating = activating.add(tx.coinAmount.abs())
+          break
+        case 'withdraw':
+          withdrawable = asset.currency.ZERO
+          break
+        case 'undelegate':
+          pending = pending.add(locked).add(activating)
+          locked = asset.currency.ZERO
+          activating = asset.currency.ZERO
+          break
+      }
+    } else if (tx.sent) {
       if (tx.coinAmount.unitType.equals(tx.feeAmount.unitType)) {
-        balance = balance.sub(tx.feeAmount)
+        unconfirmedSent = unconfirmedSent.add(tx.feeAmount)
       }
 
-      if (tx.data.staking) {
-        // staking tx
-        switch (tx.data.staking?.method) {
-          case 'delegate':
-            activating = activating.add(tx.coinAmount.abs())
-            break
-          case 'withdraw':
-            withdrawable = asset.currency.ZERO
-            break
-          case 'undelegate':
-            pending = pending.add(locked).add(activating)
-            locked = asset.currency.ZERO
-            activating = asset.currency.ZERO
-            break
-        }
-      } else {
-        // coinAmount is negative for sent tx
-        balance = balance.sub(tx.coinAmount.abs())
+      unconfirmedSent = unconfirmedSent.add(tx.coinAmount.abs())
+    } else if (tx.received) {
+      if (tx.coinAmount.unitType.equals(tx.feeAmount.unitType)) {
+        unconfirmedReceived = unconfirmedReceived.sub(tx.feeAmount)
       }
+
+      unconfirmedReceived = unconfirmedReceived.add(tx.coinAmount.abs())
     }
   }
 
   return {
-    balance: balance.clampLowerZero(),
+    balance: balance.sub(unconfirmedSent).clampLowerZero(),
     locked: locked.clampLowerZero(),
     withdrawable: withdrawable.clampLowerZero(),
     activating: activating.clampLowerZero(),
     pending: pending.clampLowerZero(),
+    unconfirmedSent,
+    unconfirmedReceived,
   }
 }
 

package/src/tx-log/solana-monitor.js

@@ -305,6 +305,8 @@ export class SolanaMonitor extends BaseMonitor {
       await this.api.getMinimumBalanceForRentExemption(accountSize)
     )
 
+    const ownerChanged = await this.api.ownerChanged(address, accountInfo)
+
     const tokenBalances = _.mapValues(splBalances, (balance, name) =>
       this.assets[name].currency.baseUnit(balance)
     )
@@ -343,6 +345,7 @@ export class SolanaMonitor extends BaseMonitor {
         tokenBalances,
         rentExemptAmount,
         accountSize,
+        ownerChanged,
       },
       staking,
       tokenAccounts,
@@ -350,11 +353,12 @@ export class SolanaMonitor extends BaseMonitor {
   }
 
   async updateState({ account, cursorState, walletAccount, staking }) {
-    const { balance, tokenBalances, rentExemptAmount, accountSize } = account
+    const { balance, tokenBalances, rentExemptAmount, accountSize, ownerChanged } = account
     const newData = {
       balance,
       rentExemptAmount,
       accountSize,
+      ownerChanged,
       tokenBalances,
       stakingInfo: staking,
       ...cursorState,