@lodestar/flare 1.35.0-dev.f80d2d52da → 1.35.0-dev.fcf8d024ea

package/lib/cli.d.ts

@@ -1,8 +1,8 @@
-import yargs from "yargs";
-export declare const yarg: yargs.Argv<{}>;
+import { Argv } from "yargs";
+export declare const yarg: Argv<{}>;
 /**
  * Common factory for running the CLI and running integration tests
  * The CLI must actually be executed in a different script
  */
-export declare function getCli(): yargs.Argv;
+export declare function getCli(): Argv;
 //# sourceMappingURL=cli.d.ts.map

package/lib/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AACA,OAAc,EAAC,IAAI,EAAC,MAAM,OAAO,CAAC;AAgBlC,eAAO,MAAM,IAAI,UAAiE,CAAC;AAEnF;;;GAGG;AACH,wBAAgB,MAAM,IAAI,IAAI,CA6B7B"}

package/lib/cli.js

@@ -1,7 +1,7 @@
-import { registerCommandToYargs } from "@lodestar/utils";
 // Must not use `* as yargs`, see https://github.com/yargs/yargs/issues/1131
 import yargs from "yargs";
 import { hideBin } from "yargs/helpers";
+import { registerCommandToYargs } from "@lodestar/utils";
 import { cmds } from "./cmds/index.js";
 const topBanner = `Beacon chain multi-purpose and debugging tool.
 

package/lib/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,sBAAsB,EAAC,MAAM,iBAAiB,CAAC;AACvD,4EAA4E;AAC5E,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAC,OAAO,EAAC,MAAM,eAAe,CAAC;AACtC,OAAO,EAAC,IAAI,EAAC,MAAM,iBAAiB,CAAC;AAErC,MAAM,SAAS,GAAG;;;;;;iCAMe,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AAC5D,MAAM,YAAY,GAAG;;0CAEqB,CAAC;AAE3C,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,CAAE,OAAwC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAEnF;;;GAGG;AACH,MAAM,UAAU,MAAM;IACpB,MAAM,QAAQ,GAAG,IAAI;SAClB,GAAG,CAAC,OAAO,CAAC;SACZ,mBAAmB,CAAC;QACnB,0DAA0D;QAC1D,2DAA2D;QAC3D,cAAc,EAAE,KAAK;KACtB,CAAC;QACF,sFAAsF;SACrF,UAAU,CAAC,EAAE,CAAC;SACd,aAAa,CAAC,CAAC,CAAC;QACjB,+CAA+C;SAC9C,cAAc,CAAC,KAAK,CAAC;SACrB,KAAK,CAAC,SAAS,CAAC;SAChB,QAAQ,CAAC,YAAY,CAAC;SACtB,OAAO,CAAC,SAAS,CAAC;SAClB,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;SAClB,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC;SACrB,iBAAiB,EAAE,CAAC;IAEvB,+BAA+B;IAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,sBAAsB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,+CAA+C;IAC/C,QAAQ,CAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,CAAC;IAEtC,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,OAAO,KAAa,MAAM,OAAO,CAAC;AAClC,OAAO,EAAC,OAAO,EAAC,MAAM,eAAe,CAAC;AACtC,OAAO,EAAC,sBAAsB,EAAC,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAC,IAAI,EAAC,MAAM,iBAAiB,CAAC;AAErC,MAAM,SAAS,GAAG;;;;;;iCAMe,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AAC5D,MAAM,YAAY,GAAG;;0CAEqB,CAAC;AAE3C,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,CAAE,OAAwC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAEnF;;;GAGG;AACH,MAAM,UAAU,MAAM;IACpB,MAAM,QAAQ,GAAG,IAAI;SAClB,GAAG,CAAC,OAAO,CAAC;SACZ,mBAAmB,CAAC;QACnB,0DAA0D;QAC1D,2DAA2D;QAC3D,cAAc,EAAE,KAAK;KACtB,CAAC;QACF,sFAAsF;SACrF,UAAU,CAAC,EAAE,CAAC;SACd,aAAa,CAAC,CAAC,CAAC;QACjB,+CAA+C;SAC9C,cAAc,CAAC,KAAK,CAAC;SACrB,KAAK,CAAC,SAAS,CAAC;SAChB,QAAQ,CAAC,YAAY,CAAC;SACtB,OAAO,CAAC,SAAS,CAAC;SAClB,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;SAClB,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC;SACrB,iBAAiB,EAAE,CAAC;IAEvB,+BAA+B;IAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,sBAAsB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,+CAA+C;IAC/C,QAAQ,CAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,CAAC;IAEtC,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/lib/cmds/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cmds/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,iBAAiB,CAAC;AAI3C,eAAO,MAAM,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAGhG,CAAC"}

package/lib/cmds/selfSlashAttester.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selfSlashAttester.d.ts","sourceRoot":"","sources":["../../src/cmds/selfSlashAttester.ts"],"names":[],"mappings":"AAOA,OAAO,EAAC,UAAU,EAAc,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAC,cAAc,EAAsC,MAAM,6BAA6B,CAAC;AAEhG,KAAK,aAAa,GAAG,cAAc,GAAG;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,IAAI,CA4BnF,CAAC;AAEF,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA0FjF"}

package/lib/cmds/selfSlashProposer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selfSlashProposer.d.ts","sourceRoot":"","sources":["../../src/cmds/selfSlashProposer.ts"],"names":[],"mappings":"AAOA,OAAO,EAAC,UAAU,EAAc,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAC,cAAc,EAAsC,MAAM,6BAA6B,CAAC;AAEhG,KAAK,aAAa,GAAG,cAAc,GAAG;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,IAAI,CA4BnF,CAAC;AAEF,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAoFjF"}

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAIA,OAAO,gCAAgC,CAAC"}

package/lib/util/deriveSecretKeys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deriveSecretKeys.d.ts","sourceRoot":"","sources":["../../src/util/deriveSecretKeys.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,SAAS,EAAC,MAAM,iBAAiB,CAAC;AAE1C,OAAO,EAAC,iBAAiB,EAAC,MAAM,iBAAiB,CAAC;AAIlD,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,iBAAiB,CAAC,cAAc,CAa/D,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,SAAS,EAAE,CAoBlE"}

package/lib/util/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/util/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,UAAW,SAAQ,KAAK;CAAG"}

package/lib/util/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../src/util/format.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAiBlD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lodestar/flare",
-  "version": "1.35.0-dev.f80d2d52da",
+  "version": "1.35.0-dev.fcf8d024ea",
   "description": "Beacon chain debugging tool",
   "author": "ChainSafe Systems",
   "license": "Apache-2.0",
@@ -11,6 +11,7 @@
   "type": "module",
   "exports": {
     ".": {
+      "bun": "./src/index.ts",
       "import": "./lib/index.js"
     }
   },
@@ -25,11 +26,9 @@
   },
   "types": "lib/index.d.ts",
   "files": [
-    "lib/**/*.js",
-    "lib/**/*.js.map",
-    "lib/**/*.d.ts",
-    "*.d.ts",
-    "*.js"
+    "src",
+    "lib",
+    "!**/*.tsbuildinfo"
   ],
   "bin": {
     "flare": "lib/index.js"
@@ -60,17 +59,17 @@
   "dependencies": {
     "@chainsafe/bls-keygen": "^0.4.0",
     "@chainsafe/blst": "^2.2.0",
-    "@lodestar/api": "1.35.0-dev.f80d2d52da",
-    "@lodestar/config": "1.35.0-dev.f80d2d52da",
-    "@lodestar/params": "1.35.0-dev.f80d2d52da",
-    "@lodestar/state-transition": "1.35.0-dev.f80d2d52da",
-    "@lodestar/types": "1.35.0-dev.f80d2d52da",
-    "@lodestar/utils": "1.35.0-dev.f80d2d52da",
+    "@lodestar/api": "1.35.0-dev.fcf8d024ea",
+    "@lodestar/config": "1.35.0-dev.fcf8d024ea",
+    "@lodestar/params": "1.35.0-dev.fcf8d024ea",
+    "@lodestar/state-transition": "1.35.0-dev.fcf8d024ea",
+    "@lodestar/types": "1.35.0-dev.fcf8d024ea",
+    "@lodestar/utils": "1.35.0-dev.fcf8d024ea",
     "source-map-support": "^0.5.21",
     "yargs": "^17.7.1"
   },
   "devDependencies": {
     "@types/yargs": "^17.0.24"
   },
-  "gitHead": "16b0aa696115a011948479fd965d742e131dfc83"
+  "gitHead": "d72abda1a1607ce062febfcfc4528b9e9848c288"
 }

package/src/cli.ts

@@ -0,0 +1,53 @@
+// Must not use `* as yargs`, see https://github.com/yargs/yargs/issues/1131
+import yargs, {Argv} from "yargs";
+import {hideBin} from "yargs/helpers";
+import {registerCommandToYargs} from "@lodestar/utils";
+import {cmds} from "./cmds/index.js";
+
+const topBanner = `Beacon chain multi-purpose and debugging tool.
+
+Flare is a sudden brief burst of bright flame or light.
+In the wrong hands, can lead people astray.
+Use with care.
+
+  * by ChainSafe Systems, 2018-${new Date().getFullYear()}`;
+const bottomBanner = `
+✍️ Give feedback and report issues on GitHub:
+  * https://github.com/ChainSafe/lodestar`;
+
+export const yarg = yargs((hideBin as (args: string[]) => string[])(process.argv));
+
+/**
+ * Common factory for running the CLI and running integration tests
+ * The CLI must actually be executed in a different script
+ */
+export function getCli(): Argv {
+  const lodestar = yarg
+    .env("FLARE")
+    .parserConfiguration({
+      // As of yargs v16.1.0 dot-notation breaks strictOptions()
+      // Manually processing options is typesafe tho more verbose
+      "dot-notation": false,
+    })
+    // blank scriptName so that help text doesn't display the cli name before each command
+    .scriptName("")
+    .demandCommand(1)
+    // Control show help behaviour below on .fail()
+    .showHelpOnFail(false)
+    .usage(topBanner)
+    .epilogue(bottomBanner)
+    .version(topBanner)
+    .alias("h", "help")
+    .alias("v", "version")
+    .recommendCommands();
+
+  // yargs.command and all ./cmds
+  for (const cmd of cmds) {
+    registerCommandToYargs(lodestar, cmd);
+  }
+
+  // throw an error if we see an unrecognized cmd
+  lodestar.recommendCommands().strict();
+
+  return lodestar;
+}

package/src/cmds/index.ts

@@ -0,0 +1,8 @@
+import {CliCommand} from "@lodestar/utils";
+import {selfSlashAttester} from "./selfSlashAttester.js";
+import {selfSlashProposer} from "./selfSlashProposer.js";
+
+export const cmds: Required<CliCommand<Record<never, never>, Record<never, never>>>["subcommands"] = [
+  selfSlashProposer,
+  selfSlashAttester,
+];

package/src/cmds/selfSlashAttester.ts

@@ -0,0 +1,150 @@
+import {SecretKey, aggregateSignatures} from "@chainsafe/blst";
+import {getClient} from "@lodestar/api";
+import {BeaconConfig, createBeaconConfig} from "@lodestar/config";
+import {config as chainConfig} from "@lodestar/config/default";
+import {DOMAIN_BEACON_ATTESTER, MAX_VALIDATORS_PER_COMMITTEE} from "@lodestar/params";
+import {computeSigningRoot} from "@lodestar/state-transition";
+import {AttesterSlashing, phase0, ssz} from "@lodestar/types";
+import {CliCommand, toPubkeyHex} from "@lodestar/utils";
+import {SecretKeysArgs, deriveSecretKeys, secretKeysOptions} from "../util/deriveSecretKeys.js";
+
+type SelfSlashArgs = SecretKeysArgs & {
+  server: string;
+  slot: string;
+  batchSize: string;
+};
+
+export const selfSlashAttester: CliCommand<SelfSlashArgs, Record<never, never>, void> = {
+  command: "self-slash-attester",
+  describe: "Self slash validators of a provided mnemonic with AttesterSlashing",
+  examples: [
+    {
+      command: "self-slash-proposer --network holesky",
+      description: "Self slash validators of a provided mnemonic",
+    },
+  ],
+  options: {
+    ...secretKeysOptions,
+    server: {
+      description: "Address to connect to BeaconNode",
+      default: "http://127.0.0.1:9596",
+      type: "string",
+    },
+    slot: {
+      description: "AttesterSlashing data slot",
+      default: "0",
+      type: "string",
+    },
+    batchSize: {
+      description: "Add batchSize validators in each AttesterSlashing. Must be < MAX_VALIDATORS_PER_COMMITTEE",
+      default: "10",
+      type: "string",
+    },
+  },
+  handler: selfSlashAttesterHandler,
+};
+
+export async function selfSlashAttesterHandler(args: SelfSlashArgs): Promise<void> {
+  const sksAll = deriveSecretKeys(args);
+
+  const slot = BigInt(args.slot); // Throws if not valid
+  const batchSize = parseInt(args.batchSize);
+
+  if (Number.isNaN(batchSize)) throw Error(`Invalid arg batchSize ${args.batchSize}`);
+  if (batchSize <= 0) throw Error(`batchSize must be > 0: ${batchSize}`);
+  if (batchSize > MAX_VALIDATORS_PER_COMMITTEE) throw Error("batchSize must be < MAX_VALIDATORS_PER_COMMITTEE");
+
+  // TODO: Ask the user to confirm the range and slash action
+
+  const client = getClient({baseUrl: args.server}, {config: chainConfig});
+
+  // Get genesis data to perform correct signatures
+  const {genesisValidatorsRoot} = (await client.beacon.getGenesis()).value();
+
+  const config = createBeaconConfig(chainConfig, genesisValidatorsRoot);
+
+  // TODO: Allow to customize the ProposerSlashing payloads
+
+  const rootA = Buffer.alloc(32, 0xaa);
+  const rootB = Buffer.alloc(32, 0xbb);
+
+  // To log progress
+  let successCount = 0;
+  const totalCount = sksAll.length;
+
+  for (let n = 0; n < sksAll.length; n += batchSize) {
+    const sks = sksAll.slice(n, n + batchSize);
+
+    // Retrieve the status all all validators in range at once
+    const pksHex = sks.map((sk) => sk.toPublicKey().toHex());
+    const validators = (await client.beacon.postStateValidators({stateId: "head", validatorIds: pksHex})).value();
+
+    // All validators in the batch will be part of the same AttesterSlashing
+    const attestingIndices = validators.map((v) => v.index);
+
+    // Submit all ProposerSlashing for range at once
+
+    // Ensure sorted response
+    for (let i = 0; i < pksHex.length; i++) {
+      const {index, status, validator} = validators[i];
+      const pkHex = pksHex[i];
+      const validatorPkHex = toPubkeyHex(validator.pubkey);
+      if (validatorPkHex !== pkHex) {
+        throw Error(`Beacon node did not return same validator pubkey: ${validatorPkHex} != ${pkHex}`);
+      }
+
+      if (status === "active_slashed" || status === "exited_slashed") {
+        console.log(`Warning: validator index ${index} is already slashed`);
+      }
+    }
+
+    // Trigers a double vote, same target epoch different data (beaconBlockRoot)
+    // TODO: Allow to create double-votes
+    const data1: phase0.AttestationDataBigint = {
+      slot,
+      index: BigInt(0),
+      beaconBlockRoot: rootA,
+      source: {epoch: BigInt(0), root: rootA},
+      target: {epoch: BigInt(0), root: rootB},
+    };
+    const data2: phase0.AttestationDataBigint = {
+      slot,
+      index: BigInt(0),
+      beaconBlockRoot: rootB,
+      source: {epoch: BigInt(0), root: rootA},
+      target: {epoch: BigInt(0), root: rootB},
+    };
+
+    const attesterSlashing: AttesterSlashing = {
+      attestation1: {
+        attestingIndices,
+        data: data1,
+        signature: signAttestationDataBigint(config, sks, data1),
+      },
+      attestation2: {
+        attestingIndices,
+        data: data2,
+        signature: signAttestationDataBigint(config, sks, data2),
+      },
+    };
+
+    (await client.beacon.submitPoolAttesterSlashingsV2({attesterSlashing})).assertOk();
+
+    successCount += attestingIndices.length;
+    const indexesStr = attestingIndices.join(",");
+    console.log(`Submitted self AttesterSlashing for validators ${indexesStr} - ${successCount}/${totalCount}`);
+  }
+}
+
+function signAttestationDataBigint(
+  config: BeaconConfig,
+  sks: SecretKey[],
+  data: phase0.AttestationDataBigint
+): Uint8Array {
+  const slot = Number(data.slot as bigint);
+  const proposerDomain = config.getDomain(slot, DOMAIN_BEACON_ATTESTER);
+  const signingRoot = computeSigningRoot(ssz.phase0.AttestationDataBigint, data, proposerDomain);
+
+  const sigs = sks.map((sk) => sk.sign(signingRoot));
+  return aggregateSignatures(sigs).toBytes();
+}

package/src/cmds/selfSlashProposer.ts

@@ -0,0 +1,138 @@
+import {SecretKey} from "@chainsafe/blst";
+import {getClient} from "@lodestar/api";
+import {BeaconConfig, createBeaconConfig} from "@lodestar/config";
+import {config as chainConfig} from "@lodestar/config/default";
+import {DOMAIN_BEACON_PROPOSER} from "@lodestar/params";
+import {computeSigningRoot} from "@lodestar/state-transition";
+import {phase0, ssz} from "@lodestar/types";
+import {CliCommand, toPubkeyHex} from "@lodestar/utils";
+import {SecretKeysArgs, deriveSecretKeys, secretKeysOptions} from "../util/deriveSecretKeys.js";
+
+type SelfSlashArgs = SecretKeysArgs & {
+  server: string;
+  slot: string;
+  batchSize: string;
+};
+
+export const selfSlashProposer: CliCommand<SelfSlashArgs, Record<never, never>, void> = {
+  command: "self-slash-proposer",
+  describe: "Self slash validators of a provided mnemonic with ProposerSlashing",
+  examples: [
+    {
+      command: "self-slash-proposer --network holesky",
+      description: "Self slash validators of a provided mnemonic",
+    },
+  ],
+  options: {
+    ...secretKeysOptions,
+    server: {
+      description: "Address to connect to BeaconNode",
+      default: "http://127.0.0.1:9596",
+      type: "string",
+    },
+    slot: {
+      description: "ProposerSlashing headers slot",
+      default: "0",
+      type: "string",
+    },
+    batchSize: {
+      description: "Send in batches of size batchSize",
+      default: "10",
+      type: "string",
+    },
+  },
+  handler: selfSlashProposerHandler,
+};
+
+export async function selfSlashProposerHandler(args: SelfSlashArgs): Promise<void> {
+  const sksAll = deriveSecretKeys(args);
+
+  const slot = BigInt(args.slot); // Throws if not valid
+  const batchSize = parseInt(args.batchSize);
+
+  if (Number.isNaN(batchSize)) throw Error(`Invalid arg batchSize ${args.batchSize}`);
+  if (batchSize <= 0) throw Error(`batchSize must be > 0: ${batchSize}`);
+
+  // TODO: Ask the user to confirm the range and slash action
+
+  const client = getClient({baseUrl: args.server}, {config: chainConfig});
+
+  // Get genesis data to perform correct signatures
+  const {genesisValidatorsRoot} = (await client.beacon.getGenesis()).value();
+  const config = createBeaconConfig(chainConfig, genesisValidatorsRoot);
+
+  // TODO: Allow to customize the ProposerSlashing payloads
+
+  const rootA = Buffer.alloc(32, 0xaa);
+  const rootB = Buffer.alloc(32, 0xbb);
+
+  // To log progress
+  let successCount = 0;
+  const totalCount = sksAll.length;
+
+  for (let n = 0; n < sksAll.length; n += batchSize) {
+    const sks = sksAll.slice(n, n + batchSize);
+
+    // Retrieve the status all all validators in range at once
+    const pksHex = sks.map((sk) => sk.toPublicKey().toHex());
+    const validators = (await client.beacon.postStateValidators({stateId: "head", validatorIds: pksHex})).value();
+
+    // Submit all ProposerSlashing for range at once
+    await Promise.all(
+      pksHex.map(async (pkHex, i) => {
+        const sk = sks[i];
+        const {index, status, validator} = validators[i];
+
+        try {
+          const validatorPkHex = toPubkeyHex(validator.pubkey);
+          if (validatorPkHex !== pkHex) {
+            throw Error(`Beacon node did not return same validator pubkey: ${validatorPkHex} != ${pkHex}`);
+          }
+
+          if (status === "active_slashed" || status === "exited_slashed") {
+            console.log(`Warning: validator index ${index} is already slashed`);
+          }
+
+          const header1: phase0.BeaconBlockHeaderBigint = {
+            slot,
+            proposerIndex: index,
+            parentRoot: rootA,
+            stateRoot: rootA,
+            bodyRoot: rootA,
+          };
+          const header2: phase0.BeaconBlockHeaderBigint = {
+            slot,
+            proposerIndex: index,
+            parentRoot: rootB,
+            stateRoot: rootB,
+            bodyRoot: rootB,
+          };
+
+          const proposerSlashing: phase0.ProposerSlashing = {
+            signedHeader1: {
+              message: header1,
+              signature: signHeaderBigint(config, sk, header1),
+            },
+            signedHeader2: {
+              message: header2,
+              signature: signHeaderBigint(config, sk, header2),
+            },
+          };
+
+          (await client.beacon.submitPoolProposerSlashings({proposerSlashing})).assertOk();
+
+          console.log(`Submitted self ProposerSlashing for validator ${index} - ${++successCount}/${totalCount}`);
+        } catch (e) {
+          (e as Error).message = `Error slashing validator ${index}: ${(e as Error).message}`;
+        }
+      })
+    );
+  }
+}
+
+function signHeaderBigint(config: BeaconConfig, sk: SecretKey, header: phase0.BeaconBlockHeaderBigint): Uint8Array {
+  const slot = Number(header.slot as bigint);
+  const proposerDomain = config.getDomain(slot, DOMAIN_BEACON_PROPOSER);
+  const signingRoot = computeSigningRoot(ssz.phase0.BeaconBlockHeaderBigint, header, proposerDomain);
+  return sk.sign(signingRoot).toBytes();
+}

package/src/index.ts

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+
+import {getCli, yarg} from "./cli.js";
+import {YargsError} from "./util/errors.js";
+import "source-map-support/register.js";
+
+const flare = getCli();
+
+void flare
+  .fail((msg, err) => {
+    if (msg?.includes("Not enough non-option arguments")) {
+      // Show command help message when no command is provided
+      yarg.showHelp();
+      console.log("\n");
+    }
+
+    const errorMessage =
+      err !== undefined ? (err instanceof YargsError ? err.message : err.stack) : msg || "Unknown error";
+
+    console.error(` ✖ ${errorMessage}\n`);
+    process.exit(1);
+  })
+
+  // Execute CLI
+  .parse();

package/src/util/deriveSecretKeys.ts

@@ -0,0 +1,49 @@
+import {deriveEth2ValidatorKeys, deriveKeyFromMnemonic} from "@chainsafe/bls-keygen";
+import {SecretKey} from "@chainsafe/blst";
+import {interopSecretKey} from "@lodestar/state-transition";
+import {CliCommandOptions} from "@lodestar/utils";
+import {YargsError} from "./errors.js";
+import {parseRange} from "./format.js";
+
+export type SecretKeysArgs = {
+  mnemonic?: string;
+  indexes?: string;
+  interopIndexes?: string;
+};
+
+export const secretKeysOptions: CliCommandOptions<SecretKeysArgs> = {
+  mnemonic: {
+    description: "Mnemonic to derive private keys from",
+    type: "string",
+  },
+  indexes: {
+    description: "Range of indexes to select, in inclusive range with notation '0..7'",
+    type: "string",
+  },
+  interopIndexes: {
+    description: "Range of interop indexes to select, in inclusive range with notation '0..7'",
+    type: "string",
+  },
+};
+
+export function deriveSecretKeys(args: SecretKeysArgs): SecretKey[] {
+  if (args.interopIndexes) {
+    const indexes = parseRange(args.interopIndexes);
+    return indexes.map((index) => interopSecretKey(index));
+  }
+
+  if (args.indexes || args.mnemonic) {
+    if (!args.mnemonic) throw new YargsError("arg mnemonic is required");
+    if (!args.indexes) throw new YargsError("arg indexes is required");
+
+    const masterSK = deriveKeyFromMnemonic(args.mnemonic);
+    const indexes = parseRange(args.indexes);
+
+    return indexes.map((index) => {
+      const {signing} = deriveEth2ValidatorKeys(masterSK, index);
+      return SecretKey.fromBytes(signing);
+    });
+  }
+
+  throw new YargsError("Must set arg interopIndexes or mnemonic");
+}

package/src/util/errors.ts

@@ -0,0 +1,4 @@
+/**
+ * Expected error that shouldn't print a stack trace
+ */
+export class YargsError extends Error {}

package/src/util/format.ts

@@ -0,0 +1,21 @@
+/**
+ * Parse string inclusive range: `0..32`, into an array of all values in that range
+ */
+export function parseRange(range: string): number[] {
+  if (!range.includes("..")) {
+    throw Error(`Invalid range '${range}', must include '..'`);
+  }
+
+  const [from, to] = range.split("..").map((n) => parseInt(n));
+
+  if (Number.isNaN(from)) throw Error(`Invalid range from isNaN '${range}'`);
+  if (Number.isNaN(to)) throw Error(`Invalid range to isNaN '${range}'`);
+  if (from > to) throw Error(`Invalid range from > to '${range}'`);
+
+  const arr: number[] = [];
+  for (let i = from; i <= to; i++) {
+    arr.push(i);
+  }
+
+  return arr;
+}