- DefiLlama launches a Meta DEX Aggregator.
- Dedaub discloses a Universal Router vulnerability.
- ChainSafe proposes an ENS <> Aztec privacy integration.
- Scroll schedules a Pre-Alpha Testnet reset.
This is our Trezor affiliate link.
DefiLlama Launches Meta DEX Aggregator
DeFiLlama launched a Meta DEX Aggregator, a portal that optimizes the best swap route among eight different DEX aggregators, including 1inch, Matcha, Paraswap, and Cowswap. The Meta DEX Aggregator queries swaps across aggregators, compares quotes and gas costs, and allows users to select an optimal route.
The aggregator also features an opt-in privacy feature to protect against wallet and IP linking. The feature routes all queries through the DeFi Llama server, which does not store IP data. DeFiLlama also verifies quotes and gas costs independently. The aggregator supports 22 chains and is now live on swap.defillama.com.
Dedaub Discloses Uniswap Vulnerability
Smart contract security firm Dedaub disclosed a critical vulnerability found on Uniswap’s Universal Router smart contract. The vulnerability allows an attacker to drain tokens in the contract through a re-entertrancy attack. The recipient of an NFT could reenter the Universal Router and drain tokens by invoking third-party code, mid-transaction.
Dedaub advised Uniswap to add a reentrancy lock to the core execution of the router. Uniswap has since implemented a fix and redeployed new router smart contracts across five supported chains. Universal Router is Uniswap’s new smart contract that unifies ERC-20 token and NFT swaps into a single gas-optimized transaction.
ENS Privacy Using Aztec Network
ChainSafe’s research team introduced a proposal to integrate ENS with Aztec Network. The integration aims to bring privacy to ENS domain holders by de-linking receiving and spending addresses. The integration requires users to change their ENS resolver to a custom resolver contract developed by ChainSafe.
The implementation requires a sender to send a constructed transaction that calls the resolver contract. When a transaction is received, the custom resolver forwards the call to Aztec’s RollupProcessor, which deposits the funds to the rollup. The recipient can claim the funds on zk.money and use it privately on L2.
Updated OpenZeppelin Contracts For Cairo
OpenZeppelin released Nile v0.12.0, an update to its CLI tool for interacting with StarkNet. The release includes support for the goerli2 testnet and supports overriding paths for account functions. The company also released OpenZeppelin Contracts for Cairo v0.6.0, an update to its Cairo smart contract development library. The new release includes an ERC-1155 multi-token library and added docs for its Universal Deployer Contract. Cairo 1.0 has also been open-sourced under the Apache 2.0 license.
Scroll Pre-Alpha Testnet Reset
Scroll will perform a reset on its Pre-Alpha Testnet on January 9th. The reset will introduce performance optimizations for improved throughput. A reset erases all existing token balances and requires developers to redeploy contracts. Scroll users are advised to remove all Scroll networks from their wallets before adding RPC endpoints for the updated testnet.