Skip to content

feat: add wdk-wallet-bermuda examples - #2

Open
chiefbiiko wants to merge 4 commits into
tetherto:mainfrom
BermudaBay:bermuda
Open

feat: add wdk-wallet-bermuda examples#2
chiefbiiko wants to merge 4 commits into
tetherto:mainfrom
BermudaBay:bermuda

Conversation

@chiefbiiko

@chiefbiiko chiefbiiko commented Apr 12, 2026

Copy link
Copy Markdown

Summary

Adds @bermuda/wdk-wallet-bermuda examples:

Bermuda is a privacy protocol for EVM chains

npm run example:wallet-bermuda:create-wallet
npm run example:wallet-bermuda:manage-accounts
npm run example:wallet-bermuda:check-balances
npm run example:wallet-bermuda:deposit
npm run example:wallet-bermuda:transfer
npm run example:wallet-bermuda:withdraw
  • wdk-wallet-bermuda is a direct drop-in for wdk-wallet-evm as its wallet manager exposes identical getAccount and getAccountByPath methods

  • Bermuda accounts can be accessed via getBermudaAccount on WalletManagerBermuda

  • For now wdk-wallet-bermuda only supports:

    • basic Bermuda operations:

      • deposit
      • transfer
      • withdraw
    • Plasma testnet

Outlook

  • More feats fx private multisigs, stealth actions such as swaps etc.

  • More chains and Plasma mainnet

@chiefbiiko
chiefbiiko marked this pull request as draft April 13, 2026 08:26
@chiefbiiko
chiefbiiko force-pushed the bermuda branch 2 times, most recently from 96364f8 to 2f016d1 Compare April 13, 2026 09:32
@chiefbiiko
chiefbiiko marked this pull request as ready for review April 13, 2026 09:34
@chiefbiiko
chiefbiiko marked this pull request as draft April 17, 2026 19:28
@chiefbiiko
chiefbiiko marked this pull request as ready for review May 19, 2026 07:22
@socket-security

socket-security Bot commented Aug 11, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​@​types/​node@​22.20.11001008196100
Addednpm/​tsx@​4.23.121001008195100
Addednpm/​@​bermuda/​wdk-wallet-bermuda@​0.1.8N/AN/AN/AN/AN/A
Updatednpm/​@​tetherto/​wdk-mcp-toolkit@​1.0.0-beta.1N/AN/AN/AN/AN/A

View full report

@socket-security

socket-security Bot commented Aug 11, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @x402/evm is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: wallet-bermuda/package-lock.jsonnpm/@bermuda/wdk-wallet-bermuda@0.1.8npm/@x402/evm@2.5.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@x402/evm@2.5.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm apg-js is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: wallet-bermuda/package-lock.jsonnpm/@bermuda/wdk-wallet-bermuda@0.1.8npm/apg-js@4.4.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/apg-js@4.4.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Dynamic code execution: npm @noir-lang/acvm_js

Eval Type: Function

Location: Package overview

From: wallet-bermuda/package-lock.jsonnpm/@bermuda/wdk-wallet-bermuda@0.1.8npm/@noir-lang/acvm_js@1.0.0-beta.20

ℹ Read more on: This package | This alert | What is dynamic code execution?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Avoid packages that use dynamic code execution like eval(), since this could potentially execute any code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@noir-lang/acvm_js@1.0.0-beta.20. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Dynamic code execution: npm msgpackr

Eval Type: Function

Location: Package overview

From: wallet-bermuda/package-lock.jsonnpm/@bermuda/wdk-wallet-bermuda@0.1.8npm/msgpackr@1.12.1

ℹ Read more on: This package | This alert | What is dynamic code execution?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Avoid packages that use dynamic code execution like eval(), since this could potentially execute any code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/msgpackr@1.12.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants