Eric Hegnes
40 posts

Eric Hegnes
@0xHEGNES
fp proselytizer ∘ bare-metal enjoyer ∘ 3-coloring expert Software Engineer @union_build


🚨 There’s a large-scale supply chain attack in progress: the NPM account of a reputable developer has been compromised. The affected packages have already been downloaded over 1 billion times, meaning the entire JavaScript ecosystem may be at risk. The malicious payload works by silently swapping crypto addresses on the fly to steal funds. If you use a hardware wallet, pay attention to every transaction before signing and you're safe. If you don’t use a hardware wallet, refrain from making any on-chain transactions for now. It’s still unclear whether the attacker is also stealing seeds from software wallets directly at this stage. Excellent report here: jdstaerk.substack.com/p/we-just-foun…



App V4 is now live! It is a complete rewrite of the TypeScript SDK and transfer submission flow by @0xHEGNES . Way faster and more stable. This also fully integrates BTC edition into the app, getting us ready for public mainnet. Most importantly: it prepares for U


App v3 and the BTC App are no more. There is only App v4. Testnet and mainnet transfers in a single app, plus all the preparations needed for Union's public mainnet.














