sync 15.11.2021

[kuzdogan]

• Can I record the meetings for notes?
• https://github.com/ethereum/sourcify/issues/552 resolved
• Optimism contracts
  • Waiting for mainnet contracts. Then we'll verify all.
• Hardhat v2.6.8 with default metadata output is out! https://github.com/nomiclabs/hardhat/releases/tag/hardhat%402.6.8
• Quick fix to support sending multiple contracts (as in the hardhat's case). Hardhat build-info files should work.
• eth-sdk using Sourcify but not through the npm package https://github.com/dethcrypto/eth-sdk/pull/42
  • Feedback: the package should be both a CommonJS and ESM module compatible
  • They use server API not ipfs
• Puzzle based on Etherscan verification exploit by samczsun. Writing about the puzzle: Hiding in Plain Sight.
  • Had a round of emails with him to ask for the source code of the modified version, but there's no source code as he handcrafted the bytecode.
  • Still this exploit could be mitigated with Sourcify. We can use this to market it in a tweet.
  • Sam just noted that he explicitly asked Etherscan to keep the wrong verified contract. We should disclaim it.

[kuzdogan]

Discussions

• We can start adding some high-fi design to Figma
• Do we want to implement everything or make use of frameworks?
  • For the landing page we can directly use the template/frameworks Franzi knows.
• The draft-ui requires users to connect addresses to contracts.
  • Chris: Can we just let users give a bunch of addresses and try to verify?
  • Kaan: We'll need to lookup for the all permutations of address-contracts
  • Best case we don't even need this if we do a match with the creation bytecode DB
  • We didn't conclude anything but this is also something to keep in mind.
• People seem to use Sourcify to feed data to Etherscan
  • Andrei (? ligi knows him) is looking for something that will do the reverse. Full matches not possible but can find partial matches
• Follow up: we should explain what is partial match/full match. Also other details such as immutables, libraries in matches. Even we forget it often. We should have a proper documentation for API + terminology + such details.
• We'll be doing a pair programming session with Johnson this week.

Action Items

• Support both CommonJS and ESM in the npm package
• Create tweets explaining the puzzle and how Sourcify could mitigate this. I'll show Franzi for a review, then we can post it.
• Figma wireframes don't consider multiple contracts. Update accordingly.
• Have permanent redirect to the correct path for case-sensitive contract paths in the repo.