fix: Security updates and dependency modernization by Claude #1
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
## Security Fixes (Smart Contracts) - LittleTraveler.sol: Add ERC20 transferFrom return check, replace transfer() with call() - DonateDirectDAO.sol: Replace transfer() with call() in withdraw() - TeamBoostly.sol: Fix variable shadowing (name/symbol) ## Dependency Updates (110 → 42 vulnerabilities, 30 → 0 critical) - Migrate from web3 to ethers v6 - Migrate from web3modal to @web3modal/ethers v4 (WalletConnect v2) - Replace truffle/ganache with hardhat - Update Next.js 11 → 14, React 17 → 18 - Update tailwindcss 2 → 3 ## Frontend Refactoring - Convert class components to functional components with hooks - Add proper error handling and input validation - Remove deprecated imports and fix typos ## New Files - hardhat.config.js - Hardhat configuration - next.config.js - Next.js 14 configuration - context/Web3Modal.js - Web3Modal provider - .env.example - Environment variables template ## Removed (deprecated) - ethereum/web3.js - ethereum/compile.js Co-Authored-By: Claude Opus 4.5 <[email protected]>
…everity - Revert to @web3modal/ethers v5 (appkit had ESM/CommonJS issues) - Add npm override for @coinbase/wallet-sdk (fixes high severity CVE) - Upgrade Next.js to ^14.2.35 (fixes high severity CVEs) - Add Node.js engine requirement (>=18.17.0) - Remaining 21 low vulnerabilities are from elliptic/tmp (no upstream fix) Co-Authored-By: Claude Opus 4.5 <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
Changes
Remaining 21 low vulnerabilities
All from dependencies with no upstream fix available:
elliptic- used by hardhat and walletconnecttmp- used by solc (hardhat dependency)Test plan
npm installwith Node.js >= 18.17.0npm run buildto verify Next.js buildnpx hardhat compileto verify smart contract compilation🤖 Generated with Claude Code