Introducing a Rust implementation of a Jito gRPC Client. I haven't been able to find any info on gRPC connections to Jito's block engine, so I made a client myself.
https://t.co/b49cyKBXbX
🚨 Rust Security Update 🚨
If you use libvault, please upgrade to v0.3.0!
libvault-core is officially deprecated
libvault is actively maintained & has fixed the arrayref supply-chain vulnerability (details: https://t.co/QrLkZfKbl2)
GitHub: https://t.co/K3rdhz5u2o
Stars & contributions welcome! 🦀✨ #Rust #RustLang #Security
Heads up for anyone writing Rust today.
The Rust Security Response Team just disclosed a supply chain attack. The popular arrayref crate was republished to pull in a malicious dependency that downloaded a payload through its build script.
arrayref isn't obscure. If you or your dependencies pulled it recently, you'll want to check now.
The malicious versions to look for:
> arrayref 0.3.10
> internment 0.8.7
> append-only-vec 0.1.9
> proc-macro1, plus typosquats: proc-macro-en, aovine, arone, aronenao, tinymember
All deleted from https://t.co/rplvCbrTzr, and the maintainer's account is locked. The team believes the author's credentials were compromised rather than the author acting maliciously.
Full advisory, including the one-line command to scan your local cargo cache:
https://t.co/sDSZFnYLRC
Ran 10,000 getAccountInfo calls comparing base64 vs base64+zstd across different account sizes.
Small accounts (<3KB): base64 wins by 15-22%
Large accounts (>5KB): base64+zstd wins by 18-28%