feat: add @kenostod/utl-snap — UTL Fee Rewards (DeFi / cross-chain rewards)#1459
feat: add @kenostod/utl-snap — UTL Fee Rewards (DeFi / cross-chain rewards)#1459Keno2121 wants to merge 1 commit intoMetaMask:mainfrom
Conversation
Universal Transaction Layer (UTL) Fee Rewards snap — earn passive USDC from cross-chain fees, natively inside MetaMask.
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
| "1.0.2": { | ||
| "checksum": "eiXsRHsgbgYNNzDZyOjWg1A3PZ5qX/1r5FjknJTYUNg=" | ||
| } | ||
| } |
There was a problem hiding this comment.
Unaudited DeFi snap added to verified registry
High Severity
The new npm:@kenostod/utl-snap entry is added to the verified snaps registry with no audits field, despite claiming to handle financial operations — USDC staking, reward distributions, and auto-compound reinvestment. Inclusion in the verified registry creates an implicit trust signal for MetaMask users. Without an audit, users may stake real funds into an unreviewed snap. Additionally, the PR bundles many unrelated Unicode encoding normalization changes to existing snap entries, substantially inflating the diff and making the actual new addition harder to review carefully.
|
"Source repository is now live at https://github.com/Keno2121/utl-metamask-snap — updated the manifest URL to match. Happy to provide a live demo of the Snap + UTL companion dApp." |
1 participant
Add @kenostod/utl-snap to Verified Snaps
Snap ID:
npm:@kenostod/utl-snapVersion: 1.0.2
Category: Interoperability / DeFi
npm: https://www.npmjs.com/package/@kenostod/utl-snap
Description
The UTL Fee Rewards Snap adds the Universal Transaction Layer natively to MetaMask. Users earn passive USDC rewards from cross-chain transaction fees — 0.1% captured per transaction, 60% distributed to stakers.
Features
Permissions
snap_dialog— show earnings/reward dialogssnap_notify— weekly reward distribution alertssnap_manageState— store staking position locallyendowment:network-access— BSC RPC callsendowment:transaction-insight— per-tx UTL fee displayendowment:ethereum-provider— wallet address accessLinks
Checklist
Note
Low Risk
Low risk: updates are limited to
src/registry.jsonmetadata strings and a new verified snap entry; no runtime logic changes, but downstream consumers will see updated display text/encoding.Overview
Updates the snaps registry data by normalizing various
metadatastrings (emoji/typographic quotes/dashes and spacing) across multiple existing snaps.Adds a new verified snap entry for
npm:@kenostod/utl-snap(UTL Fee Rewards) at version1.0.2, including author info, description, tags, support link, source code, and checksum.Written by Cursor Bugbot for commit de486f3. This will update automatically on new commits. Configure here.