Skip to content

brainblast v0.7.5 — Token Economics Validator

Choose a tag to compare

@DSB-117 DSB-117 released this 20 Jun 17:56
· 1 commit to main since this release
139d998

The Bags exploit, generalized. The Bags trap (a creator wallet silently omitted from a fee split, earning $0 forever) was one instance of a class:

A revenue-bearing field that, if omitted or zeroed, silently defaults to no value. The call succeeds, nothing reverts, and a fee / royalty / reward is never collected — permanently.

New checker: economic-value-zero-or-missing

Validates a revenue field on a setup/config call: FAIL when omitted (defaults to zero) or a literal 0; PASS when a non-zero literal or a non-literal expression (intentionally set). Robust to as any casts.

New bundled rule: metaplex-seller-fee-zero (HIGH)

A Metaplex token minted with sellerFeeBasisPoints omitted or zero earns creators no royalties on secondary sales, permanently. Vulnerable/fixed fixtures (RED→GREEN). Bundled rule set: 17 → 18.

brainblast economics [id]

A curated catalog of the silent zero-revenue class across fees, royalties, and rewards:

Category SDK Field Status
Royalties Metaplex sellerFeeBasisPoints ✅ enforced
Fees Bags feeClaimers[].userBps ✅ enforced
Fees Token-2022 transferFeeBasisPoints ⚠️ advisory
Rewards staking/LP (generic) rewardRate ⚠️ advisory

An integrity test guarantees every entry maps to a rule that actually exists, and ties the original Bags trap back into the generalized class. 20 new tests (427 total green). New /brainblast-economics slash command.


npx brainblast@0.7.5 economics

The brainblast CLI publishes to npm automatically via the brainblast-v0.7.5 tag (publish-cli workflow).