Skip to content

Sync Safe config with latest safe-core-sdk networks #29

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
aviggiano merged 8 commits into from
Apr 3, 2026
Merged

Sync Safe config with latest safe-core-sdk networks #29

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
d437f14
Sync Safe tx service config with latest SDK
aviggiano Apr 3, 2026
21cea13
Address PR review feedback
aviggiano Apr 3, 2026
83e3c5f
Add differential tests against pinned api-kit
aviggiano Apr 3, 2026
161d020
Remove incorrect private flag from package metadata
aviggiano Apr 3, 2026
7dded0b
Use sequential indexing in Safe config fixtures
aviggiano Apr 3, 2026
1158e8f
Keep Safe fixture pairs together with append helpers
aviggiano Apr 3, 2026
2257730
Fix multisend config review findings
aviggiano Apr 3, 2026
c6278a6
Add multisend differential test against deployments
aviggiano Apr 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,9 @@

Interact with the [Safe API](https://docs.safe.global/sdk/api-kit) from Foundry scripts.

Official transaction service URLs mirror the latest `safe-core-sdk` `packages/api-kit/src/utils/config.ts` network list.
Comment thread
aviggiano marked this conversation as resolved.
Outdated
Third-party integrations are kept in a separate override layer so provider-specific endpoints stay isolated and easier to review.
Comment thread
aviggiano marked this conversation as resolved.
Outdated

### Installation

```bash
Expand Down Expand Up @@ -89,7 +92,7 @@ ffi = true

### Third-party integrations

The following blockchains are integrated via third party APIs and not the official safe.global tx service:
The following blockchains are integrated via third-party APIs and not the official `safe.global` tx service:

| Blockchain | Provider |
| --- | --- |
Expand Down
176 changes: 113 additions & 63 deletions src/Safe.sol
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,14 +12,18 @@ library Safe {

/// forge-lint: disable-next-line(screaming-snake-case-const)
Vm constant vm = Vm(address(bytes20(uint160(uint256(keccak256("hevm cheat code"))))));
string constant SAFE_TRANSACTION_SERVICE_BASE_URL = "https://api.safe.global/tx-service";
string constant PLUME_TRANSACTION_SERVICE_URL = "https://safe-transaction-plume.onchainden.com/api";

// https://github.com/safe-global/safe-smart-account/blob/release/v1.4.1/contracts/libraries/SafeStorage.sol
bytes32 constant SAFE_THRESHOLD_STORAGE_SLOT = bytes32(uint256(4));

// https://github.com/safe-global/safe-deployments/blob/v1.37.32/src/assets/v1.3.0/multi_send_call_only.json
address constant MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL = 0x40A2aCCbd92BCA938b02010E17A5b8929b49130D;
address constant MULTI_SEND_CALL_ONLY_ADDRESS_EIP155 = 0xA1dabEF33b3B82c7814B6D82A79e50F4AC44102B;
address constant MULTI_SEND_CALL_ONLY_ADDRESS_ZKSYNC = 0xf220D3b4DFb23C4ade8C88E526C1353AbAcbC38F;
// https://github.com/safe-global/safe-deployments/blob/c6a2025fca317b629d73d24b472c266418e2a4d6/src/assets/v1.3.0/multi_send_call_only.json
address constant MULTI_SEND_CALL_ONLY_ADDRESS_V130_CANONICAL = 0x40A2aCCbd92BCA938b02010E17A5b8929b49130D;
address constant MULTI_SEND_CALL_ONLY_ADDRESS_V130_ZKSYNC = 0xf220D3b4DFb23C4ade8C88E526C1353AbAcbC38F;
// https://github.com/safe-global/safe-deployments/blob/c6a2025fca317b629d73d24b472c266418e2a4d6/src/assets/v1.4.1/multi_send_call_only.json
address constant MULTI_SEND_CALL_ONLY_ADDRESS_V141_CANONICAL = 0x9641d764fc13c8B624c04430C7356C1C7C8102e2;
address constant MULTI_SEND_CALL_ONLY_ADDRESS_V141_ZKSYNC = 0x0408EF011960d02349d50286D20531229BCef773;

error ApiKitUrlNotFound(uint256 chainId);
error MultiSendCallOnlyNotFound(uint256 chainId);
Expand All @@ -29,8 +33,6 @@ library Safe {
struct Instance {
address safe;
HTTP.Client http;
mapping(uint256 chainId => string) urls;
mapping(uint256 chainId => MultiSendCallOnly) multiSendCallOnly;
string requestBody;
}

Expand Down Expand Up @@ -58,54 +60,6 @@ library Safe {
self.instances.push();
Instance storage i = self.instances[self.instances.length - 1];
i.safe = safe;
// https://github.com/safe-global/safe-core-sdk/blob/4d89cb9b1559e4349c323a48a10caf685f7f8c88/packages/api-kit/src/utils/config.ts
i.urls[1] = "https://api.safe.global/tx-service/eth/api";
i.urls[10] = "https://api.safe.global/tx-service/oeth/api";
i.urls[56] = "https://api.safe.global/tx-service/bnb/api";
i.urls[100] = "https://api.safe.global/tx-service/gno/api";
i.urls[130] = "https://api.safe.global/tx-service/unichain/api";
i.urls[137] = "https://api.safe.global/tx-service/pol/api";
i.urls[196] = "https://api.safe.global/tx-service/okb/api";
i.urls[324] = "https://api.safe.global/tx-service/zksync/api";
i.urls[480] = "https://api.safe.global/tx-service/wc/api";
i.urls[999] = "https://api.safe.global/tx-service/hyper/api";
i.urls[1101] = "https://api.safe.global/tx-service/zkevm/api";
i.urls[5000] = "https://api.safe.global/tx-service/mantle/api";
i.urls[8453] = "https://api.safe.global/tx-service/base/api";
i.urls[42161] = "https://api.safe.global/tx-service/arb1/api";
i.urls[42220] = "https://api.safe.global/tx-service/celo/api";
i.urls[43114] = "https://api.safe.global/tx-service/avax/api";
i.urls[59144] = "https://api.safe.global/tx-service/linea/api";
i.urls[84532] = "https://api.safe.global/tx-service/basesep/api";
i.urls[98866] = "https://safe-transaction-plume.onchainden.com/api";
i.urls[534352] = "https://api.safe.global/tx-service/scr/api";
i.urls[11155111] = "https://api.safe.global/tx-service/sep/api";
i.urls[1313161554] = "https://api.safe.global/tx-service/aurora/api";

// https://github.com/safe-global/safe-deployments/blob/v1.37.32/src/assets/v1.3.0/multi_send_call_only.json
i.multiSendCallOnly[1] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[10] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[56] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[100] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[130] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[137] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[196] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[324] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_ZKSYNC);
i.multiSendCallOnly[480] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[999] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[1101] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[5000] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[8453] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[42161] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[42220] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[43114] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[59144] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[84532] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[98866] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[534352] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[11155111] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);
i.multiSendCallOnly[1313161554] = MultiSendCallOnly(MULTI_SEND_CALL_ONLY_ADDRESS_CANONICAL);

i.http.initialize().withHeader("Content-Type", "application/json").withFollowRedirects(true);
return self;
}
Expand All @@ -114,20 +68,116 @@ library Safe {
return self.instances[self.instances.length - 1];
}

function getApiKitUrl(Client storage self, uint256 chainId) internal view returns (string memory) {
string memory url = instance(self).urls[chainId];
if (bytes(url).length == 0) {
revert ApiKitUrlNotFound(chainId);
function getApiKitUrl(Client storage, uint256 chainId) internal pure returns (string memory) {
string memory thirdPartyApiKitUrl = getThirdPartyApiKitUrl(chainId);
if (bytes(thirdPartyApiKitUrl).length > 0) {
return thirdPartyApiKitUrl;
}

return getTransactionServiceUrl(chainId);
}

// Mirrors safe-global/safe-core-sdk/packages/api-kit/src/utils/config.ts on main.
function getNetworkShortName(uint256 chainId) internal pure returns (string memory) {
if (chainId == 1) return "eth";
if (chainId == 10) return "oeth";
if (chainId == 50) return "xdc";
if (chainId == 56) return "bnb";
if (chainId == 100) return "gno";
if (chainId == 130) return "unichain";
if (chainId == 137) return "pol";
if (chainId == 143) return "monad";
if (chainId == 146) return "sonic";
if (chainId == 196) return "okb";
if (chainId == 204) return "opbnb";
if (chainId == 232) return "lens";
if (chainId == 324) return "zksync";
if (chainId == 480) return "wc";
if (chainId == 988) return "stable";
if (chainId == 999) return "hyper";
if (chainId == 1101) return "zkevm";
if (chainId == 3338) return "peaq";
if (chainId == 3637) return "btc";
if (chainId == 5000) return "mantle";
if (chainId == 8453) return "base";
if (chainId == 9745) return "plasma";
if (chainId == 10143) return "monad-testnet";
if (chainId == 10200) return "chi";
if (chainId == 16661) return "0g";
if (chainId == 42161) return "arb1";
if (chainId == 42220) return "celo";
if (chainId == 43111) return "hemi";
if (chainId == 43114) return "avax";
if (chainId == 57073) return "ink";
if (chainId == 59144) return "linea";
if (chainId == 80069) return "bep";
if (chainId == 80094) return "berachain";
if (chainId == 81224) return "codex";
if (chainId == 84532) return "basesep";
if (chainId == 534352) return "scr";
if (chainId == 747474) return "katana";
if (chainId == 11155111) return "sep";
if (chainId == 1313161554) return "aurora";
revert ApiKitUrlNotFound(chainId);
}

function getTransactionServiceUrl(uint256 chainId) internal pure returns (string memory) {
return string.concat(SAFE_TRANSACTION_SERVICE_BASE_URL, "/", getNetworkShortName(chainId), "/api");
}

function getThirdPartyApiKitUrl(uint256 chainId) internal pure returns (string memory) {
if (chainId == 98866) {
return PLUME_TRANSACTION_SERVICE_URL;
}
return url;
return "";
}

function getMultiSendCallOnly(Client storage self, uint256 chainId) internal view returns (MultiSendCallOnly) {
MultiSendCallOnly multiSendCallOnly = instance(self).multiSendCallOnly[chainId];
if (address(multiSendCallOnly) == address(0)) {
function getMultiSendCallOnly(Client storage, uint256 chainId) internal pure returns (MultiSendCallOnly) {
address multiSendCallOnly = getThirdPartyMultiSendCallOnlyAddress(chainId);
if (multiSendCallOnly == address(0)) {
multiSendCallOnly = getOfficialMultiSendCallOnlyAddress(chainId);
}
if (multiSendCallOnly == address(0)) {
revert MultiSendCallOnlyNotFound(chainId);
}
return multiSendCallOnly;
return MultiSendCallOnly(multiSendCallOnly);
}

function getOfficialMultiSendCallOnlyAddress(uint256 chainId) internal pure returns (address) {
Comment thread
aviggiano marked this conversation as resolved.
Outdated
if (
chainId == 1 || chainId == 10 || chainId == 56 || chainId == 100 || chainId == 130 || chainId == 137
|| chainId == 196 || chainId == 480 || chainId == 999 || chainId == 1101 || chainId == 5000
|| chainId == 8453 || chainId == 42161 || chainId == 42220 || chainId == 43114 || chainId == 59144
|| chainId == 84532 || chainId == 534352 || chainId == 11155111 || chainId == 1313161554
) {
return MULTI_SEND_CALL_ONLY_ADDRESS_V130_CANONICAL;
}

if (chainId == 324) {
return MULTI_SEND_CALL_ONLY_ADDRESS_V130_ZKSYNC;
}

if (
chainId == 50 || chainId == 143 || chainId == 146 || chainId == 204 || chainId == 988 || chainId == 3338
|| chainId == 3637 || chainId == 9745 || chainId == 10143 || chainId == 10200 || chainId == 16661
|| chainId == 43111 || chainId == 57073 || chainId == 80069 || chainId == 80094 || chainId == 81224
|| chainId == 747474
) {
return MULTI_SEND_CALL_ONLY_ADDRESS_V141_CANONICAL;
}

if (chainId == 232) {
return MULTI_SEND_CALL_ONLY_ADDRESS_V141_ZKSYNC;
}

return address(0);
}

function getThirdPartyMultiSendCallOnlyAddress(uint256 chainId) internal pure returns (address) {
if (chainId == 98866) {
return MULTI_SEND_CALL_ONLY_ADDRESS_V130_CANONICAL;
}
return address(0);
}

function getNonce(Client storage self) internal view returns (uint256) {
Expand Down
93 changes: 91 additions & 2 deletions test/Safe.t.sol
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,13 +3,11 @@ pragma solidity ^0.8.13;

import {Test, console} from "forge-std/Test.sol";
import {Safe} from "../src/Safe.sol";
import {strings} from "solidity-stringutils/strings.sol";
import {IWETH} from "./interfaces/IWETH.sol";
import {Enum} from "safe-smart-account/common/Enum.sol";

contract SafeTest is Test {
using Safe for *;
using strings for *;

Safe.Client safe;
address safeAddress = 0xF3a292Dda3F524EA20b5faF2EE0A1c4abA665e4F;
Expand Down Expand Up @@ -65,3 +63,94 @@ contract SafeTest is Test {
safe.proposeTransactionsWithSignature(targets, datas, foundrySigner1, signature);
}
}

contract SafeConfigTest is Test {
using Safe for *;

string constant SAFE_TRANSACTION_SERVICE_BASE_URL = "https://api.safe.global/tx-service";

Safe.Client safe;

function setUp() public {
safe.initialize(address(0xBEEF));
}

function test_Safe_getTransactionServiceUrl_matchesLatestOfficialSdkConfig() public pure {
_assertOfficialTransactionServiceUrl(1, "eth");
_assertOfficialTransactionServiceUrl(10, "oeth");
_assertOfficialTransactionServiceUrl(50, "xdc");
_assertOfficialTransactionServiceUrl(56, "bnb");
_assertOfficialTransactionServiceUrl(100, "gno");
_assertOfficialTransactionServiceUrl(130, "unichain");
_assertOfficialTransactionServiceUrl(137, "pol");
_assertOfficialTransactionServiceUrl(143, "monad");
_assertOfficialTransactionServiceUrl(146, "sonic");
_assertOfficialTransactionServiceUrl(196, "okb");
_assertOfficialTransactionServiceUrl(204, "opbnb");
_assertOfficialTransactionServiceUrl(232, "lens");
_assertOfficialTransactionServiceUrl(324, "zksync");
_assertOfficialTransactionServiceUrl(480, "wc");
_assertOfficialTransactionServiceUrl(988, "stable");
_assertOfficialTransactionServiceUrl(999, "hyper");
_assertOfficialTransactionServiceUrl(1101, "zkevm");
_assertOfficialTransactionServiceUrl(3338, "peaq");
_assertOfficialTransactionServiceUrl(3637, "btc");
_assertOfficialTransactionServiceUrl(5000, "mantle");
_assertOfficialTransactionServiceUrl(8453, "base");
_assertOfficialTransactionServiceUrl(9745, "plasma");
_assertOfficialTransactionServiceUrl(10143, "monad-testnet");
_assertOfficialTransactionServiceUrl(10200, "chi");
_assertOfficialTransactionServiceUrl(16661, "0g");
_assertOfficialTransactionServiceUrl(42161, "arb1");
_assertOfficialTransactionServiceUrl(42220, "celo");
_assertOfficialTransactionServiceUrl(43111, "hemi");
_assertOfficialTransactionServiceUrl(43114, "avax");
_assertOfficialTransactionServiceUrl(57073, "ink");
_assertOfficialTransactionServiceUrl(59144, "linea");
_assertOfficialTransactionServiceUrl(80069, "bep");
_assertOfficialTransactionServiceUrl(80094, "berachain");
_assertOfficialTransactionServiceUrl(81224, "codex");
_assertOfficialTransactionServiceUrl(84532, "basesep");
_assertOfficialTransactionServiceUrl(534352, "scr");
_assertOfficialTransactionServiceUrl(747474, "katana");
_assertOfficialTransactionServiceUrl(11155111, "sep");
_assertOfficialTransactionServiceUrl(1313161554, "aurora");
}

function test_Safe_getApiKitUrl_prefersThirdPartyOverrides() public view {
assertEq(safe.getApiKitUrl(98866), "https://safe-transaction-plume.onchainden.com/api");
}

function test_Safe_getApiKitUrl_revertsForUnknownChain() public {
vm.expectRevert(abi.encodeWithSelector(Safe.ApiKitUrlNotFound.selector, 31337));
this.exposedGetApiKitUrl(31337);
}

function test_Safe_getMultiSendCallOnly_resolvesLegacyAndNewDeployments() public view {
assertEq(address(safe.getMultiSendCallOnly(1)), 0x40A2aCCbd92BCA938b02010E17A5b8929b49130D);
assertEq(address(safe.getMultiSendCallOnly(324)), 0xf220D3b4DFb23C4ade8C88E526C1353AbAcbC38F);
assertEq(address(safe.getMultiSendCallOnly(232)), 0x0408EF011960d02349d50286D20531229BCef773);
assertEq(address(safe.getMultiSendCallOnly(10143)), 0x9641d764fc13c8B624c04430C7356C1C7C8102e2);
assertEq(address(safe.getMultiSendCallOnly(98866)), 0x40A2aCCbd92BCA938b02010E17A5b8929b49130D);
}

function test_Safe_getMultiSendCallOnly_revertsForUnknownChain() public {
vm.expectRevert(abi.encodeWithSelector(Safe.MultiSendCallOnlyNotFound.selector, 31337));
this.exposedGetMultiSendCallOnly(31337);
}

function _assertOfficialTransactionServiceUrl(uint256 chainId, string memory shortName) private pure {
assertEq(
Safe.getTransactionServiceUrl(chainId),
string.concat(SAFE_TRANSACTION_SERVICE_BASE_URL, "/", shortName, "/api")
);
}

function exposedGetApiKitUrl(uint256 chainId) external view returns (string memory) {
return safe.getApiKitUrl(chainId);
}

function exposedGetMultiSendCallOnly(uint256 chainId) external view returns (address) {
return address(safe.getMultiSendCallOnly(chainId));
}
}
Loading