Skip to content

feat: add @kenostod/utl-snap — UTL Fee Rewards (DeFi / cross-chain rewards)#1459

Open
Keno2121 wants to merge 7 commits intoMetaMask:mainfrom
Keno2121:add-kenostod-utl-snap
Open

feat: add @kenostod/utl-snap — UTL Fee Rewards (DeFi / cross-chain rewards)#1459
Keno2121 wants to merge 7 commits intoMetaMask:mainfrom
Keno2121:add-kenostod-utl-snap

Conversation

@Keno2121
Copy link
Copy Markdown

@Keno2121 Keno2121 commented Mar 13, 2026

Add @kenostod/utl-snap to Verified Snaps

Snap ID: npm:@kenostod/utl-snap
Version: 1.0.2 (v2.0.0 built — npm publish pending)
Category: Interoperability / DeFi / Education

Description

The UTL MetaMask Snap adds the Universal Transaction Layer natively to MetaMask — a fee redistribution protocol on BNB Smart Chain. Six features activate the moment you install:

Features (v2.0.0)

  • 🔍 Fee X-Ray — Per-transaction insight panel showing MEV risk, UTL toll breakdown (60% stakers / 25% T.D.I.R. Foundation / 15% Treasury), and estimated earnings before every sign
  • 💰 Passive Income — 60% of all captured UTL protocol fees distributed to KENO stakers
  • FAL™ Flash Arbitrage Loan Alerts — Cronjob-based MetaMask notifications when profitable arbitrage windows are detected (every 30 min)
  • 🏆 Loyalty Tier System — Bronze → Silver → Gold → Platinum → Diamond tiers based on KENO toll payments; higher tiers earn larger multipliers and governance voting weight
  • 🗳️ Governance Voting Power — Protocol toll history converts to on-chain voting power for UTL ecosystem decisions
  • 🎓 Graduate Credentials — Kenostod Blockchain Academy LLC certificates stored and verifiable inside MetaMask

Permissions

  • snap_dialog — show Fee X-Ray, earnings, and reward dialogs
  • snap_notify — FAL Flash Arbitrage Loan opportunity alerts
  • snap_manageState — store loyalty tier and staking position locally
  • endowment:cronjob — scheduled FAL opportunity scanning (every 30 min)
  • endowment:network-access — BSC RPC calls to UTL contracts
  • endowment:transaction-insight — per-tx UTL Fee X-Ray panel
  • endowment:ethereum-provider — wallet address and chain detection

Links

UTL Contracts (BNB Smart Chain — all live)

  • KENO Token: 0x65791E0B5Cbac5F40c76cDe31bf4F074D982FD0E
  • Staking: 0x49961979c93f43f823BB3593b207724194019d1d
  • FeeCollector: 0xfE537c43d202C455Cedc141B882c808287BB662f
  • Treasury: 0x3B3538b955647d811D42400084e9409e6593bE97
  • Distribution: 0xE6918cdBB9D8cd0d3532A88D974734B2F1A793c7

Note

Low Risk
Low risk: this is a data-only change to src/registry.json adding a new verified snap entry and does not modify runtime logic.

Overview
Adds a new verified snap entry for npm:@kenostod/utl-snap, including author/support/source metadata and the 1.0.2 checksum for distribution via the registry.

Also updates the end-of-file formatting of src/registry.json (adds trailing newline).

Reviewed by Cursor Bugbot for commit 746456d. Bugbot is set up for automated code reviews on this repo. Configure here.

Universal Transaction Layer (UTL) Fee Rewards snap — earn passive USDC
from cross-chain fees, natively inside MetaMask.
Comment thread src/registry.json
@Keno2121
Copy link
Copy Markdown
Author

"Source repository is now live at https://github.com/Keno2121/utl-metamask-snap — updated the manifest URL to match. Happy to provide a live demo of the Snap + UTL companion dApp."

…n artifacts

- Added required `audits: []` field to snap metadata
- Fixed sourceCode to point to snap repo (Keno2121/utl-metamask-snap)
- Toned down description: clarified Snap is read-only insight, financial ops on-chain
- Rebuilt from MetaMask main base to remove unintended Unicode normalization changes
@Keno2121 Keno2121 requested review from a team and Montoya as code owners March 16, 2026 16:54
@Keno2121
Copy link
Copy Markdown
Author

Thank you for the review feedback. I've pushed a clean fix commit (9a5ed82) addressing both flagged concerns:

1. Missing audits field (High Severity)
Added "audits": [] to the snap metadata. We do not currently have a third-party security audit. The snap itself is intentionally read-only — it displays staking tier, fee contribution totals, and reward estimates by reading on-chain state. It does not move funds or execute transactions directly; all staking and reward operations are performed by the user via the UTL smart contracts on BNB Smart Chain. We will pursue a formal audit before requesting removal of this note.

2. Unicode normalization artifacts inflating the diff
The previous commit unintentionally introduced Unicode encoding normalization changes to unrelated entries. This commit is rebuilt cleanly from the MetaMask main branch — only our single entry (npm:@kenostod/utl-snap) is added, with no changes to any existing snap entries.

Additional corrections in this commit:

Happy to provide any additional information needed.

Comment thread src/registry.json
Comment thread src/registry.json Outdated
Comment thread src/registry.json Outdated
Comment thread src/registry.json
Audit: https://audit.hashlock.com/audit/0a13e701-ff4f-4583-93ce-d79c62a841f8
Auditor: Hashlock
Date: 2026-03-23
Files: UTLFeeCollector.sol, UTLStaking.sol, UTLTreasury.sol, UTLDistribution.sol
Comment thread src/registry.json Outdated
…ated audit, fix category to transaction-insights, remove unpublished 2.0.0 version
Comment thread src/registry.json Outdated
@Keno2121
Copy link
Copy Markdown
Author

Update — addressing all bot review flags:

Fixed: Category typo — changed "transaction-insights" to "transaction insights" (space, not hyphen) to match the valid enum in VerifiedSnapStruct. This was blocking CI validation.

Fixed: Description language — removed passive income and financial promise framing. Description now accurately describes what the snap does: reads on-chain state, displays fee breakdown, staking tier, and reward estimates. No funds are moved by the snap directly.

Confirmed: No audit fabricationaudits field is not included in the current entry (was corrected in a prior commit).

Confirmed: Website URLauthor.website and support.contact both point to kenostodblockchain.com (live production domain).

Confirmed: npm version 1.0.2 — registry entry references v1.0.2 which is the published npm version matching the snap manifest shasum.

Commit: 746456dd6f84caa303694560fad0823c62a6c812

Happy to provide a live demo or answer any questions from the review team.

Copy link
Copy Markdown

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

Reviewed by Cursor Bugbot for commit 746456d. Configure here.

Comment thread src/registry.json
}
]
}
} No newline at end of file
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Trailing newline removed violating .editorconfig rule

Low Severity

The final } line of registry.json is replaced in a way that removes the trailing newline. The project's .editorconfig explicitly sets insert_final_newline = true for all files. This change violates that project-wide rule and will likely trigger CI linting failures or produce "No newline at end of file" warnings from git.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 746456d. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant