Addresses breaking changes from ethers.js v5→v6 migration, eliminates critical security vulnerabilities in dependencies, and fixes missing slippage protection in backend liquidity operations.

Ethers.js v6 Migration

API Changes (10 files):

• ethers.providers.Web3Provider → ethers.BrowserProvider
• ethers.utils.* → ethers.* (formatEther, parseEther, formatUnits, parseUnits)
• ethers.constants.MaxUint256 → ethers.MaxUint256
• token.deployed() → token.waitForDeployment()
• BigNumber operations → BigInt with proper type coercion

Example:

// Before (v5)
const provider = new ethers.providers.Web3Provider(window.ethereum);
const amount = ethers.utils.parseEther("1.0");
if (balance.lt(amount)) { ... }

// After (v6)
const provider = new ethers.BrowserProvider(window.ethereum);
const amount = ethers.parseEther("1.0");
if (balance < amount) { ... }

HTML CDN: Updated to v6.13 in add-liquidity.html, aetheron-advanced.html, dashboard.html

Dependency Security Fixes

Upgraded:

• web3: 1.10.0 → 4.16.0 (resolves 55 root vulnerabilities)
• @nomicfoundation/hardhat-toolbox: → 5.0.0
• eslint: → 9.18.0
• prettier: → 3.4.2
• ethers: Added 6.13.0

Result: 55 critical vulnerabilities → 33 low-severity dev dependencies only

Slippage Protection

Critical fix in smart-contract/add-liquidity.js:

// Before: 0% slippage protection (vulnerable to MEV attacks)
const amountAMin = 0;
const amountBMin = 0;

// After: 5% slippage protection
const slippageTolerance = 5;
const amountAMin = (desiredAmountA * BigInt(100 - slippageTolerance)) / 100n;
const amountBMin = (desiredAmountB * BigInt(100 - slippageTolerance)) / 100n;

Browser scripts already had proper protection; backend script was vulnerable.

Files Changed

Browser: add-liquidity.js, add-liquidity.html, aetheron-advanced.html, dashboard.html, aetheron-integration.js
Backend: backend/push-notify-wallets.js, smart-contract/add-liquidity.js, smart-contract/fund-wallets.js, smart-contract/interact-mainnet.js
Deploy: Scripts/deploy.js
Config: package.json, package-lock.json, smart-contract/package-lock.json

This pull request was created from Copilot chat.

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.