Replies: 1 comment 1 reply
-
The offline signing approval method is currently vulnerable to replay attack as the struct hash is not constrained enough to include information like network.id, function id, program id and nonce etc. |
Beta Was this translation helpful? Give feedback.
1 reply
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Let's list the token standard proposals so far:
PULL#14 (README.md, main.aleo, discussion) has listed the required instructions for token standard that allows contracts to interact with tokens publicly:
They are: balance_of, total_supply, approve, transfer_from, transfer, and allowance.
ARC20 includes 3 optional rules. They are: decimals, name, symbol.
Advantages:
Disadvantages:
Thanks to @EdVerally for his contribution.
PULL#34 (README.md, (main.aleo - in README.md), discussion) created a unique standard by using records even for public transfers.
Advantages:
Disadvantages:
Thanks to ghostant-1017 for this unique addition.
PULL#41 (README.md, main.aleo, discussion)
Advantages:
Disadvantages:
approve()
transition, instead of offline signatures, which is both more awkward, uses more system resources at each calling ofapprove()
, and the codebase is also around 41 lines longer than that of offline signatures.Thanks for the Aleo team to come up with this solution.
None of the above concepts address the processing of private tokens by smart contracts.
Current ARC0020 here. (README.md, main.aleo, discussion)
Advantages:
Disadvantages:
total_supply
.Beta Was this translation helpful? Give feedback.
All reactions