Go to file
Alexander Kolotov 908a481079
Merge the develop branch to the master branch, preparation to v6.0.0
This update for the `master` branch contains the changes made to address findings discovered during a security audit:
 * [Fix] Stricter preconditions for payInterest (#623)
 * [Fix] Fix offset in comments (#624)
 * [Fix] Use fixed lower call gas limit (#627)
 * [Fix] Separate XDaiForeignBridge contract with compound and GSN support (#626)
 * [Fix] Update GSN interface (#628)
 * [Fix] Block ERC20 selectors in AMB requests (#630)
 * [Other] Bump package and contracts interfaces version prior to 6.0.0 (#629)
2021-09-06 13:19:03 +03:00
.github/workflows Fix coverage (#606) 2021-06-12 00:22:15 +03:00
contracts Block ERC20 selectors in AMB requests (#630) 2021-08-21 00:09:57 +03:00
deploy Separate XDaiForeignBridge contract with compound and GSN support (#626) 2021-08-18 13:51:51 +03:00
docs Remove deprecated bridge types (#595) 2021-05-03 07:58:57 -06:00
migrations Remove unused migrations files 2019-05-08 11:29:26 -03:00
test Block ERC20 selectors in AMB requests (#630) 2021-08-21 00:09:57 +03:00
.dockerignore Remove unused upgrade dir (#614) 2021-08-03 23:34:24 +03:00
.editorconfig Migrate to GitHub Actions (#467) 2020-08-10 23:03:44 +03:00
.eslintignore Remove unused upgrade dir (#614) 2021-08-03 23:34:24 +03:00
.eslintrc Support negative decimal shift (#448) 2020-07-17 23:16:41 +03:00
.gitattributes Add solidity syntax highlighting 2018-03-14 00:42:37 -07:00
.gitignore Remove unused upgrade dir (#614) 2021-08-03 23:34:24 +03:00
.nvmrc Update nvm node version to 10.18 (npm v6.13.4) (#339) 2019-12-18 19:07:40 +03:00
.prettierrc Update project dependencies to latest versions (#283) 2019-09-10 00:27:45 +03:00
.solcover.js Fix coverage (#606) 2021-06-12 00:22:15 +03:00
.solhint.json Earn interest on locked tokens using Compound Protocol (#590) 2021-04-23 11:26:41 -06:00
CODE_OF_CONDUCT.md README doc updates, added CONTRIBUTING file 2018-09-24 15:24:11 -06:00
CONTRIBUTING.md Update old repo references (#471) 2020-08-19 17:03:38 +03:00
Dockerfile Remove unused upgrade dir (#614) 2021-08-03 23:34:24 +03:00
Dockerfile.dev Remove unused upgrade dir (#614) 2021-08-03 23:34:24 +03:00
GAS_CONSUMPTION.md Remove deprecated bridge types (#595) 2021-05-03 07:58:57 -06:00
LICENSE add LICENSE 2018-04-27 16:45:09 -07:00
README.md Remove deprecated bridge types (#595) 2021-05-03 07:58:57 -06:00
REWARD_MANAGEMENT.md Remove deprecated bridge types (#595) 2021-05-03 07:58:57 -06:00
codechecks.yml Add eth-gas-reporter codecheck for gas usage report on CI (#264) 2019-08-07 23:25:56 +02:00
deploy.sh Remove deprecated bridge types (#595) 2021-05-03 07:58:57 -06:00
docker-compose.yml Create new Dockerfile for deployments/upgrades (#458) 2020-08-11 23:41:36 +03:00
flatten.sh Remove deprecated bridge types (#595) 2021-05-03 07:58:57 -06:00
package-lock.json Bump package and contracts interfaces version prior to 6.0.0 (#629) 2021-08-20 14:14:21 +03:00
package.json Bump package and contracts interfaces version prior to 6.0.0 (#629) 2021-08-20 14:14:21 +03:00
truffle-config.js Fix coverage (#606) 2021-06-12 00:22:15 +03:00

README.md

Join the chat at https://gitter.im/poanetwork/poa-bridge Build Status Coverage Status

POA Bridge Smart Contracts

These contracts provide the core functionality for the POA bridge. They implement the logic to relay assests between two EVM-based blockchain networks. The contracts collect bridge validator's signatures to approve and facilitate relay operations.

The POA bridge smart contracts are intended to work with the bridge process implemented on NodeJS. Please refer to the bridge process documentation to configure and deploy the bridge.

Bridge Overview

The POA Bridge allows users to transfer assets between two chains in the Ethereum ecosystem. It is composed of several elements which are located in different POA Network repositories:

Bridge Elements

  1. Solidity smart contracts, contained in this repository.
  2. Token Bridge. A NodeJS oracle responsible for listening to events and sending transactions to authorize asset transfers.
  3. Bridge UI Application. A DApp interface to transfer tokens and coins between chains.
  4. Bridge Monitor. A tool for checking balances and unprocessed events in bridged networks.
  5. Bridge Deployment Playbooks. Manages configuration instructions for remote deployments.

Bridge Smart Contracts Summary

Operations

Currently, the contracts support four types of relay operations:

  • Tokenize the native coin in one blockchain network (Home) into an ERC20 token in another network (Foreign).
  • Swap a token presented by an existing ERC20 contract in a Foreign network into an ERC20 token in the Home network, where one pair of bridge contracts corresponds to one pair of ERC20 tokens.
  • to mint new native coins in Home blockchain network from a token presented by an existing ERC20 contract in a Foreign network.
  • Transfer arbitrary data between two blockchain networks as so the data could be interpreted as an arbitrary contract method invocation.

Components

The POA bridge contracts consist of several components:

  • The Home Bridge smart contract. This is currently deployed in POA.Network.
  • The Foreign Bridge smart contract. This is deployed in the Ethereum Mainnet.
  • Depending on the type of relay operations the following components are also used:
    • in AMB-ERC-TO-ERC mode: the ERC20 token (in fact, the ERC677 extension is used) is deployed on the Home network;
    • in ERC-TO-NATIVE mode: The home network nodes must support consensus engine that allows using a smart contract for block reward calculation;
  • The Validators smart contract is deployed in both the POA.Network and the Ethereum Mainnet.

Bridge Roles and Responsibilities

Responsibilities and roles of the bridge:

  • Administrator role (representation of a multisig contract):
    • add/remove validators
    • set daily limits on both bridges
    • set maximum per transaction limit on both bridges
    • set minimum per transaction limit on both bridges
    • upgrade contracts in case of vulnerability
    • set minimum required signatures from validators in order to relay a user's transaction
  • Validator role:
    • provide 100% uptime to relay transactions
    • listen for UserRequestForSignature events on Home Bridge and sign an approval to relay assets on Foreign network
    • listen for CollectedSignatures events on Home Bridge. As soon as enough signatures are collected, transfer all collected signatures to the Foreign Bridge contract.
    • listen for UserRequestForAffirmation or Transfer (depending on the bridge mode) events on the Foreign Bridge and send approval to Home Bridge to relay assets from Foreign Network to Home
  • User role:
    • sends assets to Bridge contracts:
      • in ERC-TO-NATIVE mode: send ERC20 tokens to the Foreign Bridge to receive native coins from the Home Bridge, send native coins to the Home Bridge to unlock ERC20 tokens from the Foreign Bridge;
      • in ARBITRARY-MESSAGE mode: Invoke Home/Foreign Bridge to send a message that will be executed on the other Network as an arbitrary contract method invocation;
      • in AMB-ERC-TO-ERC mode: transfer ERC20 tokens to the Foreign Mediator which will interact with Foreign AMB Bridge to mint ERC20 tokens on the Home Network, transfer ERC20 tokens to the Home Mediator which will interact with Home AMB Bridge to unlock ERC20 tokens on Foreign network.

Usage

There are two ways to deploy contracts:

  • install and use NodeJS
  • use Docker to deploy

Deployment with NodeJS

Install Dependencies

npm install

Deploy

Please read the README.md in the deploy folder for instructions and .env file configuration

Test

npm test

Run coverage tests

npm run coverage

The results can be found in the coverage directory.

Flatten

Fattened contracts can be used to verify the contract code in a block explorer like BlockScout or Etherscan. The following command will prepare flattened version of the contracts:

npm run flatten

The flattened contracts can be found in the flats directory.

Deployment in the Docker environment

Docker and Docker Compose can be used to deploy contracts without NodeJS installed on the system. If you are on Linux, we recommend you create a docker group and add your user to it, so that you can use the CLI without sudo.

Prepare the docker container

docker-compose up --build

Note: The container must be rebuilt every time the code in a contract or deployment script is changed.

Deploy the contracts

  1. Create the .env file in the deploy directory as described in the deployment README.md.
  2. Run deployment process:
    docker-compose run bridge-contracts deploy.sh
    
    or with Linux:
    ./deploy.sh
    

Copy flatten sources (if needed)

  1. Discover the container name:
    docker-compose images bridge-contracts
    
  2. In the following command, use the container name to copy the flattened contracts code to the current working directory. The contracts will be located in the flats directory.
    docker cp name-of-your-container:/contracts/flats ./
    

Test contract and run coverage (if needed)

$ docker-compose run bridge-contracts bash
$ npm test
$ npm run coverage

Shutdown the container

If the container is no longer needed, it can be shutdown:

docker-compose down

Gas Consumption

The GAS_CONSUMPTION file includes Min, Max, and Avg gas consumption figures for contracts associated with each bridge mode.

Reward Management

The REWARD_MANAGEMENT file includes information on how rewards are distributed among the validators on each bridge mode.

Testing environment

To test the bridge scripts in ERC20-to-ERC20 mode on a testnet like Sokol or Kovan, you must deploy an ERC20 token to the foreign network. This can be done by running the following command:

cd deploy
node testenv-deploy.js token

or with Docker:

./deploy.sh token

Contributing

See the CONTRIBUTING document for contribution, testing and pull request protocol.

License

License: GPL v3.0

This project is licensed under the GNU General Public License v3.0. See the LICENSE file for details.