Last active
June 25, 2020 05:25
-
-
Save rahuldamodar94/96080888ffdaec66b2724ee5e51e35fc to your computer and use it in GitHub Desktop.
Remix
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pragma solidity >=0.5.0 <0.6.7; | |
contract Grant { | |
// Event fired when permission is granted to a user. | |
event permissionGranted(address _from,address _to); | |
// To store the permission details | |
mapping (address => address) grant; | |
// To ensure from and too address is not same | |
modifier notSame(address addr){ | |
require(msg.sender!=addr,'From and To Address is Same'); | |
_; | |
} | |
// Caller Grants permission to a specific address | |
function grantPermission(address _toAddress) public notSame(_toAddress) returns(bool) { | |
grant[msg.sender] = _toAddress; | |
emit permissionGranted(msg.sender,_toAddress); | |
return true; | |
} | |
// Caller checks if permission has been granted from a specific address | |
function checkPermission(address _fromAddress) public view notSame(_fromAddress) returns (bool){ | |
if(grant[_fromAddress]==msg.sender){ | |
return true; | |
}else{ | |
return false; | |
} | |
} | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pragma solidity >=0.4.22 <0.7.0; | |
/** | |
* @title Owner | |
* @dev Set & change owner | |
*/ | |
contract Owner { | |
address private owner; | |
// event for EVM logging | |
event OwnerSet(address indexed oldOwner, address indexed newOwner); | |
// modifier to check if caller is owner | |
modifier isOwner() { | |
// If the first argument of 'require' evaluates to 'false', execution terminates and all | |
// changes to the state and to Ether balances are reverted. | |
// This used to consume all gas in old EVM versions, but not anymore. | |
// It is often a good idea to use 'require' to check if functions are called correctly. | |
// As a second argument, you can also provide an explanation about what went wrong. | |
require(msg.sender == owner, "Caller is not owner"); | |
_; | |
} | |
/** | |
* @dev Set contract deployer as owner | |
*/ | |
constructor() public { | |
owner = msg.sender; // 'msg.sender' is sender of current call, contract deployer for a constructor | |
emit OwnerSet(address(0), owner); | |
} | |
/** | |
* @dev Change owner | |
* @param newOwner address of new owner | |
*/ | |
function changeOwner(address newOwner) public isOwner { | |
emit OwnerSet(owner, newOwner); | |
owner = newOwner; | |
} | |
/** | |
* @dev Return owner address | |
* @return address of owner | |
*/ | |
function getOwner() external view returns (address) { | |
return owner; | |
} | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pragma solidity 0.5.14; | |
library BandChainLib { | |
function toUint64List(bytes memory _data) internal pure returns(uint64[] memory) { | |
uint64[] memory result = new uint64[](_data.length / 8); | |
require(result.length * 8 == _data.length, 'DATA_LENGTH_IS_INVALID'); | |
for (uint256 i = 0; i < result.length; i++) { | |
bytes8 tmp; | |
assembly { | |
tmp := mload(add(_data, add(0x20, mul(i,0x08)))) | |
} | |
result[i] = uint64(tmp); | |
} | |
return result; | |
} | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
// SPDX-License-Identifier: MIT | |
pragma solidity ^0.6.0; | |
/** | |
* @dev Implementation of the {IERC20} interface. | |
* | |
* This implementation is agnostic to the way tokens are created. This means | |
* that a supply mechanism has to be added in a derived contract using {_mint}. | |
* For a generic mechanism see {ERC20MinterPauser}. | |
* | |
* TIP: For a detailed writeup see our guide | |
* https://forum.zeppelin.solutions/t/how-to-implement-erc20-supply-mechanisms/226[How | |
* to implement supply mechanisms]. | |
* | |
* We have followed general OpenZeppelin guidelines: functions revert instead | |
* of returning `false` on failure. This behavior is nonetheless conventional | |
* and does not conflict with the expectations of ERC20 applications. | |
* | |
* Additionally, an {Approval} event is emitted on calls to {transferFrom}. | |
* This allows applications to reconstruct the allowance for all accounts just | |
* by listening to said events. Other implementations of the EIP may not emit | |
* these events, as it isn't required by the specification. | |
* | |
* Finally, the non-standard {decreaseAllowance} and {increaseAllowance} | |
* functions have been added to mitigate the well-known issues around setting | |
* allowances. See {IERC20-approve}. | |
*/ | |
abstract contract Context { | |
function _msgSender() internal view virtual returns (address payable) { | |
return msg.sender; | |
} | |
function _msgData() internal view virtual returns (bytes memory) { | |
this; // silence state mutability warning without generating bytecode - see https://github.com/ethereum/solidity/issues/2691 | |
return msg.data; | |
} | |
} | |
/** | |
* @dev Collection of functions related to the address type | |
*/ | |
// library Address { | |
// /** | |
// * @dev Returns true if `account` is a contract. | |
// * | |
// * [IMPORTANT] | |
// * ==== | |
// * It is unsafe to assume that an address for which this function returns | |
// * false is an externally-owned account (EOA) and not a contract. | |
// * | |
// * Among others, `isContract` will return false for the following | |
// * types of addresses: | |
// * | |
// * - an externally-owned account | |
// * - a contract in construction | |
// * - an address where a contract will be created | |
// * - an address where a contract lived, but was destroyed | |
// * ==== | |
// */ | |
// function isContract(address account) internal view returns (bool) { | |
// // According to EIP-1052, 0x0 is the value returned for not-yet created accounts | |
// // and 0xc5d2460186f7233c927e7db2dcc703c0e500b653ca82273b7bfad8045d85a470 is returned | |
// // for accounts without code, i.e. `keccak256('')` | |
// bytes32 codehash; | |
// bytes32 accountHash = 0xc5d2460186f7233c927e7db2dcc703c0e500b653ca82273b7bfad8045d85a470; | |
// // solhint-disable-next-line no-inline-assembly | |
// assembly { codehash := extcodehash(account) } | |
// return (codehash != accountHash && codehash != 0x0); | |
// } | |
// /** | |
// * @dev Replacement for Solidity's `transfer`: sends `amount` wei to | |
// * `recipient`, forwarding all available gas and reverting on errors. | |
// * | |
// * https://eips.ethereum.org/EIPS/eip-1884[EIP1884] increases the gas cost | |
// * of certain opcodes, possibly making contracts go over the 2300 gas limit | |
// * imposed by `transfer`, making them unable to receive funds via | |
// * `transfer`. {sendValue} removes this limitation. | |
// * | |
// * https://diligence.consensys.net/posts/2019/09/stop-using-soliditys-transfer-now/[Learn more]. | |
// * | |
// * IMPORTANT: because control is transferred to `recipient`, care must be | |
// * taken to not create reentrancy vulnerabilities. Consider using | |
// * {ReentrancyGuard} or the | |
// * https://solidity.readthedocs.io/en/v0.5.11/security-considerations.html#use-the-checks-effects-interactions-pattern[checks-effects-interactions pattern]. | |
// */ | |
// function sendValue(address payable recipient, uint256 amount) internal { | |
// require(address(this).balance >= amount, "Address: insufficient balance"); | |
// // solhint-disable-next-line avoid-low-level-calls, avoid-call-value | |
// (bool success, ) = recipient.call{ value: amount }(""); | |
// require(success, "Address: unable to send value, recipient may have reverted"); | |
// } | |
// } | |
/** | |
* @dev Interface of the ERC20 standard as defined in the EIP. | |
*/ | |
interface IERC20 { | |
/** | |
* @dev Returns the amount of tokens in existence. | |
*/ | |
function totalSupply() external view returns (uint256); | |
/** | |
* @dev Returns the amount of tokens owned by `account`. | |
*/ | |
function balanceOf(address account) external view returns (uint256); | |
/** | |
* @dev Moves `amount` tokens from the caller's account to `recipient`. | |
* | |
* Returns a boolean value indicating whether the operation succeeded. | |
* | |
* Emits a {Transfer} event. | |
*/ | |
function transfer(address recipient, uint256 amount) external returns (bool); | |
/** | |
* @dev Returns the remaining number of tokens that `spender` will be | |
* allowed to spend on behalf of `owner` through {transferFrom}. This is | |
* zero by default. | |
* | |
* This value changes when {approve} or {transferFrom} are called. | |
*/ | |
function allowance(address owner, address spender) external view returns (uint256); | |
/** | |
* @dev Sets `amount` as the allowance of `spender` over the caller's tokens. | |
* | |
* Returns a boolean value indicating whether the operation succeeded. | |
* | |
* IMPORTANT: Beware that changing an allowance with this method brings the risk | |
* that someone may use both the old and the new allowance by unfortunate | |
* transaction ordering. One possible solution to mitigate this race | |
* condition is to first reduce the spender's allowance to 0 and set the | |
* desired value afterwards: | |
* https://github.com/ethereum/EIPs/issues/20#issuecomment-263524729 | |
* | |
* Emits an {Approval} event. | |
*/ | |
function approve(address spender, uint256 amount) external returns (bool); | |
/** | |
* @dev Moves `amount` tokens from `sender` to `recipient` using the | |
* allowance mechanism. `amount` is then deducted from the caller's | |
* allowance. | |
* | |
* Returns a boolean value indicating whether the operation succeeded. | |
* | |
* Emits a {Transfer} event. | |
*/ | |
function transferFrom(address sender, address recipient, uint256 amount) external returns (bool); | |
/** | |
* @dev Emitted when `value` tokens are moved from one account (`from`) to | |
* another (`to`). | |
* | |
* Note that `value` may be zero. | |
*/ | |
event Transfer(address indexed from, address indexed to, uint256 value); | |
/** | |
* @dev Emitted when the allowance of a `spender` for an `owner` is set by | |
* a call to {approve}. `value` is the new allowance. | |
*/ | |
event Approval(address indexed owner, address indexed spender, uint256 value); | |
} | |
library SafeMath { | |
/** | |
* @dev Returns the addition of two unsigned integers, reverting on | |
* overflow. | |
* | |
* Counterpart to Solidity's `+` operator. | |
* | |
* Requirements: | |
* - Addition cannot overflow. | |
*/ | |
function add(uint256 a, uint256 b) internal pure returns (uint256) { | |
uint256 c = a + b; | |
require(c >= a, "SafeMath: addition overflow"); | |
return c; | |
} | |
/** | |
* @dev Returns the subtraction of two unsigned integers, reverting on | |
* overflow (when the result is negative). | |
* | |
* Counterpart to Solidity's `-` operator. | |
* | |
* Requirements: | |
* - Subtraction cannot overflow. | |
*/ | |
function sub(uint256 a, uint256 b) internal pure returns (uint256) { | |
return sub(a, b, "SafeMath: subtraction overflow"); | |
} | |
/** | |
* @dev Returns the subtraction of two unsigned integers, reverting with custom message on | |
* overflow (when the result is negative). | |
* | |
* Counterpart to Solidity's `-` operator. | |
* | |
* Requirements: | |
* - Subtraction cannot overflow. | |
*/ | |
function sub(uint256 a, uint256 b, string memory errorMessage) internal pure returns (uint256) { | |
require(b <= a, errorMessage); | |
uint256 c = a - b; | |
return c; | |
} | |
/** | |
* @dev Returns the multiplication of two unsigned integers, reverting on | |
* overflow. | |
* | |
* Counterpart to Solidity's `*` operator. | |
* | |
* Requirements: | |
* - Multiplication cannot overflow. | |
*/ | |
function mul(uint256 a, uint256 b) internal pure returns (uint256) { | |
// Gas optimization: this is cheaper than requiring 'a' not being zero, but the | |
// benefit is lost if 'b' is also tested. | |
// See: https://github.com/OpenZeppelin/openzeppelin-contracts/pull/522 | |
if (a == 0) { | |
return 0; | |
} | |
uint256 c = a * b; | |
require(c / a == b, "SafeMath: multiplication overflow"); | |
return c; | |
} | |
/** | |
* @dev Returns the integer division of two unsigned integers. Reverts on | |
* division by zero. The result is rounded towards zero. | |
* | |
* Counterpart to Solidity's `/` operator. Note: this function uses a | |
* `revert` opcode (which leaves remaining gas untouched) while Solidity | |
* uses an invalid opcode to revert (consuming all remaining gas). | |
* | |
* Requirements: | |
* - The divisor cannot be zero. | |
*/ | |
function div(uint256 a, uint256 b) internal pure returns (uint256) { | |
return div(a, b, "SafeMath: division by zero"); | |
} | |
/** | |
* @dev Returns the integer division of two unsigned integers. Reverts with custom message on | |
* division by zero. The result is rounded towards zero. | |
* | |
* Counterpart to Solidity's `/` operator. Note: this function uses a | |
* `revert` opcode (which leaves remaining gas untouched) while Solidity | |
* uses an invalid opcode to revert (consuming all remaining gas). | |
* | |
* Requirements: | |
* - The divisor cannot be zero. | |
*/ | |
function div(uint256 a, uint256 b, string memory errorMessage) internal pure returns (uint256) { | |
require(b > 0, errorMessage); | |
uint256 c = a / b; | |
// assert(a == b * c + a % b); // There is no case in which this doesn't hold | |
return c; | |
} | |
/** | |
* @dev Returns the remainder of dividing two unsigned integers. (unsigned integer modulo), | |
* Reverts when dividing by zero. | |
* | |
* Counterpart to Solidity's `%` operator. This function uses a `revert` | |
* opcode (which leaves remaining gas untouched) while Solidity uses an | |
* invalid opcode to revert (consuming all remaining gas). | |
* | |
* Requirements: | |
* - The divisor cannot be zero. | |
*/ | |
function mod(uint256 a, uint256 b) internal pure returns (uint256) { | |
return mod(a, b, "SafeMath: modulo by zero"); | |
} | |
/** | |
* @dev Returns the remainder of dividing two unsigned integers. (unsigned integer modulo), | |
* Reverts with custom message when dividing by zero. | |
* | |
* Counterpart to Solidity's `%` operator. This function uses a `revert` | |
* opcode (which leaves remaining gas untouched) while Solidity uses an | |
* invalid opcode to revert (consuming all remaining gas). | |
* | |
* Requirements: | |
* - The divisor cannot be zero. | |
*/ | |
function mod(uint256 a, uint256 b, string memory errorMessage) internal pure returns (uint256) { | |
require(b != 0, errorMessage); | |
return a % b; | |
} | |
} | |
contract ERC20 is Context, IERC20 { | |
using SafeMath for uint256; | |
// using Address for address; | |
mapping (address => uint256) private _balances; | |
mapping (address => mapping (address => uint256)) private _allowances; | |
uint256 private _totalSupply = 1000000000000000000000000000000000000; | |
string private _name; | |
string private _symbol; | |
uint8 private _decimals; | |
/** | |
* @dev Sets the values for {name} and {symbol}, initializes {decimals} with | |
* a default value of 18. | |
* | |
* To select a different value for {decimals}, use {_setupDecimals}. | |
* | |
* All three of these values are immutable: they can only be set once during | |
* construction. | |
*/ | |
constructor (string memory name, string memory symbol) public { | |
_name = name; | |
_symbol = symbol; | |
_decimals = 18; | |
_balances[msg.sender] = _totalSupply; | |
} | |
/** | |
* @dev Returns the name of the token. | |
*/ | |
function name() public view returns (string memory) { | |
return _name; | |
} | |
/** | |
* @dev Returns the symbol of the token, usually a shorter version of the | |
* name. | |
*/ | |
function symbol() public view returns (string memory) { | |
return _symbol; | |
} | |
/** | |
* @dev Returns the number of decimals used to get its user representation. | |
* For example, if `decimals` equals `2`, a balance of `505` tokens should | |
* be displayed to a user as `5,05` (`505 / 10 ** 2`). | |
* | |
* Tokens usually opt for a value of 18, imitating the relationship between | |
* Ether and Wei. This is the value {ERC20} uses, unless {_setupDecimals} is | |
* called. | |
* | |
* NOTE: This information is only used for _display_ purposes: it in | |
* no way affects any of the arithmetic of the contract, including | |
* {IERC20-balanceOf} and {IERC20-transfer}. | |
*/ | |
function decimals() public view returns (uint8) { | |
return _decimals; | |
} | |
/** | |
* @dev See {IERC20-totalSupply}. | |
*/ | |
function totalSupply() public view override returns (uint256) { | |
return _totalSupply; | |
} | |
/** | |
* @dev See {IERC20-balanceOf}. | |
*/ | |
function balanceOf(address account) public view override returns (uint256) { | |
return _balances[account]; | |
} | |
/** | |
* @dev See {IERC20-transfer}. | |
* | |
* Requirements: | |
* | |
* - `recipient` cannot be the zero address. | |
* - the caller must have a balance of at least `amount`. | |
*/ | |
function transfer(address recipient, uint256 amount) public virtual override returns (bool) { | |
_transfer(_msgSender(), recipient, amount); | |
return true; | |
} | |
/** | |
* @dev See {IERC20-allowance}. | |
*/ | |
function allowance(address owner, address spender) public view virtual override returns (uint256) { | |
return _allowances[owner][spender]; | |
} | |
/** | |
* @dev See {IERC20-approve}. | |
* | |
* Requirements: | |
* | |
* - `spender` cannot be the zero address. | |
*/ | |
function approve(address spender, uint256 amount) public virtual override returns (bool) { | |
_approve(_msgSender(), spender, amount); | |
return true; | |
} | |
/** | |
* @dev See {IERC20-transferFrom}. | |
* | |
* Emits an {Approval} event indicating the updated allowance. This is not | |
* required by the EIP. See the note at the beginning of {ERC20}; | |
* | |
* Requirements: | |
* - `sender` and `recipient` cannot be the zero address. | |
* - `sender` must have a balance of at least `amount`. | |
* - the caller must have allowance for ``sender``'s tokens of at least | |
* `amount`. | |
*/ | |
function transferFrom(address sender, address recipient, uint256 amount) public virtual override returns (bool) { | |
_transfer(sender, recipient, amount); | |
_approve(sender, _msgSender(), _allowances[sender][_msgSender()].sub(amount, "ERC20: transfer amount exceeds allowance")); | |
return true; | |
} | |
/** | |
* @dev Atomically increases the allowance granted to `spender` by the caller. | |
* | |
* This is an alternative to {approve} that can be used as a mitigation for | |
* problems described in {IERC20-approve}. | |
* | |
* Emits an {Approval} event indicating the updated allowance. | |
* | |
* Requirements: | |
* | |
* - `spender` cannot be the zero address. | |
*/ | |
function increaseAllowance(address spender, uint256 addedValue) public virtual returns (bool) { | |
_approve(_msgSender(), spender, _allowances[_msgSender()][spender].add(addedValue)); | |
return true; | |
} | |
/** | |
* @dev Atomically decreases the allowance granted to `spender` by the caller. | |
* | |
* This is an alternative to {approve} that can be used as a mitigation for | |
* problems described in {IERC20-approve}. | |
* | |
* Emits an {Approval} event indicating the updated allowance. | |
* | |
* Requirements: | |
* | |
* - `spender` cannot be the zero address. | |
* - `spender` must have allowance for the caller of at least | |
* `subtractedValue`. | |
*/ | |
function decreaseAllowance(address spender, uint256 subtractedValue) public virtual returns (bool) { | |
_approve(_msgSender(), spender, _allowances[_msgSender()][spender].sub(subtractedValue, "ERC20: decreased allowance below zero")); | |
return true; | |
} | |
/** | |
* @dev Moves tokens `amount` from `sender` to `recipient`. | |
* | |
* This is internal function is equivalent to {transfer}, and can be used to | |
* e.g. implement automatic token fees, slashing mechanisms, etc. | |
* | |
* Emits a {Transfer} event. | |
* | |
* Requirements: | |
* | |
* - `sender` cannot be the zero address. | |
* - `recipient` cannot be the zero address. | |
* - `sender` must have a balance of at least `amount`. | |
*/ | |
function _transfer(address sender, address recipient, uint256 amount) internal virtual { | |
require(sender != address(0), "ERC20: transfer from the zero address"); | |
require(recipient != address(0), "ERC20: transfer to the zero address"); | |
_beforeTokenTransfer(sender, recipient, amount); | |
_balances[sender] = _balances[sender].sub(amount, "ERC20: transfer amount exceeds balance"); | |
_balances[recipient] = _balances[recipient].add(amount); | |
emit Transfer(sender, recipient, amount); | |
} | |
/** @dev Creates `amount` tokens and assigns them to `account`, increasing | |
* the total supply. | |
* | |
* Emits a {Transfer} event with `from` set to the zero address. | |
* | |
* Requirements | |
* | |
* - `to` cannot be the zero address. | |
*/ | |
function _mint(address account, uint256 amount) internal virtual { | |
require(account != address(0), "ERC20: mint to the zero address"); | |
_beforeTokenTransfer(address(0), account, amount); | |
_totalSupply = _totalSupply.add(amount); | |
_balances[account] = _balances[account].add(amount); | |
emit Transfer(address(0), account, amount); | |
} | |
/** | |
* @dev Destroys `amount` tokens from `account`, reducing the | |
* total supply. | |
* | |
* Emits a {Transfer} event with `to` set to the zero address. | |
* | |
* Requirements | |
* | |
* - `account` cannot be the zero address. | |
* - `account` must have at least `amount` tokens. | |
*/ | |
function _burn(address account, uint256 amount) internal virtual { | |
require(account != address(0), "ERC20: burn from the zero address"); | |
_beforeTokenTransfer(account, address(0), amount); | |
_balances[account] = _balances[account].sub(amount, "ERC20: burn amount exceeds balance"); | |
_totalSupply = _totalSupply.sub(amount); | |
emit Transfer(account, address(0), amount); | |
} | |
/** | |
* @dev Sets `amount` as the allowance of `spender` over the `owner`s tokens. | |
* | |
* This is internal function is equivalent to `approve`, and can be used to | |
* e.g. set automatic allowances for certain subsystems, etc. | |
* | |
* Emits an {Approval} event. | |
* | |
* Requirements: | |
* | |
* - `owner` cannot be the zero address. | |
* - `spender` cannot be the zero address. | |
*/ | |
function _approve(address owner, address spender, uint256 amount) internal virtual { | |
require(owner != address(0), "ERC20: approve from the zero address"); | |
require(spender != address(0), "ERC20: approve to the zero address"); | |
_allowances[owner][spender] = amount; | |
emit Approval(owner, spender, amount); | |
} | |
/** | |
* @dev Sets {decimals} to a value other than the default one of 18. | |
* | |
* WARNING: This function should only be called from the constructor. Most | |
* applications that interact with token contracts will not expect | |
* {decimals} to ever change, and may work incorrectly if it does. | |
*/ | |
function _setupDecimals(uint8 decimals_) internal { | |
_decimals = decimals_; | |
} | |
/** | |
* @dev Hook that is called before any transfer of tokens. This includes | |
* minting and burning. | |
* | |
* Calling conditions: | |
* | |
* - when `from` and `to` are both non-zero, `amount` of ``from``'s tokens | |
* will be to transferred to `to`. | |
* - when `from` is zero, `amount` tokens will be minted for `to`. | |
* - when `to` is zero, `amount` of ``from``'s tokens will be burned. | |
* - `from` and `to` are never both zero. | |
* | |
* To learn more about hooks, head to xref:ROOT:extending-contracts.adoc#using-hooks[Using Hooks]. | |
*/ | |
function _beforeTokenTransfer(address from, address to, uint256 amount) internal virtual { } | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pragma solidity ^0.6.0; | |
/* | |
* @dev Provides information about the current execution context, including the | |
* sender of the transaction and its data. While these are generally available | |
* via msg.sender and msg.data, they should not be accessed in such a direct | |
* manner, since when dealing with GSN meta-transactions the account sending and | |
* paying for execution may not be the actual sender (as far as an application | |
* is concerned). | |
* | |
* This contract is only required for intermediate, library-like contracts. | |
*/ | |
contract Context { | |
// Empty internal constructor, to prevent people from mistakenly deploying | |
// an instance of this contract, which should be used via inheritance. | |
constructor() internal {} | |
function _msgSender() internal virtual view returns (address payable) { | |
return msg.sender; | |
} | |
function _msgData() internal virtual view returns (bytes memory) { | |
this; // silence state mutability warning without generating bytecode - see https://github.com/ethereum/solidity/issues/2691 | |
return msg.data; | |
} | |
} | |
/** | |
* @dev Interface of the ERC165 standard, as defined in the | |
* https://eips.ethereum.org/EIPS/eip-165[EIP]. | |
* | |
* Implementers can declare support of contract interfaces, which can then be | |
* queried by others ({ERC165Checker}). | |
* | |
* For an implementation, see {ERC165}. | |
*/ | |
interface IERC165 { | |
/** | |
* @dev Returns true if this contract implements the interface defined by | |
* `interfaceId`. See the corresponding | |
* https://eips.ethereum.org/EIPS/eip-165#how-interfaces-are-identified[EIP section] | |
* to learn more about how these ids are created. | |
* | |
* This function call must use less than 30 000 gas. | |
*/ | |
function supportsInterface(bytes4 interfaceId) external view returns (bool); | |
} | |
/** | |
* @dev Required interface of an ERC721 compliant contract. | |
*/ | |
interface IERC721 is IERC165 { | |
/** | |
* @dev Emitted when `tokenId` token is transfered from `from` to `to`. | |
*/ | |
event Transfer( | |
address indexed from, | |
address indexed to, | |
uint256 indexed tokenId | |
); | |
/** | |
* @dev Emitted when `owner` enables `approved` to manage the `tokenId` token. | |
*/ | |
event Approval( | |
address indexed owner, | |
address indexed approved, | |
uint256 indexed tokenId | |
); | |
/** | |
* @dev Emitted when `owner` enables or disables (`approved`) `operator` to manage all of its assets. | |
*/ | |
event ApprovalForAll( | |
address indexed owner, | |
address indexed operator, | |
bool approved | |
); | |
/** | |
* @dev Returns the number of tokens in ``owner``'s account. | |
*/ | |
function balanceOf(address owner) external view returns (uint256 balance); | |
/** | |
* @dev Returns the owner of the `tokenId` token. | |
* | |
* Requirements: | |
* | |
* - `tokenId` must exist. | |
*/ | |
function ownerOf(uint256 tokenId) external view returns (address owner); | |
/** | |
* @dev Safely transfers `tokenId` token from `from` to `to`, checking first that contract recipients | |
* are aware of the ERC721 protocol to prevent tokens from being forever locked. | |
* | |
* Requirements: | |
* | |
* - `from`, `to` cannot be zero. | |
* - `tokenId` token must exist and be owned by `from`. | |
* - If the caller is not `from`, it must be have been allowed to move this token by either {approve} or {setApprovalForAll}. | |
* - If `to` refers to a smart contract, it must implement {IERC721Receiver-onERC721Received}, which is called upon a safe transfer. | |
* | |
* Emits a {Transfer} event. | |
*/ | |
function safeTransferFrom( | |
address from, | |
address to, | |
uint256 tokenId | |
) external; | |
/** | |
* @dev Transfers `tokenId` token from `from` to `to`. | |
* | |
* WARNING: Usage of this method is discouraged, use {safeTransferFrom} whenever possible. | |
* | |
* Requirements: | |
* | |
* - `from`, `to` cannot be zero. | |
* - `tokenId` token must be owned by `from`. | |
* - If the caller is not `from`, it must be approved to move this token by either {approve} or {setApprovalForAll}. | |
* | |
* Emits a {Transfer} event. | |
*/ | |
function transferFrom( | |
address from, | |
address to, | |
uint256 tokenId | |
) external; | |
/** | |
* @dev Gives permission to `to` to transfer `tokenId` token to another account. | |
* The approval is cleared when the token is transferred. | |
* | |
* Only a single account can be approved at a time, so approving the zero address clears previous approvals. | |
* | |
* Requirements: | |
* | |
* - The caller must own the token or be an approved operator. | |
* - `tokenId` must exist. | |
* | |
* Emits an {Approval} event. | |
*/ | |
function approve(address to, uint256 tokenId) external; | |
/** | |
* @dev Returns the account approved for `tokenId` token. | |
* | |
* Requirements: | |
* | |
* - `tokenId` must exist. | |
*/ | |
function getApproved(uint256 tokenId) | |
external | |
view | |
returns (address operator); | |
/** | |
* @dev Approve or remove `operator` as an operator for the caller. | |
* Operators can call {transferFrom} or {safeTransferFrom} for any token owned by the caller. | |
* | |
* Requirements: | |
* | |
* - The `operator` cannot be the caller. | |
* | |
* Emits an {ApprovalForAll} event. | |
*/ | |
function setApprovalForAll(address operator, bool _approved) external; | |
/** | |
* @dev Returns if the `operator` is allowed to manage all of the assets of `owner`. | |
* | |
* See {setApprovalForAll} | |
*/ | |
function isApprovedForAll(address owner, address operator) | |
external | |
view | |
returns (bool); | |
/** | |
* @dev Safely transfers `tokenId` token from `from` to `to`. | |
* | |
* Requirements: | |
* | |
* - `from`, `to` cannot be zero. | |
* - `tokenId` token must exist and be owned by `from`. | |
* - If the caller is not `from`, it must be approved to move this token by either {approve} or {setApprovalForAll}. | |
* - If `to` refers to a smart contract, it must implement {IERC721Receiver-onERC721Received}, which is called upon a safe transfer. | |
* | |
* Emits a {Transfer} event. | |
*/ | |
function safeTransferFrom( | |
address from, | |
address to, | |
uint256 tokenId, | |
bytes calldata data | |
) external; | |
} | |
/** | |
* @title ERC-721 Non-Fungible Token Standard, optional metadata extension | |
* @dev See https://eips.ethereum.org/EIPS/eip-721 | |
*/ | |
interface IERC721Metadata is IERC721 { | |
/** | |
* @dev Returns the token collection name. | |
*/ | |
function name() external view returns (string memory); | |
/** | |
* @dev Returns the token collection symbol. | |
*/ | |
function symbol() external view returns (string memory); | |
/** | |
* @dev Returns the Uniform Resource Identifier (URI) for `tokenId` token. | |
*/ | |
function tokenURI(uint256 tokenId) external view returns (string memory); | |
} | |
/** | |
* @title ERC-721 Non-Fungible Token Standard, optional enumeration extension | |
* @dev See https://eips.ethereum.org/EIPS/eip-721 | |
*/ | |
interface IERC721Enumerable is IERC721 { | |
/** | |
* @dev Returns the total amount of tokens stored by the contract. | |
*/ | |
function totalSupply() external view returns (uint256); | |
/** | |
* @dev Returns a token ID owned by `owner` at a given `index` of its token list. | |
* Use along with {balanceOf} to enumerate all of ``owner``'s tokens. | |
*/ | |
function tokenOfOwnerByIndex(address owner, uint256 index) | |
external | |
view | |
returns (uint256 tokenId); | |
/** | |
* @dev Returns a token ID at a given `index` of all the tokens stored by the contract. | |
* Use along with {totalSupply} to enumerate all tokens. | |
*/ | |
function tokenByIndex(uint256 index) external view returns (uint256); | |
} | |
/** | |
* @title ERC721 token receiver interface | |
* @dev Interface for any contract that wants to support safeTransfers | |
* from ERC721 asset contracts. | |
*/ | |
abstract contract IERC721Receiver { | |
/** | |
* @notice Handle the receipt of an NFT | |
* @dev The ERC721 smart contract calls this function on the recipient | |
* after a {IERC721-safeTransferFrom}. This function MUST return the function selector, | |
* otherwise the caller will revert the transaction. The selector to be | |
* returned can be obtained as `this.onERC721Received.selector`. This | |
* function MAY throw to revert and reject the transfer. | |
* Note: the ERC721 contract address is always the message sender. | |
* @param operator The address which called `safeTransferFrom` function | |
* @param from The address which previously owned the token | |
* @param tokenId The NFT identifier which is being transferred | |
* @param data Additional data with no specified format | |
* @return bytes4 `bytes4(keccak256("onERC721Received(address,address,uint256,bytes)"))` | |
*/ | |
function onERC721Received( | |
address operator, | |
address from, | |
uint256 tokenId, | |
bytes memory data | |
) public virtual returns (bytes4); | |
} | |
/** | |
* @dev Implementation of the {IERC165} interface. | |
* | |
* Contracts may inherit from this and call {_registerInterface} to declare | |
* their support of an interface. | |
*/ | |
contract ERC165 is IERC165 { | |
/* | |
* bytes4(keccak256('supportsInterface(bytes4)')) == 0x01ffc9a7 | |
*/ | |
bytes4 private constant _INTERFACE_ID_ERC165 = 0x01ffc9a7; | |
/** | |
* @dev Mapping of interface ids to whether or not it's supported. | |
*/ | |
mapping(bytes4 => bool) private _supportedInterfaces; | |
constructor() internal { | |
// Derived contracts need only register support for their own interfaces, | |
// we register support for ERC165 itself here | |
_registerInterface(_INTERFACE_ID_ERC165); | |
} | |
/** | |
* @dev See {IERC165-supportsInterface}. | |
* | |
* Time complexity O(1), guaranteed to always use less than 30 000 gas. | |
*/ | |
function supportsInterface(bytes4 interfaceId) | |
public | |
override | |
view | |
returns (bool) | |
{ | |
return _supportedInterfaces[interfaceId]; | |
} | |
/** | |
* @dev Registers the contract as an implementer of the interface defined by | |
* `interfaceId`. Support of the actual ERC165 interface is automatic and | |
* registering its interface id is not required. | |
* | |
* See {IERC165-supportsInterface}. | |
* | |
* Requirements: | |
* | |
* - `interfaceId` cannot be the ERC165 invalid interface (`0xffffffff`). | |
*/ | |
function _registerInterface(bytes4 interfaceId) internal virtual { | |
require(interfaceId != 0xffffffff, "ERC165: invalid interface id"); | |
_supportedInterfaces[interfaceId] = true; | |
} | |
} | |
/** | |
* @dev Wrappers over Solidity's arithmetic operations with added overflow | |
* checks. | |
* | |
* Arithmetic operations in Solidity wrap on overflow. This can easily result | |
* in bugs, because programmers usually assume that an overflow raises an | |
* error, which is the standard behavior in high level programming languages. | |
* `SafeMath` restores this intuition by reverting the transaction when an | |
* operation overflows. | |
* | |
* Using this library instead of the unchecked operations eliminates an entire | |
* class of bugs, so it's recommended to use it always. | |
*/ | |
library SafeMath { | |
/** | |
* @dev Returns the addition of two unsigned integers, reverting on | |
* overflow. | |
* | |
* Counterpart to Solidity's `+` operator. | |
* | |
* Requirements: | |
* - Addition cannot overflow. | |
*/ | |
function add(uint256 a, uint256 b) internal pure returns (uint256) { | |
uint256 c = a + b; | |
require(c >= a, "SafeMath: addition overflow"); | |
return c; | |
} | |
/** | |
* @dev Returns the subtraction of two unsigned integers, reverting on | |
* overflow (when the result is negative). | |
* | |
* Counterpart to Solidity's `-` operator. | |
* | |
* Requirements: | |
* - Subtraction cannot overflow. | |
*/ | |
function sub(uint256 a, uint256 b) internal pure returns (uint256) { | |
return sub(a, b, "SafeMath: subtraction overflow"); | |
} | |
/** | |
* @dev Returns the subtraction of two unsigned integers, reverting with custom message on | |
* overflow (when the result is negative). | |
* | |
* Counterpart to Solidity's `-` operator. | |
* | |
* Requirements: | |
* - Subtraction cannot overflow. | |
*/ | |
function sub( | |
uint256 a, | |
uint256 b, | |
string memory errorMessage | |
) internal pure returns (uint256) { | |
require(b <= a, errorMessage); | |
uint256 c = a - b; | |
return c; | |
} | |
/** | |
* @dev Returns the multiplication of two unsigned integers, reverting on | |
* overflow. | |
* | |
* Counterpart to Solidity's `*` operator. | |
* | |
* Requirements: | |
* - Multiplication cannot overflow. | |
*/ | |
function mul(uint256 a, uint256 b) internal pure returns (uint256) { | |
// Gas optimization: this is cheaper than requiring 'a' not being zero, but the | |
// benefit is lost if 'b' is also tested. | |
// See: https://github.com/OpenZeppelin/openzeppelin-contracts/pull/522 | |
if (a == 0) { | |
return 0; | |
} | |
uint256 c = a * b; | |
require(c / a == b, "SafeMath: multiplication overflow"); | |
return c; | |
} | |
/** | |
* @dev Returns the integer division of two unsigned integers. Reverts on | |
* division by zero. The result is rounded towards zero. | |
* | |
* Counterpart to Solidity's `/` operator. Note: this function uses a | |
* `revert` opcode (which leaves remaining gas untouched) while Solidity | |
* uses an invalid opcode to revert (consuming all remaining gas). | |
* | |
* Requirements: | |
* - The divisor cannot be zero. | |
*/ | |
function div(uint256 a, uint256 b) internal pure returns (uint256) { | |
return div(a, b, "SafeMath: division by zero"); | |
} | |
/** | |
* @dev Returns the integer division of two unsigned integers. Reverts with custom message on | |
* division by zero. The result is rounded towards zero. | |
* | |
* Counterpart to Solidity's `/` operator. Note: this function uses a | |
* `revert` opcode (which leaves remaining gas untouched) while Solidity | |
* uses an invalid opcode to revert (consuming all remaining gas). | |
* | |
* Requirements: | |
* - The divisor cannot be zero. | |
*/ | |
function div( | |
uint256 a, | |
uint256 b, | |
string memory errorMessage | |
) internal pure returns (uint256) { | |
// Solidity only automatically asserts when dividing by 0 | |
require(b > 0, errorMessage); | |
uint256 c = a / b; | |
// assert(a == b * c + a % b); // There is no case in which this doesn't hold | |
return c; | |
} | |
/** | |
* @dev Returns the remainder of dividing two unsigned integers. (unsigned integer modulo), | |
* Reverts when dividing by zero. | |
* | |
* Counterpart to Solidity's `%` operator. This function uses a `revert` | |
* opcode (which leaves remaining gas untouched) while Solidity uses an | |
* invalid opcode to revert (consuming all remaining gas). | |
* | |
* Requirements: | |
* - The divisor cannot be zero. | |
*/ | |
function mod(uint256 a, uint256 b) internal pure returns (uint256) { | |
return mod(a, b, "SafeMath: modulo by zero"); | |
} | |
/** | |
* @dev Returns the remainder of dividing two unsigned integers. (unsigned integer modulo), | |
* Reverts with custom message when dividing by zero. | |
* | |
* Counterpart to Solidity's `%` operator. This function uses a `revert` | |
* opcode (which leaves remaining gas untouched) while Solidity uses an | |
* invalid opcode to revert (consuming all remaining gas). | |
* | |
* Requirements: | |
* - The divisor cannot be zero. | |
*/ | |
function mod( | |
uint256 a, | |
uint256 b, | |
string memory errorMessage | |
) internal pure returns (uint256) { | |
require(b != 0, errorMessage); | |
return a % b; | |
} | |
} | |
/** | |
* @dev Collection of functions related to the address type | |
*/ | |
library Address { | |
/** | |
* @dev Returns true if `account` is a contract. | |
* | |
* [IMPORTANT] | |
* ==== | |
* It is unsafe to assume that an address for which this function returns | |
* false is an externally-owned account (EOA) and not a contract. | |
* | |
* Among others, `isContract` will return false for the following | |
* types of addresses: | |
* | |
* - an externally-owned account | |
* - a contract in construction | |
* - an address where a contract will be created | |
* - an address where a contract lived, but was destroyed | |
* ==== | |
*/ | |
function isContract(address account) internal view returns (bool) { | |
// According to EIP-1052, 0x0 is the value returned for not-yet created accounts | |
// and 0xc5d2460186f7233c927e7db2dcc703c0e500b653ca82273b7bfad8045d85a470 is returned | |
// for accounts without code, i.e. `keccak256('')` | |
bytes32 codehash; | |
bytes32 accountHash | |
= 0xc5d2460186f7233c927e7db2dcc703c0e500b653ca82273b7bfad8045d85a470; | |
// solhint-disable-next-line no-inline-assembly | |
assembly { | |
codehash := extcodehash(account) | |
} | |
return (codehash != accountHash && codehash != 0x0); | |
} | |
/** | |
* @dev Replacement for Solidity's `transfer`: sends `amount` wei to | |
* `recipient`, forwarding all available gas and reverting on errors. | |
* | |
* https://eips.ethereum.org/EIPS/eip-1884[EIP1884] increases the gas cost | |
* of certain opcodes, possibly making contracts go over the 2300 gas limit | |
* imposed by `transfer`, making them unable to receive funds via | |
* `transfer`. {sendValue} removes this limitation. | |
* | |
* https://diligence.consensys.net/posts/2019/09/stop-using-soliditys-transfer-now/[Learn more]. | |
* | |
* IMPORTANT: because control is transferred to `recipient`, care must be | |
* taken to not create reentrancy vulnerabilities. Consider using | |
* {ReentrancyGuard} or the | |
* https://solidity.readthedocs.io/en/v0.5.11/security-considerations.html#use-the-checks-effects-interactions-pattern[checks-effects-interactions pattern]. | |
*/ | |
function sendValue(address payable recipient, uint256 amount) internal { | |
require( | |
address(this).balance >= amount, | |
"Address: insufficient balance" | |
); | |
// solhint-disable-next-line avoid-low-level-calls, avoid-call-value | |
(bool success, ) = recipient.call{value: amount}(""); | |
require( | |
success, | |
"Address: unable to send value, recipient may have reverted" | |
); | |
} | |
} | |
// File: @openzeppelin/contracts/utils/EnumerableSet.sol | |
// SPDX-License-Identifier: MIT | |
pragma solidity ^0.6.0; | |
/** | |
* @dev Library for managing | |
* https://en.wikipedia.org/wiki/Set_(abstract_data_type)[sets] of primitive | |
* types. | |
* | |
* Sets have the following properties: | |
* | |
* - Elements are added, removed, and checked for existence in constant time | |
* (O(1)). | |
* - Elements are enumerated in O(n). No guarantees are made on the ordering. | |
* | |
* ``` | |
* contract Example { | |
* // Add the library methods | |
* using EnumerableSet for EnumerableSet.AddressSet; | |
* | |
* // Declare a set state variable | |
* EnumerableSet.AddressSet private mySet; | |
* } | |
* ``` | |
* | |
* As of v3.0.0, only sets of type `address` (`AddressSet`) and `uint256` | |
* (`UintSet`) are supported. | |
*/ | |
library EnumerableSet { | |
// To implement this library for multiple types with as little code | |
// repetition as possible, we write it in terms of a generic Set type with | |
// bytes32 values. | |
// The Set implementation uses private functions, and user-facing | |
// implementations (such as AddressSet) are just wrappers around the | |
// underlying Set. | |
// This means that we can only create new EnumerableSets for types that fit | |
// in bytes32. | |
struct Set { | |
// Storage of set values | |
bytes32[] _values; | |
// Position of the value in the `values` array, plus 1 because index 0 | |
// means a value is not in the set. | |
mapping(bytes32 => uint256) _indexes; | |
} | |
/** | |
* @dev Add a value to a set. O(1). | |
* | |
* Returns true if the value was added to the set, that is if it was not | |
* already present. | |
*/ | |
function _add(Set storage set, bytes32 value) private returns (bool) { | |
if (!_contains(set, value)) { | |
set._values.push(value); | |
// The value is stored at length-1, but we add 1 to all indexes | |
// and use 0 as a sentinel value | |
set._indexes[value] = set._values.length; | |
return true; | |
} else { | |
return false; | |
} | |
} | |
/** | |
* @dev Removes a value from a set. O(1). | |
* | |
* Returns true if the value was removed from the set, that is if it was | |
* present. | |
*/ | |
function _remove(Set storage set, bytes32 value) private returns (bool) { | |
// We read and store the value's index to prevent multiple reads from the same storage slot | |
uint256 valueIndex = set._indexes[value]; | |
if (valueIndex != 0) { | |
// Equivalent to contains(set, value) | |
// To delete an element from the _values array in O(1), we swap the element to delete with the last one in | |
// the array, and then remove the last element (sometimes called as 'swap and pop'). | |
// This modifies the order of the array, as noted in {at}. | |
uint256 toDeleteIndex = valueIndex - 1; | |
uint256 lastIndex = set._values.length - 1; | |
// When the value to delete is the last one, the swap operation is unnecessary. However, since this occurs | |
// so rarely, we still do the swap anyway to avoid the gas cost of adding an 'if' statement. | |
bytes32 lastvalue = set._values[lastIndex]; | |
// Move the last value to the index where the value to delete is | |
set._values[toDeleteIndex] = lastvalue; | |
// Update the index for the moved value | |
set._indexes[lastvalue] = toDeleteIndex + 1; // All indexes are 1-based | |
// Delete the slot where the moved value was stored | |
set._values.pop(); | |
// Delete the index for the deleted slot | |
delete set._indexes[value]; | |
return true; | |
} else { | |
return false; | |
} | |
} | |
/** | |
* @dev Returns true if the value is in the set. O(1). | |
*/ | |
function _contains(Set storage set, bytes32 value) | |
private | |
view | |
returns (bool) | |
{ | |
return set._indexes[value] != 0; | |
} | |
/** | |
* @dev Returns the number of values on the set. O(1). | |
*/ | |
function _length(Set storage set) private view returns (uint256) { | |
return set._values.length; | |
} | |
/** | |
* @dev Returns the value stored at position `index` in the set. O(1). | |
* | |
* Note that there are no guarantees on the ordering of values inside the | |
* array, and it may change when more values are added or removed. | |
* | |
* Requirements: | |
* | |
* - `index` must be strictly less than {length}. | |
*/ | |
function _at(Set storage set, uint256 index) | |
private | |
view | |
returns (bytes32) | |
{ | |
require( | |
set._values.length > index, | |
"EnumerableSet: index out of bounds" | |
); | |
return set._values[index]; | |
} | |
// AddressSet | |
struct AddressSet { | |
Set _inner; | |
} | |
/** | |
* @dev Add a value to a set. O(1). | |
* | |
* Returns true if the value was added to the set, that is if it was not | |
* already present. | |
*/ | |
function add(AddressSet storage set, address value) | |
internal | |
returns (bool) | |
{ | |
return _add(set._inner, bytes32(uint256(value))); | |
} | |
/** | |
* @dev Removes a value from a set. O(1). | |
* | |
* Returns true if the value was removed from the set, that is if it was | |
* present. | |
*/ | |
function remove(AddressSet storage set, address value) | |
internal | |
returns (bool) | |
{ | |
return _remove(set._inner, bytes32(uint256(value))); | |
} | |
/** | |
* @dev Returns true if the value is in the set. O(1). | |
*/ | |
function contains(AddressSet storage set, address value) | |
internal | |
view | |
returns (bool) | |
{ | |
return _contains(set._inner, bytes32(uint256(value))); | |
} | |
/** | |
* @dev Returns the number of values in the set. O(1). | |
*/ | |
function length(AddressSet storage set) internal view returns (uint256) { | |
return _length(set._inner); | |
} | |
/** | |
* @dev Returns the value stored at position `index` in the set. O(1). | |
* | |
* Note that there are no guarantees on the ordering of values inside the | |
* array, and it may change when more values are added or removed. | |
* | |
* Requirements: | |
* | |
* - `index` must be strictly less than {length}. | |
*/ | |
function at(AddressSet storage set, uint256 index) | |
internal | |
view | |
returns (address) | |
{ | |
return address(uint256(_at(set._inner, index))); | |
} | |
// UintSet | |
struct UintSet { | |
Set _inner; | |
} | |
/** | |
* @dev Add a value to a set. O(1). | |
* | |
* Returns true if the value was added to the set, that is if it was not | |
* already present. | |
*/ | |
function add(UintSet storage set, uint256 value) internal returns (bool) { | |
return _add(set._inner, bytes32(value)); | |
} | |
/** | |
* @dev Removes a value from a set. O(1). | |
* | |
* Returns true if the value was removed from the set, that is if it was | |
* present. | |
*/ | |
function remove(UintSet storage set, uint256 value) | |
internal | |
returns (bool) | |
{ | |
return _remove(set._inner, bytes32(value)); | |
} | |
/** | |
* @dev Returns true if the value is in the set. O(1). | |
*/ | |
function contains(UintSet storage set, uint256 value) | |
internal | |
view | |
returns (bool) | |
{ | |
return _contains(set._inner, bytes32(value)); | |
} | |
/** | |
* @dev Returns the number of values on the set. O(1). | |
*/ | |
function length(UintSet storage set) internal view returns (uint256) { | |
return _length(set._inner); | |
} | |
/** | |
* @dev Returns the value stored at position `index` in the set. O(1). | |
* | |
* Note that there are no guarantees on the ordering of values inside the | |
* array, and it may change when more values are added or removed. | |
* | |
* Requirements: | |
* | |
* - `index` must be strictly less than {length}. | |
*/ | |
function at(UintSet storage set, uint256 index) | |
internal | |
view | |
returns (uint256) | |
{ | |
return uint256(_at(set._inner, index)); | |
} | |
} | |
/** | |
* @dev Library for managing an enumerable variant of Solidity's | |
* https://solidity.readthedocs.io/en/latest/types.html#mapping-types[`mapping`] | |
* type. | |
* | |
* Maps have the following properties: | |
* | |
* - Entries are added, removed, and checked for existence in constant time | |
* (O(1)). | |
* - Entries are enumerated in O(n). No guarantees are made on the ordering. | |
* | |
* ``` | |
* contract Example { | |
* // Add the library methods | |
* using EnumerableMap for EnumerableMap.UintToAddressMap; | |
* | |
* // Declare a set state variable | |
* EnumerableMap.UintToAddressMap private myMap; | |
* } | |
* ``` | |
* | |
* As of v3.0.0, only maps of type `uint256 -> address` (`UintToAddressMap`) are | |
* supported. | |
*/ | |
library EnumerableMap { | |
// To implement this library for multiple types with as little code | |
// repetition as possible, we write it in terms of a generic Map type with | |
// bytes32 keys and values. | |
// The Map implementation uses private functions, and user-facing | |
// implementations (such as Uint256ToAddressMap) are just wrappers around | |
// the underlying Map. | |
// This means that we can only create new EnumerableMaps for types that fit | |
// in bytes32. | |
struct MapEntry { | |
bytes32 _key; | |
bytes32 _value; | |
} | |
struct Map { | |
// Storage of map keys and values | |
MapEntry[] _entries; | |
// Position of the entry defined by a key in the `entries` array, plus 1 | |
// because index 0 means a key is not in the map. | |
mapping(bytes32 => uint256) _indexes; | |
} | |
/** | |
* @dev Adds a key-value pair to a map, or updates the value for an existing | |
* key. O(1). | |
* | |
* Returns true if the key was added to the map, that is if it was not | |
* already present. | |
*/ | |
function _set( | |
Map storage map, | |
bytes32 key, | |
bytes32 value | |
) private returns (bool) { | |
// We read and store the key's index to prevent multiple reads from the same storage slot | |
uint256 keyIndex = map._indexes[key]; | |
if (keyIndex == 0) { | |
// Equivalent to !contains(map, key) | |
map._entries.push(MapEntry({_key: key, _value: value})); | |
// The entry is stored at length-1, but we add 1 to all indexes | |
// and use 0 as a sentinel value | |
map._indexes[key] = map._entries.length; | |
return true; | |
} else { | |
map._entries[keyIndex - 1]._value = value; | |
return false; | |
} | |
} | |
/** | |
* @dev Removes a key-value pair from a map. O(1). | |
* | |
* Returns true if the key was removed from the map, that is if it was present. | |
*/ | |
function _remove(Map storage map, bytes32 key) private returns (bool) { | |
// We read and store the key's index to prevent multiple reads from the same storage slot | |
uint256 keyIndex = map._indexes[key]; | |
if (keyIndex != 0) { | |
// Equivalent to contains(map, key) | |
// To delete a key-value pair from the _entries array in O(1), we swap the entry to delete with the last one | |
// in the array, and then remove the last entry (sometimes called as 'swap and pop'). | |
// This modifies the order of the array, as noted in {at}. | |
uint256 toDeleteIndex = keyIndex - 1; | |
uint256 lastIndex = map._entries.length - 1; | |
// When the entry to delete is the last one, the swap operation is unnecessary. However, since this occurs | |
// so rarely, we still do the swap anyway to avoid the gas cost of adding an 'if' statement. | |
MapEntry storage lastEntry = map._entries[lastIndex]; | |
// Move the last entry to the index where the entry to delete is | |
map._entries[toDeleteIndex] = lastEntry; | |
// Update the index for the moved entry | |
map._indexes[lastEntry._key] = toDeleteIndex + 1; // All indexes are 1-based | |
// Delete the slot where the moved entry was stored | |
map._entries.pop(); | |
// Delete the index for the deleted slot | |
delete map._indexes[key]; | |
return true; | |
} else { | |
return false; | |
} | |
} | |
/** | |
* @dev Returns true if the key is in the map. O(1). | |
*/ | |
function _contains(Map storage map, bytes32 key) | |
private | |
view | |
returns (bool) | |
{ | |
return map._indexes[key] != 0; | |
} | |
/** | |
* @dev Returns the number of key-value pairs in the map. O(1). | |
*/ | |
function _length(Map storage map) private view returns (uint256) { | |
return map._entries.length; | |
} | |
/** | |
* @dev Returns the key-value pair stored at position `index` in the map. O(1). | |
* | |
* Note that there are no guarantees on the ordering of entries inside the | |
* array, and it may change when more entries are added or removed. | |
* | |
* Requirements: | |
* | |
* - `index` must be strictly less than {length}. | |
*/ | |
function _at(Map storage map, uint256 index) | |
private | |
view | |
returns (bytes32, bytes32) | |
{ | |
require( | |
map._entries.length > index, | |
"EnumerableMap: index out of bounds" | |
); | |
MapEntry storage entry = map._entries[index]; | |
return (entry._key, entry._value); | |
} | |
/** | |
* @dev Returns the value associated with `key`. O(1). | |
* | |
* Requirements: | |
* | |
* - `key` must be in the map. | |
*/ | |
function _get(Map storage map, bytes32 key) private view returns (bytes32) { | |
return _get(map, key, "EnumerableMap: nonexistent key"); | |
} | |
/** | |
* @dev Same as {_get}, with a custom error message when `key` is not in the map. | |
*/ | |
function _get( | |
Map storage map, | |
bytes32 key, | |
string memory errorMessage | |
) private view returns (bytes32) { | |
uint256 keyIndex = map._indexes[key]; | |
require(keyIndex != 0, errorMessage); // Equivalent to contains(map, key) | |
return map._entries[keyIndex - 1]._value; // All indexes are 1-based | |
} | |
// UintToAddressMap | |
struct UintToAddressMap { | |
Map _inner; | |
} | |
/** | |
* @dev Adds a key-value pair to a map, or updates the value for an existing | |
* key. O(1). | |
* | |
* Returns true if the key was added to the map, that is if it was not | |
* already present. | |
*/ | |
function set( | |
UintToAddressMap storage map, | |
uint256 key, | |
address value | |
) internal returns (bool) { | |
return _set(map._inner, bytes32(key), bytes32(uint256(value))); | |
} | |
/** | |
* @dev Removes a value from a set. O(1). | |
* | |
* Returns true if the key was removed from the map, that is if it was present. | |
*/ | |
function remove(UintToAddressMap storage map, uint256 key) | |
internal | |
returns (bool) | |
{ | |
return _remove(map._inner, bytes32(key)); | |
} | |
/** | |
* @dev Returns true if the key is in the map. O(1). | |
*/ | |
function contains(UintToAddressMap storage map, uint256 key) | |
internal | |
view | |
returns (bool) | |
{ | |
return _contains(map._inner, bytes32(key)); | |
} | |
/** | |
* @dev Returns the number of elements in the map. O(1). | |
*/ | |
function length(UintToAddressMap storage map) | |
internal | |
view | |
returns (uint256) | |
{ | |
return _length(map._inner); | |
} | |
/** | |
* @dev Returns the element stored at position `index` in the set. O(1). | |
* Note that there are no guarantees on the ordering of values inside the | |
* array, and it may change when more values are added or removed. | |
* | |
* Requirements: | |
* | |
* - `index` must be strictly less than {length}. | |
*/ | |
function at(UintToAddressMap storage map, uint256 index) | |
internal | |
view | |
returns (uint256, address) | |
{ | |
(bytes32 key, bytes32 value) = _at(map._inner, index); | |
return (uint256(key), address(uint256(value))); | |
} | |
/** | |
* @dev Returns the value associated with `key`. O(1). | |
* | |
* Requirements: | |
* | |
* - `key` must be in the map. | |
*/ | |
function get(UintToAddressMap storage map, uint256 key) | |
internal | |
view | |
returns (address) | |
{ | |
return address(uint256(_get(map._inner, bytes32(key)))); | |
} | |
/** | |
* @dev Same as {get}, with a custom error message when `key` is not in the map. | |
*/ | |
function get( | |
UintToAddressMap storage map, | |
uint256 key, | |
string memory errorMessage | |
) internal view returns (address) { | |
return address(uint256(_get(map._inner, bytes32(key), errorMessage))); | |
} | |
} | |
/** | |
* @dev String operations. | |
*/ | |
library Strings { | |
/** | |
* @dev Converts a `uint256` to its ASCII `string` representation. | |
*/ | |
function toString(uint256 value) internal pure returns (string memory) { | |
// Inspired by OraclizeAPI's implementation - MIT licence | |
// https://github.com/oraclize/ethereum-api/blob/b42146b063c7d6ee1358846c198246239e9360e8/oraclizeAPI_0.4.25.sol | |
if (value == 0) { | |
return "0"; | |
} | |
uint256 temp = value; | |
uint256 digits; | |
while (temp != 0) { | |
digits++; | |
temp /= 10; | |
} | |
bytes memory buffer = new bytes(digits); | |
uint256 index = digits - 1; | |
temp = value; | |
while (temp != 0) { | |
buffer[index--] = bytes1(uint8(48 + (temp % 10))); | |
temp /= 10; | |
} | |
return string(buffer); | |
} | |
} | |
/** | |
* @title ERC721 Non-Fungible Token Standard basic implementation | |
* @dev see https://eips.ethereum.org/EIPS/eip-721 | |
*/ | |
contract ERC721 is | |
Context, | |
ERC165, | |
IERC721, | |
IERC721Metadata, | |
IERC721Enumerable | |
{ | |
using SafeMath for uint256; | |
using Address for address; | |
using EnumerableSet for EnumerableSet.UintSet; | |
using EnumerableMap for EnumerableMap.UintToAddressMap; | |
using Strings for uint256; | |
// Equals to `bytes4(keccak256("onERC721Received(address,address,uint256,bytes)"))` | |
// which can be also obtained as `IERC721Receiver(0).onERC721Received.selector` | |
bytes4 private constant _ERC721_RECEIVED = 0x150b7a02; | |
// Mapping from holder address to their (enumerable) set of owned tokens | |
mapping(address => EnumerableSet.UintSet) private _holderTokens; | |
// Enumerable mapping from token ids to their owners | |
EnumerableMap.UintToAddressMap private _tokenOwners; | |
// Mapping from token ID to approved address | |
mapping(uint256 => address) private _tokenApprovals; | |
// Mapping from owner to operator approvals | |
mapping(address => mapping(address => bool)) private _operatorApprovals; | |
// Token name | |
string private _name; | |
// Token symbol | |
string private _symbol; | |
// Optional mapping for token URIs | |
mapping(uint256 => string) private _tokenURIs; | |
// Base URI | |
string private _baseURI; | |
/* | |
* bytes4(keccak256('balanceOf(address)')) == 0x70a08231 | |
* bytes4(keccak256('ownerOf(uint256)')) == 0x6352211e | |
* bytes4(keccak256('approve(address,uint256)')) == 0x095ea7b3 | |
* bytes4(keccak256('getApproved(uint256)')) == 0x081812fc | |
* bytes4(keccak256('setApprovalForAll(address,bool)')) == 0xa22cb465 | |
* bytes4(keccak256('isApprovedForAll(address,address)')) == 0xe985e9c5 | |
* bytes4(keccak256('transferFrom(address,address,uint256)')) == 0x23b872dd | |
* bytes4(keccak256('safeTransferFrom(address,address,uint256)')) == 0x42842e0e | |
* bytes4(keccak256('safeTransferFrom(address,address,uint256,bytes)')) == 0xb88d4fde | |
* | |
* => 0x70a08231 ^ 0x6352211e ^ 0x095ea7b3 ^ 0x081812fc ^ | |
* 0xa22cb465 ^ 0xe985e9c ^ 0x23b872dd ^ 0x42842e0e ^ 0xb88d4fde == 0x80ac58cd | |
*/ | |
bytes4 private constant _INTERFACE_ID_ERC721 = 0x80ac58cd; | |
/* | |
* bytes4(keccak256('name()')) == 0x06fdde03 | |
* bytes4(keccak256('symbol()')) == 0x95d89b41 | |
* bytes4(keccak256('tokenURI(uint256)')) == 0xc87b56dd | |
* | |
* => 0x06fdde03 ^ 0x95d89b41 ^ 0xc87b56dd == 0x5b5e139f | |
*/ | |
bytes4 private constant _INTERFACE_ID_ERC721_METADATA = 0x5b5e139f; | |
/* | |
* bytes4(keccak256('totalSupply()')) == 0x18160ddd | |
* bytes4(keccak256('tokenOfOwnerByIndex(address,uint256)')) == 0x2f745c59 | |
* bytes4(keccak256('tokenByIndex(uint256)')) == 0x4f6ccce7 | |
* | |
* => 0x18160ddd ^ 0x2f745c59 ^ 0x4f6ccce7 == 0x780e9d63 | |
*/ | |
bytes4 private constant _INTERFACE_ID_ERC721_ENUMERABLE = 0x780e9d63; | |
constructor(string memory name, string memory symbol) public { | |
_name = name; | |
_symbol = symbol; | |
// register the supported interfaces to conform to ERC721 via ERC165 | |
_registerInterface(_INTERFACE_ID_ERC721); | |
_registerInterface(_INTERFACE_ID_ERC721_METADATA); | |
_registerInterface(_INTERFACE_ID_ERC721_ENUMERABLE); | |
} | |
/** | |
* @dev Gets the balance of the specified address. | |
* @param owner address to query the balance of | |
* @return uint256 representing the amount owned by the passed address | |
*/ | |
function balanceOf(address owner) public override view returns (uint256) { | |
require( | |
owner != address(0), | |
"ERC721: balance query for the zero address" | |
); | |
return _holderTokens[owner].length(); | |
} | |
/** | |
* @dev Gets the owner of the specified token ID. | |
* @param tokenId uint256 ID of the token to query the owner of | |
* @return address currently marked as the owner of the given token ID | |
*/ | |
function ownerOf(uint256 tokenId) public override view returns (address) { | |
return | |
_tokenOwners.get( | |
tokenId, | |
"ERC721: owner query for nonexistent token" | |
); | |
} | |
/** | |
* @dev Gets the token name. | |
* @return string representing the token name | |
*/ | |
function name() public override view returns (string memory) { | |
return _name; | |
} | |
/** | |
* @dev Gets the token symbol. | |
* @return string representing the token symbol | |
*/ | |
function symbol() public override view returns (string memory) { | |
return _symbol; | |
} | |
/** | |
* @dev Returns the URI for a given token ID. May return an empty string. | |
* | |
* If a base URI is set (via {_setBaseURI}), it is added as a prefix to the | |
* token's own URI (via {_setTokenURI}). | |
* | |
* If there is a base URI but no token URI, the token's ID will be used as | |
* its URI when appending it to the base URI. This pattern for autogenerated | |
* token URIs can lead to large gas savings. | |
* | |
* .Examples | |
* |=== | |
* |`_setBaseURI()` |`_setTokenURI()` |`tokenURI()` | |
* | "" | |
* | "" | |
* | "" | |
* | "" | |
* | "token.uri/123" | |
* | "token.uri/123" | |
* | "token.uri/" | |
* | "123" | |
* | "token.uri/123" | |
* | "token.uri/" | |
* | "" | |
* | "token.uri/<tokenId>" | |
* |=== | |
* | |
* Requirements: | |
* | |
* - `tokenId` must exist. | |
*/ | |
function tokenURI(uint256 tokenId) | |
public | |
override | |
view | |
returns (string memory) | |
{ | |
require( | |
_exists(tokenId), | |
"ERC721Metadata: URI query for nonexistent token" | |
); | |
string memory _tokenURI = _tokenURIs[tokenId]; | |
// If there is no base URI, return the token URI. | |
if (bytes(_baseURI).length == 0) { | |
return _tokenURI; | |
} | |
// If both are set, concatenate the baseURI and tokenURI (via abi.encodePacked). | |
if (bytes(_tokenURI).length > 0) { | |
return string(abi.encodePacked(_baseURI, _tokenURI)); | |
} | |
// If there is a baseURI but no tokenURI, concatenate the tokenID to the baseURI. | |
return string(abi.encodePacked(_baseURI, tokenId.toString())); | |
} | |
/** | |
* @dev Returns the base URI set via {_setBaseURI}. This will be | |
* automatically added as a prefix in {tokenURI} to each token's URI, or | |
* to the token ID if no specific URI is set for that token ID. | |
*/ | |
function baseURI() public view returns (string memory) { | |
return _baseURI; | |
} | |
/** | |
* @dev Gets the token ID at a given index of the tokens list of the requested owner. | |
* @param owner address owning the tokens list to be accessed | |
* @param index uint256 representing the index to be accessed of the requested tokens list | |
* @return uint256 token ID at the given index of the tokens list owned by the requested address | |
*/ | |
function tokenOfOwnerByIndex(address owner, uint256 index) | |
public | |
override | |
view | |
returns (uint256) | |
{ | |
return _holderTokens[owner].at(index); | |
} | |
/** | |
* @dev Gets the total amount of tokens stored by the contract. | |
* @return uint256 representing the total amount of tokens | |
*/ | |
function totalSupply() public override view returns (uint256) { | |
// _tokenOwners are indexed by tokenIds, so .length() returns the number of tokenIds | |
return _tokenOwners.length(); | |
} | |
/** | |
* @dev Gets the token ID at a given index of all the tokens in this contract | |
* Reverts if the index is greater or equal to the total number of tokens. | |
* @param index uint256 representing the index to be accessed of the tokens list | |
* @return uint256 token ID at the given index of the tokens list | |
*/ | |
function tokenByIndex(uint256 index) | |
public | |
override | |
view | |
returns (uint256) | |
{ | |
(uint256 tokenId, ) = _tokenOwners.at(index); | |
return tokenId; | |
} | |
/** | |
* @dev Approves another address to transfer the given token ID | |
* The zero address indicates there is no approved address. | |
* There can only be one approved address per token at a given time. | |
* Can only be called by the token owner or an approved operator. | |
* @param to address to be approved for the given token ID | |
* @param tokenId uint256 ID of the token to be approved | |
*/ | |
function approve(address to, uint256 tokenId) public virtual override { | |
address owner = ownerOf(tokenId); | |
require(to != owner, "ERC721: approval to current owner"); | |
require( | |
_msgSender() == owner || isApprovedForAll(owner, _msgSender()), | |
"ERC721: approve caller is not owner nor approved for all" | |
); | |
_approve(to, tokenId); | |
} | |
/** | |
* @dev Gets the approved address for a token ID, or zero if no address set | |
* Reverts if the token ID does not exist. | |
* @param tokenId uint256 ID of the token to query the approval of | |
* @return address currently approved for the given token ID | |
*/ | |
function getApproved(uint256 tokenId) | |
public | |
override | |
view | |
returns (address) | |
{ | |
require( | |
_exists(tokenId), | |
"ERC721: approved query for nonexistent token" | |
); | |
return _tokenApprovals[tokenId]; | |
} | |
/** | |
* @dev Sets or unsets the approval of a given operator | |
* An operator is allowed to transfer all tokens of the sender on their behalf. | |
* @param operator operator address to set the approval | |
* @param approved representing the status of the approval to be set | |
*/ | |
function setApprovalForAll(address operator, bool approved) | |
public | |
virtual | |
override | |
{ | |
require(operator != _msgSender(), "ERC721: approve to caller"); | |
_operatorApprovals[_msgSender()][operator] = approved; | |
emit ApprovalForAll(_msgSender(), operator, approved); | |
} | |
/** | |
* @dev Tells whether an operator is approved by a given owner. | |
* @param owner owner address which you want to query the approval of | |
* @param operator operator address which you want to query the approval of | |
* @return bool whether the given operator is approved by the given owner | |
*/ | |
function isApprovedForAll(address owner, address operator) | |
public | |
override | |
view | |
returns (bool) | |
{ | |
return _operatorApprovals[owner][operator]; | |
} | |
/** | |
* @dev Transfers the ownership of a given token ID to another address. | |
* Usage of this method is discouraged, use {safeTransferFrom} whenever possible. | |
* Requires the msg.sender to be the owner, approved, or operator. | |
* @param from current owner of the token | |
* @param to address to receive the ownership of the given token ID | |
* @param tokenId uint256 ID of the token to be transferred | |
*/ | |
function transferFrom( | |
address from, | |
address to, | |
uint256 tokenId | |
) public virtual override { | |
//solhint-disable-next-line max-line-length | |
require( | |
_isApprovedOrOwner(_msgSender(), tokenId), | |
"ERC721: transfer caller is not owner nor approved" | |
); | |
_transfer(from, to, tokenId); | |
} | |
/** | |
* @dev Safely transfers the ownership of a given token ID to another address | |
* If the target address is a contract, it must implement {IERC721Receiver-onERC721Received}, | |
* which is called upon a safe transfer, and return the magic value | |
* `bytes4(keccak256("onERC721Received(address,address,uint256,bytes)"))`; otherwise, | |
* the transfer is reverted. | |
* Requires the msg.sender to be the owner, approved, or operator | |
* @param from current owner of the token | |
* @param to address to receive the ownership of the given token ID | |
* @param tokenId uint256 ID of the token to be transferred | |
*/ | |
function safeTransferFrom( | |
address from, | |
address to, | |
uint256 tokenId | |
) public virtual override { | |
safeTransferFrom(from, to, tokenId, ""); | |
} | |
/** | |
* @dev Safely transfers the ownership of a given token ID to another address | |
* If the target address is a contract, it must implement {IERC721Receiver-onERC721Received}, | |
* which is called upon a safe transfer, and return the magic value | |
* `bytes4(keccak256("onERC721Received(address,address,uint256,bytes)"))`; otherwise, | |
* the transfer is reverted. | |
* Requires the _msgSender() to be the owner, approved, or operator | |
* @param from current owner of the token | |
* @param to address to receive the ownership of the given token ID | |
* @param tokenId uint256 ID of the token to be transferred | |
* @param _data bytes data to send along with a safe transfer check | |
*/ | |
function safeTransferFrom( | |
address from, | |
address to, | |
uint256 tokenId, | |
bytes memory _data | |
) public virtual override { | |
require( | |
_isApprovedOrOwner(_msgSender(), tokenId), | |
"ERC721: transfer caller is not owner nor approved" | |
); | |
_safeTransfer(from, to, tokenId, _data); | |
} | |
/** | |
* @dev Safely transfers the ownership of a given token ID to another address | |
* If the target address is a contract, it must implement `onERC721Received`, | |
* which is called upon a safe transfer, and return the magic value | |
* `bytes4(keccak256("onERC721Received(address,address,uint256,bytes)"))`; otherwise, | |
* the transfer is reverted. | |
* Requires the msg.sender to be the owner, approved, or operator | |
* @param from current owner of the token | |
* @param to address to receive the ownership of the given token ID | |
* @param tokenId uint256 ID of the token to be transferred | |
* @param _data bytes data to send along with a safe transfer check | |
*/ | |
function _safeTransfer( | |
address from, | |
address to, | |
uint256 tokenId, | |
bytes memory _data | |
) internal virtual { | |
_transfer(from, to, tokenId); | |
require( | |
_checkOnERC721Received(from, to, tokenId, _data), | |
"ERC721: transfer to non ERC721Receiver implementer" | |
); | |
} | |
/** | |
* @dev Returns whether the specified token exists. | |
* @param tokenId uint256 ID of the token to query the existence of | |
* @return bool whether the token exists | |
*/ | |
function _exists(uint256 tokenId) internal view returns (bool) { | |
return _tokenOwners.contains(tokenId); | |
} | |
/** | |
* @dev Returns whether the given spender can transfer a given token ID. | |
* @param spender address of the spender to query | |
* @param tokenId uint256 ID of the token to be transferred | |
* @return bool whether the msg.sender is approved for the given token ID, | |
* is an operator of the owner, or is the owner of the token | |
*/ | |
function _isApprovedOrOwner(address spender, uint256 tokenId) | |
internal | |
view | |
returns (bool) | |
{ | |
require( | |
_exists(tokenId), | |
"ERC721: operator query for nonexistent token" | |
); | |
address owner = ownerOf(tokenId); | |
return (spender == owner || | |
getApproved(tokenId) == spender || | |
isApprovedForAll(owner, spender)); | |
} | |
/** | |
* @dev Internal function to safely mint a new token. | |
* Reverts if the given token ID already exists. | |
* If the target address is a contract, it must implement `onERC721Received`, | |
* which is called upon a safe transfer, and return the magic value | |
* `bytes4(keccak256("onERC721Received(address,address,uint256,bytes)"))`; otherwise, | |
* the transfer is reverted. | |
* @param to The address that will own the minted token | |
* @param tokenId uint256 ID of the token to be minted | |
*/ | |
function _safeMint(address to, uint256 tokenId) internal virtual { | |
_safeMint(to, tokenId, ""); | |
} | |
/** | |
* @dev Internal function to safely mint a new token. | |
* Reverts if the given token ID already exists. | |
* If the target address is a contract, it must implement `onERC721Received`, | |
* which is called upon a safe transfer, and return the magic value | |
* `bytes4(keccak256("onERC721Received(address,address,uint256,bytes)"))`; otherwise, | |
* the transfer is reverted. | |
* @param to The address that will own the minted token | |
* @param tokenId uint256 ID of the token to be minted | |
* @param _data bytes data to send along with a safe transfer check | |
*/ | |
function _safeMint( | |
address to, | |
uint256 tokenId, | |
bytes memory _data | |
) internal virtual { | |
_mint(to, tokenId); | |
require( | |
_checkOnERC721Received(address(0), to, tokenId, _data), | |
"ERC721: transfer to non ERC721Receiver implementer" | |
); | |
} | |
/** | |
* @dev Internal function to mint a new token. | |
* Reverts if the given token ID already exists. | |
* @param to The address that will own the minted token | |
* @param tokenId uint256 ID of the token to be minted | |
*/ | |
function _mint(address to, uint256 tokenId) internal virtual { | |
require(to != address(0), "ERC721: mint to the zero address"); | |
require(!_exists(tokenId), "ERC721: token already minted"); | |
_beforeTokenTransfer(address(0), to, tokenId); | |
_holderTokens[to].add(tokenId); | |
_tokenOwners.set(tokenId, to); | |
emit Transfer(address(0), to, tokenId); | |
} | |
/** | |
* @dev Internal function to burn a specific token. | |
* Reverts if the token does not exist. | |
* @param tokenId uint256 ID of the token being burned | |
*/ | |
function _burn(uint256 tokenId) internal virtual { | |
address owner = ownerOf(tokenId); | |
_beforeTokenTransfer(owner, address(0), tokenId); | |
// Clear approvals | |
_approve(address(0), tokenId); | |
// Clear metadata (if any) | |
if (bytes(_tokenURIs[tokenId]).length != 0) { | |
delete _tokenURIs[tokenId]; | |
} | |
_holderTokens[owner].remove(tokenId); | |
_tokenOwners.remove(tokenId); | |
emit Transfer(owner, address(0), tokenId); | |
} | |
/** | |
* @dev Internal function to transfer ownership of a given token ID to another address. | |
* As opposed to {transferFrom}, this imposes no restrictions on msg.sender. | |
* @param from current owner of the token | |
* @param to address to receive the ownership of the given token ID | |
* @param tokenId uint256 ID of the token to be transferred | |
*/ | |
function _transfer( | |
address from, | |
address to, | |
uint256 tokenId | |
) internal virtual { | |
require( | |
ownerOf(tokenId) == from, | |
"ERC721: transfer of token that is not own" | |
); | |
require(to != address(0), "ERC721: transfer to the zero address"); | |
_beforeTokenTransfer(from, to, tokenId); | |
// Clear approvals from the previous owner | |
_approve(address(0), tokenId); | |
_holderTokens[from].remove(tokenId); | |
_holderTokens[to].add(tokenId); | |
_tokenOwners.set(tokenId, to); | |
emit Transfer(from, to, tokenId); | |
} | |
/** | |
* @dev Internal function to set the token URI for a given token. | |
* | |
* Reverts if the token ID does not exist. | |
* | |
* TIP: If all token IDs share a prefix (for example, if your URIs look like | |
* `https://api.myproject.com/token/<id>`), use {_setBaseURI} to store | |
* it and save gas. | |
*/ | |
function _setTokenURI(uint256 tokenId, string memory _tokenURI) | |
internal | |
virtual | |
{ | |
require( | |
_exists(tokenId), | |
"ERC721Metadata: URI set of nonexistent token" | |
); | |
_tokenURIs[tokenId] = _tokenURI; | |
} | |
/** | |
* @dev Internal function to set the base URI for all token IDs. It is | |
* automatically added as a prefix to the value returned in {tokenURI}, | |
* or to the token ID if {tokenURI} is empty. | |
*/ | |
function _setBaseURI(string memory baseURI_) internal virtual { | |
_baseURI = baseURI_; | |
} | |
/** | |
* @dev Internal function to invoke {IERC721Receiver-onERC721Received} on a target address. | |
* The call is not executed if the target address is not a contract. | |
* | |
* @param from address representing the previous owner of the given token ID | |
* @param to target address that will receive the tokens | |
* @param tokenId uint256 ID of the token to be transferred | |
* @param _data bytes optional data to send along with the call | |
* @return bool whether the call correctly returned the expected magic value | |
*/ | |
function _checkOnERC721Received( | |
address from, | |
address to, | |
uint256 tokenId, | |
bytes memory _data | |
) private returns (bool) { | |
if (!to.isContract()) { | |
return true; | |
} | |
// solhint-disable-next-line avoid-low-level-calls | |
(bool success, bytes memory returndata) = to.call( | |
abi.encodeWithSelector( | |
IERC721Receiver(to).onERC721Received.selector, | |
_msgSender(), | |
from, | |
tokenId, | |
_data | |
) | |
); | |
if (!success) { | |
if (returndata.length > 0) { | |
// solhint-disable-next-line no-inline-assembly | |
assembly { | |
let returndata_size := mload(returndata) | |
revert(add(32, returndata), returndata_size) | |
} | |
} else { | |
revert("ERC721: transfer to non ERC721Receiver implementer"); | |
} | |
} else { | |
bytes4 retval = abi.decode(returndata, (bytes4)); | |
return (retval == _ERC721_RECEIVED); | |
} | |
} | |
function _approve(address to, uint256 tokenId) private { | |
_tokenApprovals[tokenId] = to; | |
emit Approval(ownerOf(tokenId), to, tokenId); | |
} | |
/** | |
* @dev Hook that is called before any token transfer. This includes minting | |
* and burning. | |
* | |
* Calling conditions: | |
* | |
* - when `from` and `to` are both non-zero, ``from``'s `tokenId` will be | |
* transferred to `to`. | |
* - when `from` is zero, `tokenId` will be minted for `to`. | |
* - when `to` is zero, ``from``'s `tokenId` will be burned. | |
* - `from` and `to` are never both zero. | |
* | |
* To learn more about hooks, head to xref:ROOT:extending-contracts.adoc#using-hooks[Using Hooks]. | |
*/ | |
function _beforeTokenTransfer( | |
address from, | |
address to, | |
uint256 tokenId | |
) internal virtual {} | |
} | |
contract MyNFT is ERC721 { | |
constructor() public ERC721("MyNFT", "MNFT") {} | |
function mint(uint256 tokenId) public { | |
_mint(msg.sender, tokenId); | |
} | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pragma solidity 0.5.14; | |
pragma experimental ABIEncoderV2; | |
interface IBridge { | |
/// Helper struct to help the function caller to decode oracle data. | |
struct VerifyOracleDataResult { | |
bytes data; | |
bytes32 codeHash; | |
bytes params; | |
} | |
/// Performs oracle state relay and oracle data verification in one go. The caller submits | |
/// the encoded proof and receives back the decoded data, ready to be validated and used. | |
/// @param _data The encoded data for oracle state relay and data verification. | |
function relayAndVerify(bytes calldata _data) | |
external | |
returns (VerifyOracleDataResult memory result); | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pragma solidity 0.5.14; | |
pragma experimental ABIEncoderV2; | |
import "BandChainLib.sol"; | |
import "IBridge.sol"; | |
contract RandomNumber { | |
using BandChainLib for bytes; | |
bytes32 public codeHash; | |
bytes public params; | |
IBridge public bridge; | |
uint256 public randomNumber; | |
uint256 public lastUpdate; | |
constructor(bytes32 _codeHash, bytes memory _params, IBridge _bridge) | |
public | |
{ | |
codeHash = _codeHash; | |
params = _params; | |
bridge = _bridge; | |
} | |
function update(bytes memory _reportPrice) public { | |
IBridge.VerifyOracleDataResult memory result = bridge.relayAndVerify( | |
_reportPrice | |
); | |
uint64[] memory decodedInfo = result.data.toUint64List(); | |
require(result.codeHash == codeHash, "INVALID_CODEHASH"); | |
require( | |
keccak256(result.params) == keccak256(params), | |
"INVALID_PARAMS" | |
); | |
require( | |
uint256(decodedInfo[1]) > lastUpdate, | |
"TIMESTAMP_MUST_BE_OLDER_THAN_THE_LAST_UPDATE" | |
); | |
randomNumber = uint256(decodedInfo[0]); | |
lastUpdate = uint256(decodedInfo[1]); | |
} | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pragma solidity 0.5.14; | |
contract Test { | |
event Add(uint a); | |
uint a; | |
function add() public { | |
a = a + 1; | |
emit Add(a); | |
} | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pragma solidity ^0.5.9; | |
contract UniswapExchangeInterface { | |
// Address of ERC20 token sold on this exchange | |
function tokenAddress() external view returns (address token); | |
// Address of Uniswap Factory | |
function factoryAddress() external view returns (address factory); | |
// Provide Liquidity | |
function addLiquidity(uint256 min_liquidity, uint256 max_tokens, uint256 deadline) external payable returns (uint256); | |
function removeLiquidity(uint256 amount, uint256 min_eth, uint256 min_tokens, uint256 deadline) external returns (uint256, uint256); | |
// Get Prices | |
function getEthToTokenInputPrice(uint256 eth_sold) external view returns (uint256 tokens_bought); | |
function getEthToTokenOutputPrice(uint256 tokens_bought) external view returns (uint256 eth_sold); | |
function getTokenToEthInputPrice(uint256 tokens_sold) external view returns (uint256 eth_bought); | |
function getTokenToEthOutputPrice(uint256 eth_bought) external view returns (uint256 tokens_sold); | |
// Trade ETH to ERC20 | |
function ethToTokenSwapInput(uint256 min_tokens, uint256 deadline) external payable returns (uint256 tokens_bought); | |
function ethToTokenTransferInput(uint256 min_tokens, uint256 deadline, address recipient) external payable returns (uint256 tokens_bought); | |
function ethToTokenSwapOutput(uint256 tokens_bought, uint256 deadline) external payable returns (uint256 eth_sold); | |
function ethToTokenTransferOutput(uint256 tokens_bought, uint256 deadline, address recipient) external payable returns (uint256 eth_sold); | |
// Trade ERC20 to ETH | |
function tokenToEthSwapInput(uint256 tokens_sold, uint256 min_eth, uint256 deadline) external returns (uint256 eth_bought); | |
function tokenToEthTransferInput(uint256 tokens_sold, uint256 min_eth, uint256 deadline, address recipient) external returns (uint256 eth_bought); | |
function tokenToEthSwapOutput(uint256 eth_bought, uint256 max_tokens, uint256 deadline) external returns (uint256 tokens_sold); | |
function tokenToEthTransferOutput(uint256 eth_bought, uint256 max_tokens, uint256 deadline, address recipient) external returns (uint256 tokens_sold); | |
// Trade ERC20 to ERC20 | |
function tokenToTokenSwapInput(uint256 tokens_sold, uint256 min_tokens_bought, uint256 min_eth_bought, uint256 deadline, address token_addr) external returns (uint256 tokens_bought); | |
function tokenToTokenTransferInput(uint256 tokens_sold, uint256 min_tokens_bought, uint256 min_eth_bought, uint256 deadline, address recipient, address token_addr) external returns (uint256 tokens_bought); | |
function tokenToTokenSwapOutput(uint256 tokens_bought, uint256 max_tokens_sold, uint256 max_eth_sold, uint256 deadline, address token_addr) external returns (uint256 tokens_sold); | |
function tokenToTokenTransferOutput(uint256 tokens_bought, uint256 max_tokens_sold, uint256 max_eth_sold, uint256 deadline, address recipient, address token_addr) external returns (uint256 tokens_sold); | |
// Trade ERC20 to Custom Pool | |
function tokenToExchangeSwapInput(uint256 tokens_sold, uint256 min_tokens_bought, uint256 min_eth_bought, uint256 deadline, address exchange_addr) external returns (uint256 tokens_bought); | |
function tokenToExchangeTransferInput(uint256 tokens_sold, uint256 min_tokens_bought, uint256 min_eth_bought, uint256 deadline, address recipient, address exchange_addr) external returns (uint256 tokens_bought); | |
function tokenToExchangeSwapOutput(uint256 tokens_bought, uint256 max_tokens_sold, uint256 max_eth_sold, uint256 deadline, address exchange_addr) external returns (uint256 tokens_sold); | |
function tokenToExchangeTransferOutput(uint256 tokens_bought, uint256 max_tokens_sold, uint256 max_eth_sold, uint256 deadline, address recipient, address exchange_addr) external returns (uint256 tokens_sold); | |
// ERC20 comaptibility for liquidity tokens | |
bytes32 public name; | |
bytes32 public symbol; | |
uint256 public decimals; | |
function transfer(address _to, uint256 _value) external returns (bool); | |
function transferFrom(address _from, address _to, uint256 value) external returns (bool); | |
function approve(address _spender, uint256 _value) external returns (bool); | |
function allowance(address _owner, address _spender) external view returns (uint256); | |
function balanceOf(address _owner) external view returns (uint256); | |
function totalSupply() external view returns (uint256); | |
// Never use | |
function setup(address token_addr) external; | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pragma solidity ^0.5.9; | |
contract UniswapFactoryInterface { | |
// Public Variables | |
address public exchangeTemplate; | |
uint256 public tokenCount; | |
// Create Exchange | |
function createExchange(address token) external returns (address exchange); | |
// Get Exchange and Token Info | |
function getExchange(address token) external view returns (address exchange); | |
function getToken(address exchange) external view returns (address token); | |
function getTokenWithId(uint256 tokenId) external view returns (address token); | |
// Never use | |
function initializeFactory(address template) external; | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
// a library for performing overflow-safe math, courtesy of DappHub (https://github.com/dapphub/ds-math) | |
library SafeMath { | |
function add(uint256 x, uint256 y) internal pure returns (uint256 z) { | |
require((z = x + y) >= x, 'ds-math-add-overflow'); | |
} | |
function sub(uint256 x, uint256 y) internal pure returns (uint256 z) { | |
require((z = x - y) <= x, 'ds-math-sub-underflow'); | |
} | |
function mul(uint256 x, uint256 y) internal pure returns (uint256 z) { | |
require(y == 0 || (z = x * y) / y == x, 'ds-math-mul-overflow'); | |
} | |
} | |
interface IUniswapV2ERC20 { | |
event Approval(address indexed owner, address indexed spender, uint256 value); | |
event Transfer(address indexed from, address indexed to, uint256 value); | |
function name() external pure returns (string memory); | |
function symbol() external pure returns (string memory); | |
function decimals() external pure returns (uint8); | |
function totalSupply() external view returns (uint256); | |
function balanceOf(address owner) external view returns (uint256); | |
function allowance(address owner, address spender) external view returns (uint256); | |
function approve(address spender, uint256 value) external returns (bool); | |
function transfer(address to, uint256 value) external returns (bool); | |
function transferFrom( | |
address from, | |
address to, | |
uint256 value | |
) external returns (bool); | |
function DOMAIN_SEPARATOR() external view returns (bytes32); | |
function PERMIT_TYPEHASH() external pure returns (bytes32); | |
function nonces(address owner) external view returns (uint256); | |
function permit( | |
address owner, | |
address spender, | |
uint256 value, | |
uint256 deadline, | |
uint8 v, | |
bytes32 r, | |
bytes32 s | |
) external; | |
} | |
interface IUniswapV2Callee { | |
function uniswapV2Call( | |
address sender, | |
uint256 amount0, | |
uint256 amount1, | |
bytes calldata data | |
) external; | |
} | |
interface IERC20 { | |
event Approval(address indexed owner, address indexed spender, uint256 value); | |
event Transfer(address indexed from, address indexed to, uint256 value); | |
function name() external view returns (string memory); | |
function symbol() external view returns (string memory); | |
function decimals() external view returns (uint8); | |
function totalSupply() external view returns (uint256); | |
function balanceOf(address owner) external view returns (uint256); | |
function allowance(address owner, address spender) external view returns (uint256); | |
function approve(address spender, uint256 value) external returns (bool); | |
function transfer(address to, uint256 value) external returns (bool); | |
function transferFrom( | |
address from, | |
address to, | |
uint256 value | |
) external returns (bool); | |
} | |
// a library for handling binary fixed point numbers (https://en.wikipedia.org/wiki/Q_(number_format)) | |
// range: [0, 2**112 - 1] | |
// resolution: 1 / 2**112 | |
library UQ112x112 { | |
uint224 constant Q112 = 2**112; | |
// encode a uint112 as a UQ112x112 | |
function encode(uint112 y) internal pure returns (uint224 z) { | |
z = uint224(y) * Q112; // never overflows | |
} | |
// divide a UQ112x112 by a uint112, returning a UQ112x112 | |
function uqdiv(uint224 x, uint112 y) internal pure returns (uint224 z) { | |
z = x / uint224(y); | |
} | |
} | |
// a library for performing various math operations | |
library Math { | |
function min(uint256 x, uint256 y) internal pure returns (uint256 z) { | |
z = x < y ? x : y; | |
} | |
// babylonian method (https://en.wikipedia.org/wiki/Methods_of_computing_square_roots#Babylonian_method) | |
function sqrt(uint256 y) internal pure returns (uint256 z) { | |
if (y > 3) { | |
z = y; | |
uint256 x = y / 2 + 1; | |
while (x < z) { | |
z = x; | |
x = (y / x + x) / 2; | |
} | |
} else if (y != 0) { | |
z = 1; | |
} | |
} | |
} | |
contract UniswapV2ERC20 is IUniswapV2ERC20 { | |
using SafeMath for uint256; | |
string public constant name = 'Uniswap V2'; | |
string public constant symbol = 'UNI-V2'; | |
uint8 public constant decimals = 18; | |
uint256 public totalSupply; | |
mapping(address => uint256) public balanceOf; | |
mapping(address => mapping(address => uint256)) public allowance; | |
bytes32 public DOMAIN_SEPARATOR; | |
// keccak256("Permit(address owner,address spender,uint256 value,uint256 nonce,uint256 deadline)"); | |
bytes32 public constant PERMIT_TYPEHASH = 0x6e71edae12b1b97f4d1f60370fef10105fa2faae0126114a169c64845d6126c9; | |
mapping(address => uint256) public nonces; | |
event Approval(address indexed owner, address indexed spender, uint256 value); | |
event Transfer(address indexed from, address indexed to, uint256 value); | |
constructor() public { | |
uint256 chainId; | |
assembly { | |
chainId := chainid | |
} | |
DOMAIN_SEPARATOR = keccak256( | |
abi.encode( | |
keccak256('EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)'), | |
keccak256(bytes(name)), | |
keccak256(bytes('1')), | |
chainId, | |
address(this) | |
) | |
); | |
} | |
function _mint(address to, uint256 value) internal { | |
totalSupply = totalSupply.add(value); | |
balanceOf[to] = balanceOf[to].add(value); | |
emit Transfer(address(0), to, value); | |
} | |
function _burn(address from, uint256 value) internal { | |
balanceOf[from] = balanceOf[from].sub(value); | |
totalSupply = totalSupply.sub(value); | |
emit Transfer(from, address(0), value); | |
} | |
function _approve( | |
address owner, | |
address spender, | |
uint256 value | |
) private { | |
allowance[owner][spender] = value; | |
emit Approval(owner, spender, value); | |
} | |
function _transfer( | |
address from, | |
address to, | |
uint256 value | |
) private { | |
balanceOf[from] = balanceOf[from].sub(value); | |
balanceOf[to] = balanceOf[to].add(value); | |
emit Transfer(from, to, value); | |
} | |
function approve(address spender, uint256 value) external returns (bool) { | |
_approve(msg.sender, spender, value); | |
return true; | |
} | |
function transfer(address to, uint256 value) external returns (bool) { | |
_transfer(msg.sender, to, value); | |
return true; | |
} | |
function transferFrom( | |
address from, | |
address to, | |
uint256 value | |
) external returns (bool) { | |
if (allowance[from][msg.sender] != uint256(-1)) { | |
allowance[from][msg.sender] = allowance[from][msg.sender].sub(value); | |
} | |
_transfer(from, to, value); | |
return true; | |
} | |
function permit( | |
address owner, | |
address spender, | |
uint256 value, | |
uint256 deadline, | |
uint8 v, | |
bytes32 r, | |
bytes32 s | |
) external { | |
require(deadline >= block.timestamp, 'UniswapV2: EXPIRED'); | |
bytes32 digest = keccak256( | |
abi.encodePacked( | |
'\x19\x01', | |
DOMAIN_SEPARATOR, | |
keccak256(abi.encode(PERMIT_TYPEHASH, owner, spender, value, nonces[owner]++, deadline)) | |
) | |
); | |
address recoveredAddress = ecrecover(digest, v, r, s); | |
require(recoveredAddress != address(0) && recoveredAddress == owner, 'UniswapV2: INVALID_SIGNATURE'); | |
_approve(owner, spender, value); | |
} | |
} | |
interface IUniswapV2Pair { | |
event Approval(address indexed owner, address indexed spender, uint256 value); | |
event Transfer(address indexed from, address indexed to, uint256 value); | |
function name() external pure returns (string memory); | |
function symbol() external pure returns (string memory); | |
function decimals() external pure returns (uint8); | |
function totalSupply() external view returns (uint256); | |
function balanceOf(address owner) external view returns (uint256); | |
function allowance(address owner, address spender) external view returns (uint256); | |
function approve(address spender, uint256 value) external returns (bool); | |
function transfer(address to, uint256 value) external returns (bool); | |
function transferFrom( | |
address from, | |
address to, | |
uint256 value | |
) external returns (bool); | |
function DOMAIN_SEPARATOR() external view returns (bytes32); | |
function PERMIT_TYPEHASH() external pure returns (bytes32); | |
function nonces(address owner) external view returns (uint256); | |
function permit( | |
address owner, | |
address spender, | |
uint256 value, | |
uint256 deadline, | |
uint8 v, | |
bytes32 r, | |
bytes32 s | |
) external; | |
event Mint(address indexed sender, uint256 amount0, uint256 amount1); | |
event Burn(address indexed sender, uint256 amount0, uint256 amount1, address indexed to); | |
event Swap( | |
address indexed sender, | |
uint256 amount0In, | |
uint256 amount1In, | |
uint256 amount0Out, | |
uint256 amount1Out, | |
address indexed to | |
); | |
event Sync(uint112 reserve0, uint112 reserve1); | |
function MINIMUM_LIQUIDITY() external pure returns (uint256); | |
function factory() external view returns (address); | |
function token0() external view returns (address); | |
function token1() external view returns (address); | |
function getReserves() | |
external | |
view | |
returns ( | |
uint112 reserve0, | |
uint112 reserve1, | |
uint32 blockTimestampLast | |
); | |
function price0CumulativeLast() external view returns (uint256); | |
function price1CumulativeLast() external view returns (uint256); | |
function kLast() external view returns (uint256); | |
function mint(address to) external returns (uint256 liquidity); | |
function burn(address to) external returns (uint256 amount0, uint256 amount1); | |
function swap( | |
uint256 amount0Out, | |
uint256 amount1Out, | |
address to, | |
bytes calldata data | |
) external; | |
function skim(address to) external; | |
function sync() external; | |
function initialize(address, address) external; | |
} | |
contract UniswapV2Pair is IUniswapV2Pair, UniswapV2ERC20 { | |
using SafeMath for uint256; | |
using UQ112x112 for uint224; | |
uint256 public constant MINIMUM_LIQUIDITY = 10**3; | |
bytes4 private constant SELECTOR = bytes4(keccak256(bytes('transfer(address,uint256)'))); | |
address public factory; | |
address public token0; | |
address public token1; | |
uint112 private reserve0; // uses single storage slot, accessible via getReserves | |
uint112 private reserve1; // uses single storage slot, accessible via getReserves | |
uint32 private blockTimestampLast; // uses single storage slot, accessible via getReserves | |
uint256 public price0CumulativeLast; | |
uint256 public price1CumulativeLast; | |
uint256 public kLast; // reserve0 * reserve1, as of immediately after the most recent liquidity event | |
uint256 private unlocked = 1; | |
modifier lock() { | |
require(unlocked == 1, 'UniswapV2: LOCKED'); | |
unlocked = 0; | |
_; | |
unlocked = 1; | |
} | |
function getReserves() | |
public | |
view | |
returns ( | |
uint112 _reserve0, | |
uint112 _reserve1, | |
uint32 _blockTimestampLast | |
) | |
{ | |
_reserve0 = reserve0; | |
_reserve1 = reserve1; | |
_blockTimestampLast = blockTimestampLast; | |
} | |
function _safeTransfer( | |
address token, | |
address to, | |
uint256 value | |
) private { | |
(bool success, bytes memory data) = token.call(abi.encodeWithSelector(SELECTOR, to, value)); | |
require(success && (data.length == 0 || abi.decode(data, (bool))), 'UniswapV2: TRANSFER_FAILED'); | |
} | |
event Mint(address indexed sender, uint256 amount0, uint256 amount1); | |
event Burn(address indexed sender, uint256 amount0, uint256 amount1, address indexed to); | |
event Swap( | |
address indexed sender, | |
uint256 amount0In, | |
uint256 amount1In, | |
uint256 amount0Out, | |
uint256 amount1Out, | |
address indexed to | |
); | |
event Sync(uint112 reserve0, uint112 reserve1); | |
constructor() public { | |
factory = msg.sender; | |
} | |
// called once by the factory at time of deployment | |
function initialize(address _token0, address _token1) external { | |
require(msg.sender == factory, 'UniswapV2: FORBIDDEN'); // sufficient check | |
token0 = _token0; | |
token1 = _token1; | |
} | |
// update reserves and, on the first call per block, price accumulators | |
function _update( | |
uint256 balance0, | |
uint256 balance1, | |
uint112 _reserve0, | |
uint112 _reserve1 | |
) private { | |
require(balance0 <= uint112(-1) && balance1 <= uint112(-1), 'UniswapV2: OVERFLOW'); | |
uint32 blockTimestamp = uint32(block.timestamp % 2**32); | |
uint32 timeElapsed = blockTimestamp - blockTimestampLast; // overflow is desired | |
if (timeElapsed > 0 && _reserve0 != 0 && _reserve1 != 0) { | |
// * never overflows, and + overflow is desired | |
price0CumulativeLast += uint256(UQ112x112.encode(_reserve1).uqdiv(_reserve0)) * timeElapsed; | |
price1CumulativeLast += uint256(UQ112x112.encode(_reserve0).uqdiv(_reserve1)) * timeElapsed; | |
} | |
reserve0 = uint112(balance0); | |
reserve1 = uint112(balance1); | |
blockTimestampLast = blockTimestamp; | |
emit Sync(reserve0, reserve1); | |
} | |
// if fee is on, mint liquidity equivalent to 1/6th of the growth in sqrt(k) | |
function _mintFee(uint112 _reserve0, uint112 _reserve1) private returns (bool feeOn) { | |
address feeTo = IUniswapV2Factory(factory).feeTo(); | |
feeOn = feeTo != address(0); | |
uint256 _kLast = kLast; // gas savings | |
if (feeOn) { | |
if (_kLast != 0) { | |
uint256 rootK = Math.sqrt(uint256(_reserve0).mul(_reserve1)); | |
uint256 rootKLast = Math.sqrt(_kLast); | |
if (rootK > rootKLast) { | |
uint256 numerator = totalSupply.mul(rootK.sub(rootKLast)); | |
uint256 denominator = rootK.mul(5).add(rootKLast); | |
uint256 liquidity = numerator / denominator; | |
if (liquidity > 0) _mint(feeTo, liquidity); | |
} | |
} | |
} else if (_kLast != 0) { | |
kLast = 0; | |
} | |
} | |
// this low-level function should be called from a contract which performs // important safety checks | |
function mint(address to) external lock returns (uint256 liquidity) { | |
(uint112 _reserve0, uint112 _reserve1, ) = getReserves(); // gas savings | |
uint256 balance0 = IERC20(token0).balanceOf(address(this)); | |
uint256 balance1 = IERC20(token1).balanceOf(address(this)); | |
uint256 amount0 = balance0.sub(_reserve0); | |
uint256 amount1 = balance1.sub(_reserve1); | |
bool feeOn = _mintFee(_reserve0, _reserve1); | |
uint256 _totalSupply = totalSupply; // gas savings, must be defined here since totalSupply can update in _mintFee | |
if (_totalSupply == 0) { | |
liquidity = Math.sqrt(amount0.mul(amount1)).sub(MINIMUM_LIQUIDITY); | |
_mint(address(0), MINIMUM_LIQUIDITY); // permanently lock the first MINIMUM_LIQUIDITY tokens | |
} else { | |
liquidity = Math.min(amount0.mul(_totalSupply) / _reserve0, amount1.mul(_totalSupply) / _reserve1); | |
} | |
require(liquidity > 0, 'UniswapV2: INSUFFICIENT_LIQUIDITY_MINTED'); | |
_mint(to, liquidity); | |
_update(balance0, balance1, _reserve0, _reserve1); | |
if (feeOn) kLast = uint256(reserve0).mul(reserve1); // reserve0 and reserve1 are up-to-date | |
emit Mint(msg.sender, amount0, amount1); | |
} | |
// this low-level function should be called from a contract which performs // important safety checks | |
function burn(address to) external lock returns (uint256 amount0, uint256 amount1) { | |
(uint112 _reserve0, uint112 _reserve1, ) = getReserves(); // gas savings | |
address _token0 = token0; // gas savings | |
address _token1 = token1; // gas savings | |
uint256 balance0 = IERC20(_token0).balanceOf(address(this)); | |
uint256 balance1 = IERC20(_token1).balanceOf(address(this)); | |
uint256 liquidity = balanceOf[address(this)]; | |
bool feeOn = _mintFee(_reserve0, _reserve1); | |
uint256 _totalSupply = totalSupply; // gas savings, must be defined here since totalSupply can update in _mintFee | |
amount0 = liquidity.mul(balance0) / _totalSupply; // using balances ensures pro-rata distribution | |
amount1 = liquidity.mul(balance1) / _totalSupply; // using balances ensures pro-rata distribution | |
require(amount0 > 0 && amount1 > 0, 'UniswapV2: INSUFFICIENT_LIQUIDITY_BURNED'); | |
_burn(address(this), liquidity); | |
_safeTransfer(_token0, to, amount0); | |
_safeTransfer(_token1, to, amount1); | |
balance0 = IERC20(_token0).balanceOf(address(this)); | |
balance1 = IERC20(_token1).balanceOf(address(this)); | |
_update(balance0, balance1, _reserve0, _reserve1); | |
if (feeOn) kLast = uint256(reserve0).mul(reserve1); // reserve0 and reserve1 are up-to-date | |
emit Burn(msg.sender, amount0, amount1, to); | |
} | |
// this low-level function should be called from a contract which performs // important safety checks | |
function swap( | |
uint256 amount0Out, | |
uint256 amount1Out, | |
address to, | |
bytes calldata data | |
) external lock { | |
require(amount0Out > 0 || amount1Out > 0, 'UniswapV2: INSUFFICIENT_OUTPUT_AMOUNT'); | |
(uint112 _reserve0, uint112 _reserve1, ) = getReserves(); // gas savings | |
require(amount0Out < _reserve0 && amount1Out < _reserve1, 'UniswapV2: INSUFFICIENT_LIQUIDITY'); | |
uint256 balance0; | |
uint256 balance1; | |
{ | |
// scope for _token{0,1}, avoids stack too deep errors | |
address _token0 = token0; | |
address _token1 = token1; | |
require(to != _token0 && to != _token1, 'UniswapV2: INVALID_TO'); | |
if (amount0Out > 0) _safeTransfer(_token0, to, amount0Out); // optimistically transfer tokens | |
if (amount1Out > 0) _safeTransfer(_token1, to, amount1Out); // optimistically transfer tokens | |
if (data.length > 0) IUniswapV2Callee(to).uniswapV2Call(msg.sender, amount0Out, amount1Out, data); | |
balance0 = IERC20(_token0).balanceOf(address(this)); | |
balance1 = IERC20(_token1).balanceOf(address(this)); | |
} | |
uint256 amount0In = balance0 > _reserve0 - amount0Out ? balance0 - (_reserve0 - amount0Out) : 0; | |
uint256 amount1In = balance1 > _reserve1 - amount1Out ? balance1 - (_reserve1 - amount1Out) : 0; | |
require(amount0In > 0 || amount1In > 0, 'UniswapV2: INSUFFICIENT_INPUT_AMOUNT'); | |
{ | |
// scope for reserve{0,1}Adjusted, avoids stack too deep errors | |
uint256 balance0Adjusted = balance0.mul(1000).sub(amount0In.mul(3)); | |
uint256 balance1Adjusted = balance1.mul(1000).sub(amount1In.mul(3)); | |
require( | |
balance0Adjusted.mul(balance1Adjusted) >= uint256(_reserve0).mul(_reserve1).mul(1000**2), | |
'UniswapV2: K' | |
); | |
} | |
_update(balance0, balance1, _reserve0, _reserve1); | |
emit Swap(msg.sender, amount0In, amount1In, amount0Out, amount1Out, to); | |
} | |
// force balances to match reserves | |
function skim(address to) external lock { | |
address _token0 = token0; // gas savings | |
address _token1 = token1; // gas savings | |
_safeTransfer(_token0, to, IERC20(_token0).balanceOf(address(this)).sub(reserve0)); | |
_safeTransfer(_token1, to, IERC20(_token1).balanceOf(address(this)).sub(reserve1)); | |
} | |
// force reserves to match balances | |
function sync() external lock { | |
_update(IERC20(token0).balanceOf(address(this)), IERC20(token1).balanceOf(address(this)), reserve0, reserve1); | |
} | |
} | |
interface IUniswapV2Factory { | |
event PairCreated(address indexed token0, address indexed token1, address pair, uint256); | |
function feeTo() external view returns (address); | |
function feeToSetter() external view returns (address); | |
function getPair(address tokenA, address tokenB) external view returns (address pair); | |
function allPairs(uint256) external view returns (address pair); | |
function allPairsLength() external view returns (uint256); | |
function createPair(address tokenA, address tokenB) external returns (address pair); | |
function setFeeTo(address) external; | |
function setFeeToSetter(address) external; | |
} | |
pragma solidity =0.5.16; | |
contract UniswapV2Factory is IUniswapV2Factory { | |
address public feeTo; | |
address public feeToSetter; | |
mapping(address => mapping(address => address)) public getPair; | |
address[] public allPairs; | |
event PairCreated(address indexed token0, address indexed token1, address pair, uint256); | |
constructor(address _feeToSetter) public { | |
feeToSetter = _feeToSetter; | |
} | |
function allPairsLength() external view returns (uint256) { | |
return allPairs.length; | |
} | |
function createPair(address tokenA, address tokenB) external returns (address pair) { | |
require(tokenA != tokenB, 'UniswapV2: IDENTICAL_ADDRESSES'); | |
(address token0, address token1) = tokenA < tokenB ? (tokenA, tokenB) : (tokenB, tokenA); | |
require(token0 != address(0), 'UniswapV2: ZERO_ADDRESS'); | |
require(getPair[token0][token1] == address(0), 'UniswapV2: PAIR_EXISTS'); // single check is sufficient | |
bytes memory bytecode = type(UniswapV2Pair).creationCode; | |
bytes32 salt = keccak256(abi.encodePacked(token0, token1)); | |
assembly { | |
pair := create2(0, add(bytecode, 32), mload(bytecode), salt) | |
} | |
IUniswapV2Pair(pair).initialize(token0, token1); | |
getPair[token0][token1] = pair; | |
getPair[token1][token0] = pair; // populate mapping in the reverse direction | |
allPairs.push(pair); | |
emit PairCreated(token0, token1, pair, allPairs.length); | |
} | |
function setFeeTo(address _feeTo) external { | |
require(msg.sender == feeToSetter, 'UniswapV2: FORBIDDEN'); | |
feeTo = _feeTo; | |
} | |
function setFeeToSetter(address _feeToSetter) external { | |
require(msg.sender == feeToSetter, 'UniswapV2: FORBIDDEN'); | |
feeToSetter = _feeToSetter; | |
} | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
// a library for performing overflow-safe math, courtesy of DappHub (https://github.com/dapphub/ds-math) | |
library SafeMath { | |
function add(uint256 x, uint256 y) internal pure returns (uint256 z) { | |
require((z = x + y) >= x, 'ds-math-add-overflow'); | |
} | |
function sub(uint256 x, uint256 y) internal pure returns (uint256 z) { | |
require((z = x - y) <= x, 'ds-math-sub-underflow'); | |
} | |
function mul(uint256 x, uint256 y) internal pure returns (uint256 z) { | |
require(y == 0 || (z = x * y) / y == x, 'ds-math-mul-overflow'); | |
} | |
} | |
interface IUniswapV2ERC20 { | |
event Approval(address indexed owner, address indexed spender, uint256 value); | |
event Transfer(address indexed from, address indexed to, uint256 value); | |
function name() external pure returns (string memory); | |
function symbol() external pure returns (string memory); | |
function decimals() external pure returns (uint8); | |
function totalSupply() external view returns (uint256); | |
function balanceOf(address owner) external view returns (uint256); | |
function allowance(address owner, address spender) external view returns (uint256); | |
function approve(address spender, uint256 value) external returns (bool); | |
function transfer(address to, uint256 value) external returns (bool); | |
function transferFrom( | |
address from, | |
address to, | |
uint256 value | |
) external returns (bool); | |
function DOMAIN_SEPARATOR() external view returns (bytes32); | |
function PERMIT_TYPEHASH() external pure returns (bytes32); | |
function nonces(address owner) external view returns (uint256); | |
function permit( | |
address owner, | |
address spender, | |
uint256 value, | |
uint256 deadline, | |
uint8 v, | |
bytes32 r, | |
bytes32 s | |
) external; | |
} | |
interface IUniswapV2Callee { | |
function uniswapV2Call( | |
address sender, | |
uint256 amount0, | |
uint256 amount1, | |
bytes calldata data | |
) external; | |
} | |
interface IUniswapV2Factory { | |
event PairCreated(address indexed token0, address indexed token1, address pair, uint256); | |
function feeTo() external view returns (address); | |
function feeToSetter() external view returns (address); | |
function getPair(address tokenA, address tokenB) external view returns (address pair); | |
function allPairs(uint256) external view returns (address pair); | |
function allPairsLength() external view returns (uint256); | |
function createPair(address tokenA, address tokenB) external returns (address pair); | |
function setFeeTo(address) external; | |
function setFeeToSetter(address) external; | |
} | |
interface IERC20 { | |
event Approval(address indexed owner, address indexed spender, uint256 value); | |
event Transfer(address indexed from, address indexed to, uint256 value); | |
function name() external view returns (string memory); | |
function symbol() external view returns (string memory); | |
function decimals() external view returns (uint8); | |
function totalSupply() external view returns (uint256); | |
function balanceOf(address owner) external view returns (uint256); | |
function allowance(address owner, address spender) external view returns (uint256); | |
function approve(address spender, uint256 value) external returns (bool); | |
function transfer(address to, uint256 value) external returns (bool); | |
function transferFrom( | |
address from, | |
address to, | |
uint256 value | |
) external returns (bool); | |
} | |
// a library for handling binary fixed point numbers (https://en.wikipedia.org/wiki/Q_(number_format)) | |
// range: [0, 2**112 - 1] | |
// resolution: 1 / 2**112 | |
library UQ112x112 { | |
uint224 constant Q112 = 2**112; | |
// encode a uint112 as a UQ112x112 | |
function encode(uint112 y) internal pure returns (uint224 z) { | |
z = uint224(y) * Q112; // never overflows | |
} | |
// divide a UQ112x112 by a uint112, returning a UQ112x112 | |
function uqdiv(uint224 x, uint112 y) internal pure returns (uint224 z) { | |
z = x / uint224(y); | |
} | |
} | |
// a library for performing various math operations | |
library Math { | |
function min(uint256 x, uint256 y) internal pure returns (uint256 z) { | |
z = x < y ? x : y; | |
} | |
// babylonian method (https://en.wikipedia.org/wiki/Methods_of_computing_square_roots#Babylonian_method) | |
function sqrt(uint256 y) internal pure returns (uint256 z) { | |
if (y > 3) { | |
z = y; | |
uint256 x = y / 2 + 1; | |
while (x < z) { | |
z = x; | |
x = (y / x + x) / 2; | |
} | |
} else if (y != 0) { | |
z = 1; | |
} | |
} | |
} | |
contract UniswapV2ERC20 is IUniswapV2ERC20 { | |
using SafeMath for uint256; | |
string public constant name = 'Uniswap V2'; | |
string public constant symbol = 'UNI-V2'; | |
uint8 public constant decimals = 18; | |
uint256 public totalSupply; | |
mapping(address => uint256) public balanceOf; | |
mapping(address => mapping(address => uint256)) public allowance; | |
bytes32 public DOMAIN_SEPARATOR; | |
// keccak256("Permit(address owner,address spender,uint256 value,uint256 nonce,uint256 deadline)"); | |
bytes32 public constant PERMIT_TYPEHASH = 0x6e71edae12b1b97f4d1f60370fef10105fa2faae0126114a169c64845d6126c9; | |
mapping(address => uint256) public nonces; | |
event Approval(address indexed owner, address indexed spender, uint256 value); | |
event Transfer(address indexed from, address indexed to, uint256 value); | |
constructor() public { | |
uint256 chainId; | |
assembly { | |
chainId := chainid | |
} | |
DOMAIN_SEPARATOR = keccak256( | |
abi.encode( | |
keccak256('EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)'), | |
keccak256(bytes(name)), | |
keccak256(bytes('1')), | |
chainId, | |
address(this) | |
) | |
); | |
} | |
function _mint(address to, uint256 value) internal { | |
totalSupply = totalSupply.add(value); | |
balanceOf[to] = balanceOf[to].add(value); | |
emit Transfer(address(0), to, value); | |
} | |
function _burn(address from, uint256 value) internal { | |
balanceOf[from] = balanceOf[from].sub(value); | |
totalSupply = totalSupply.sub(value); | |
emit Transfer(from, address(0), value); | |
} | |
function _approve( | |
address owner, | |
address spender, | |
uint256 value | |
) private { | |
allowance[owner][spender] = value; | |
emit Approval(owner, spender, value); | |
} | |
function _transfer( | |
address from, | |
address to, | |
uint256 value | |
) private { | |
balanceOf[from] = balanceOf[from].sub(value); | |
balanceOf[to] = balanceOf[to].add(value); | |
emit Transfer(from, to, value); | |
} | |
function approve(address spender, uint256 value) external returns (bool) { | |
_approve(msg.sender, spender, value); | |
return true; | |
} | |
function transfer(address to, uint256 value) external returns (bool) { | |
_transfer(msg.sender, to, value); | |
return true; | |
} | |
function transferFrom( | |
address from, | |
address to, | |
uint256 value | |
) external returns (bool) { | |
if (allowance[from][msg.sender] != uint256(-1)) { | |
allowance[from][msg.sender] = allowance[from][msg.sender].sub(value); | |
} | |
_transfer(from, to, value); | |
return true; | |
} | |
function permit( | |
address owner, | |
address spender, | |
uint256 value, | |
uint256 deadline, | |
uint8 v, | |
bytes32 r, | |
bytes32 s | |
) external { | |
require(deadline >= block.timestamp, 'UniswapV2: EXPIRED'); | |
bytes32 digest = keccak256( | |
abi.encodePacked( | |
'\x19\x01', | |
DOMAIN_SEPARATOR, | |
keccak256(abi.encode(PERMIT_TYPEHASH, owner, spender, value, nonces[owner]++, deadline)) | |
) | |
); | |
address recoveredAddress = ecrecover(digest, v, r, s); | |
require(recoveredAddress != address(0) && recoveredAddress == owner, 'UniswapV2: INVALID_SIGNATURE'); | |
_approve(owner, spender, value); | |
} | |
} | |
interface IUniswapV2Pair { | |
event Approval(address indexed owner, address indexed spender, uint256 value); | |
event Transfer(address indexed from, address indexed to, uint256 value); | |
function name() external pure returns (string memory); | |
function symbol() external pure returns (string memory); | |
function decimals() external pure returns (uint8); | |
function totalSupply() external view returns (uint256); | |
function balanceOf(address owner) external view returns (uint256); | |
function allowance(address owner, address spender) external view returns (uint256); | |
function approve(address spender, uint256 value) external returns (bool); | |
function transfer(address to, uint256 value) external returns (bool); | |
function transferFrom( | |
address from, | |
address to, | |
uint256 value | |
) external returns (bool); | |
function DOMAIN_SEPARATOR() external view returns (bytes32); | |
function PERMIT_TYPEHASH() external pure returns (bytes32); | |
function nonces(address owner) external view returns (uint256); | |
function permit( | |
address owner, | |
address spender, | |
uint256 value, | |
uint256 deadline, | |
uint8 v, | |
bytes32 r, | |
bytes32 s | |
) external; | |
event Mint(address indexed sender, uint256 amount0, uint256 amount1); | |
event Burn(address indexed sender, uint256 amount0, uint256 amount1, address indexed to); | |
event Swap( | |
address indexed sender, | |
uint256 amount0In, | |
uint256 amount1In, | |
uint256 amount0Out, | |
uint256 amount1Out, | |
address indexed to | |
); | |
event Sync(uint112 reserve0, uint112 reserve1); | |
function MINIMUM_LIQUIDITY() external pure returns (uint256); | |
function factory() external view returns (address); | |
function token0() external view returns (address); | |
function token1() external view returns (address); | |
function getReserves() | |
external | |
view | |
returns ( | |
uint112 reserve0, | |
uint112 reserve1, | |
uint32 blockTimestampLast | |
); | |
function price0CumulativeLast() external view returns (uint256); | |
function price1CumulativeLast() external view returns (uint256); | |
function kLast() external view returns (uint256); | |
function mint(address to) external returns (uint256 liquidity); | |
function burn(address to) external returns (uint256 amount0, uint256 amount1); | |
function swap( | |
uint256 amount0Out, | |
uint256 amount1Out, | |
address to, | |
bytes calldata data | |
) external; | |
function skim(address to) external; | |
function sync() external; | |
function initialize(address, address) external; | |
} | |
pragma solidity =0.5.16; | |
contract UniswapV2Pair is IUniswapV2Pair, UniswapV2ERC20 { | |
using SafeMath for uint256; | |
using UQ112x112 for uint224; | |
uint256 public constant MINIMUM_LIQUIDITY = 10**3; | |
bytes4 private constant SELECTOR = bytes4(keccak256(bytes('transfer(address,uint256)'))); | |
address public factory; | |
address public token0; | |
address public token1; | |
uint112 private reserve0; // uses single storage slot, accessible via getReserves | |
uint112 private reserve1; // uses single storage slot, accessible via getReserves | |
uint32 private blockTimestampLast; // uses single storage slot, accessible via getReserves | |
uint256 public price0CumulativeLast; | |
uint256 public price1CumulativeLast; | |
uint256 public kLast; // reserve0 * reserve1, as of immediately after the most recent liquidity event | |
uint256 private unlocked = 1; | |
modifier lock() { | |
require(unlocked == 1, 'UniswapV2: LOCKED'); | |
unlocked = 0; | |
_; | |
unlocked = 1; | |
} | |
function getReserves() | |
public | |
view | |
returns ( | |
uint112 _reserve0, | |
uint112 _reserve1, | |
uint32 _blockTimestampLast | |
) | |
{ | |
_reserve0 = reserve0; | |
_reserve1 = reserve1; | |
_blockTimestampLast = blockTimestampLast; | |
} | |
function _safeTransfer( | |
address token, | |
address to, | |
uint256 value | |
) private { | |
(bool success, bytes memory data) = token.call(abi.encodeWithSelector(SELECTOR, to, value)); | |
require(success && (data.length == 0 || abi.decode(data, (bool))), 'UniswapV2: TRANSFER_FAILED'); | |
} | |
event Mint(address indexed sender, uint256 amount0, uint256 amount1); | |
event Burn(address indexed sender, uint256 amount0, uint256 amount1, address indexed to); | |
event Swap( | |
address indexed sender, | |
uint256 amount0In, | |
uint256 amount1In, | |
uint256 amount0Out, | |
uint256 amount1Out, | |
address indexed to | |
); | |
event Sync(uint112 reserve0, uint112 reserve1); | |
constructor() public { | |
factory = msg.sender; | |
} | |
// called once by the factory at time of deployment | |
function initialize(address _token0, address _token1) external { | |
require(msg.sender == factory, 'UniswapV2: FORBIDDEN'); // sufficient check | |
token0 = _token0; | |
token1 = _token1; | |
} | |
// update reserves and, on the first call per block, price accumulators | |
function _update( | |
uint256 balance0, | |
uint256 balance1, | |
uint112 _reserve0, | |
uint112 _reserve1 | |
) private { | |
require(balance0 <= uint112(-1) && balance1 <= uint112(-1), 'UniswapV2: OVERFLOW'); | |
uint32 blockTimestamp = uint32(block.timestamp % 2**32); | |
uint32 timeElapsed = blockTimestamp - blockTimestampLast; // overflow is desired | |
if (timeElapsed > 0 && _reserve0 != 0 && _reserve1 != 0) { | |
// * never overflows, and + overflow is desired | |
price0CumulativeLast += uint256(UQ112x112.encode(_reserve1).uqdiv(_reserve0)) * timeElapsed; | |
price1CumulativeLast += uint256(UQ112x112.encode(_reserve0).uqdiv(_reserve1)) * timeElapsed; | |
} | |
reserve0 = uint112(balance0); | |
reserve1 = uint112(balance1); | |
blockTimestampLast = blockTimestamp; | |
emit Sync(reserve0, reserve1); | |
} | |
// if fee is on, mint liquidity equivalent to 1/6th of the growth in sqrt(k) | |
function _mintFee(uint112 _reserve0, uint112 _reserve1) private returns (bool feeOn) { | |
address feeTo = IUniswapV2Factory(factory).feeTo(); | |
feeOn = feeTo != address(0); | |
uint256 _kLast = kLast; // gas savings | |
if (feeOn) { | |
if (_kLast != 0) { | |
uint256 rootK = Math.sqrt(uint256(_reserve0).mul(_reserve1)); | |
uint256 rootKLast = Math.sqrt(_kLast); | |
if (rootK > rootKLast) { | |
uint256 numerator = totalSupply.mul(rootK.sub(rootKLast)); | |
uint256 denominator = rootK.mul(5).add(rootKLast); | |
uint256 liquidity = numerator / denominator; | |
if (liquidity > 0) _mint(feeTo, liquidity); | |
} | |
} | |
} else if (_kLast != 0) { | |
kLast = 0; | |
} | |
} | |
// this low-level function should be called from a contract which performs // important safety checks | |
function mint(address to) external lock returns (uint256 liquidity) { | |
(uint112 _reserve0, uint112 _reserve1, ) = getReserves(); // gas savings | |
uint256 balance0 = IERC20(token0).balanceOf(address(this)); | |
uint256 balance1 = IERC20(token1).balanceOf(address(this)); | |
uint256 amount0 = balance0.sub(_reserve0); | |
uint256 amount1 = balance1.sub(_reserve1); | |
bool feeOn = _mintFee(_reserve0, _reserve1); | |
uint256 _totalSupply = totalSupply; // gas savings, must be defined here since totalSupply can update in _mintFee | |
if (_totalSupply == 0) { | |
liquidity = Math.sqrt(amount0.mul(amount1)).sub(MINIMUM_LIQUIDITY); | |
_mint(address(0), MINIMUM_LIQUIDITY); // permanently lock the first MINIMUM_LIQUIDITY tokens | |
} else { | |
liquidity = Math.min(amount0.mul(_totalSupply) / _reserve0, amount1.mul(_totalSupply) / _reserve1); | |
} | |
require(liquidity > 0, 'UniswapV2: INSUFFICIENT_LIQUIDITY_MINTED'); | |
_mint(to, liquidity); | |
_update(balance0, balance1, _reserve0, _reserve1); | |
if (feeOn) kLast = uint256(reserve0).mul(reserve1); // reserve0 and reserve1 are up-to-date | |
emit Mint(msg.sender, amount0, amount1); | |
} | |
// this low-level function should be called from a contract which performs // important safety checks | |
function burn(address to) external lock returns (uint256 amount0, uint256 amount1) { | |
(uint112 _reserve0, uint112 _reserve1, ) = getReserves(); // gas savings | |
address _token0 = token0; // gas savings | |
address _token1 = token1; // gas savings | |
uint256 balance0 = IERC20(_token0).balanceOf(address(this)); | |
uint256 balance1 = IERC20(_token1).balanceOf(address(this)); | |
uint256 liquidity = balanceOf[address(this)]; | |
bool feeOn = _mintFee(_reserve0, _reserve1); | |
uint256 _totalSupply = totalSupply; // gas savings, must be defined here since totalSupply can update in _mintFee | |
amount0 = liquidity.mul(balance0) / _totalSupply; // using balances ensures pro-rata distribution | |
amount1 = liquidity.mul(balance1) / _totalSupply; // using balances ensures pro-rata distribution | |
require(amount0 > 0 && amount1 > 0, 'UniswapV2: INSUFFICIENT_LIQUIDITY_BURNED'); | |
_burn(address(this), liquidity); | |
_safeTransfer(_token0, to, amount0); | |
_safeTransfer(_token1, to, amount1); | |
balance0 = IERC20(_token0).balanceOf(address(this)); | |
balance1 = IERC20(_token1).balanceOf(address(this)); | |
_update(balance0, balance1, _reserve0, _reserve1); | |
if (feeOn) kLast = uint256(reserve0).mul(reserve1); // reserve0 and reserve1 are up-to-date | |
emit Burn(msg.sender, amount0, amount1, to); | |
} | |
// this low-level function should be called from a contract which performs // important safety checks | |
function swap( | |
uint256 amount0Out, | |
uint256 amount1Out, | |
address to, | |
bytes calldata data | |
) external lock { | |
require(amount0Out > 0 || amount1Out > 0, 'UniswapV2: INSUFFICIENT_OUTPUT_AMOUNT'); | |
(uint112 _reserve0, uint112 _reserve1, ) = getReserves(); // gas savings | |
require(amount0Out < _reserve0 && amount1Out < _reserve1, 'UniswapV2: INSUFFICIENT_LIQUIDITY'); | |
uint256 balance0; | |
uint256 balance1; | |
{ | |
// scope for _token{0,1}, avoids stack too deep errors | |
address _token0 = token0; | |
address _token1 = token1; | |
require(to != _token0 && to != _token1, 'UniswapV2: INVALID_TO'); | |
if (amount0Out > 0) _safeTransfer(_token0, to, amount0Out); // optimistically transfer tokens | |
if (amount1Out > 0) _safeTransfer(_token1, to, amount1Out); // optimistically transfer tokens | |
if (data.length > 0) IUniswapV2Callee(to).uniswapV2Call(msg.sender, amount0Out, amount1Out, data); | |
balance0 = IERC20(_token0).balanceOf(address(this)); | |
balance1 = IERC20(_token1).balanceOf(address(this)); | |
} | |
uint256 amount0In = balance0 > _reserve0 - amount0Out ? balance0 - (_reserve0 - amount0Out) : 0; | |
uint256 amount1In = balance1 > _reserve1 - amount1Out ? balance1 - (_reserve1 - amount1Out) : 0; | |
require(amount0In > 0 || amount1In > 0, 'UniswapV2: INSUFFICIENT_INPUT_AMOUNT'); | |
{ | |
// scope for reserve{0,1}Adjusted, avoids stack too deep errors | |
uint256 balance0Adjusted = balance0.mul(1000).sub(amount0In.mul(3)); | |
uint256 balance1Adjusted = balance1.mul(1000).sub(amount1In.mul(3)); | |
require( | |
balance0Adjusted.mul(balance1Adjusted) >= uint256(_reserve0).mul(_reserve1).mul(1000**2), | |
'UniswapV2: K' | |
); | |
} | |
_update(balance0, balance1, _reserve0, _reserve1); | |
emit Swap(msg.sender, amount0In, amount1In, amount0Out, amount1Out, to); | |
} | |
// force balances to match reserves | |
function skim(address to) external lock { | |
address _token0 = token0; // gas savings | |
address _token1 = token1; // gas savings | |
_safeTransfer(_token0, to, IERC20(_token0).balanceOf(address(this)).sub(reserve0)); | |
_safeTransfer(_token1, to, IERC20(_token1).balanceOf(address(this)).sub(reserve1)); | |
} | |
// force reserves to match balances | |
function sync() external lock { | |
_update(IERC20(token0).balanceOf(address(this)), IERC20(token1).balanceOf(address(this)), reserve0, reserve1); | |
} | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pragma solidity =0.6.6; | |
interface IUniswapV2Pair { | |
event Approval(address indexed owner, address indexed spender, uint256 value); | |
event Transfer(address indexed from, address indexed to, uint256 value); | |
function name() external pure returns (string memory); | |
function symbol() external pure returns (string memory); | |
function decimals() external pure returns (uint8); | |
function totalSupply() external view returns (uint256); | |
function balanceOf(address owner) external view returns (uint256); | |
function allowance(address owner, address spender) external view returns (uint256); | |
function approve(address spender, uint256 value) external returns (bool); | |
function transfer(address to, uint256 value) external returns (bool); | |
function transferFrom( | |
address from, | |
address to, | |
uint256 value | |
) external returns (bool); | |
function DOMAIN_SEPARATOR() external view returns (bytes32); | |
function PERMIT_TYPEHASH() external pure returns (bytes32); | |
function nonces(address owner) external view returns (uint256); | |
function permit( | |
address owner, | |
address spender, | |
uint256 value, | |
uint256 deadline, | |
uint8 v, | |
bytes32 r, | |
bytes32 s | |
) external; | |
event Mint(address indexed sender, uint256 amount0, uint256 amount1); | |
event Burn(address indexed sender, uint256 amount0, uint256 amount1, address indexed to); | |
event Swap( | |
address indexed sender, | |
uint256 amount0In, | |
uint256 amount1In, | |
uint256 amount0Out, | |
uint256 amount1Out, | |
address indexed to | |
); | |
event Sync(uint112 reserve0, uint112 reserve1); | |
function MINIMUM_LIQUIDITY() external pure returns (uint256); | |
function factory() external view returns (address); | |
function token0() external view returns (address); | |
function token1() external view returns (address); | |
function getReserves() | |
external | |
view | |
returns ( | |
uint112 reserve0, | |
uint112 reserve1, | |
uint32 blockTimestampLast | |
); | |
function price0CumulativeLast() external view returns (uint256); | |
function price1CumulativeLast() external view returns (uint256); | |
function kLast() external view returns (uint256); | |
function mint(address to) external returns (uint256 liquidity); | |
function burn(address to) external returns (uint256 amount0, uint256 amount1); | |
function swap( | |
uint256 amount0Out, | |
uint256 amount1Out, | |
address to, | |
bytes calldata data | |
) external; | |
function skim(address to) external; | |
function sync() external; | |
function initialize(address, address) external; | |
} | |
interface IUniswapV2Router01 { | |
function factory() external pure returns (address); | |
function WETH() external pure returns (address); | |
function addLiquidity( | |
address tokenA, | |
address tokenB, | |
uint256 amountADesired, | |
uint256 amountBDesired, | |
uint256 amountAMin, | |
uint256 amountBMin, | |
address to, | |
uint256 deadline | |
) | |
external | |
returns ( | |
uint256 amountA, | |
uint256 amountB, | |
uint256 liquidity | |
); | |
function addLiquidityETH( | |
address token, | |
uint256 amountTokenDesired, | |
uint256 amountTokenMin, | |
uint256 amountETHMin, | |
address to, | |
uint256 deadline | |
) | |
external | |
payable | |
returns ( | |
uint256 amountToken, | |
uint256 amountETH, | |
uint256 liquidity | |
); | |
function removeLiquidity( | |
address tokenA, | |
address tokenB, | |
uint256 liquidity, | |
uint256 amountAMin, | |
uint256 amountBMin, | |
address to, | |
uint256 deadline | |
) external returns (uint256 amountA, uint256 amountB); | |
function removeLiquidityETH( | |
address token, | |
uint256 liquidity, | |
uint256 amountTokenMin, | |
uint256 amountETHMin, | |
address to, | |
uint256 deadline | |
) external returns (uint256 amountToken, uint256 amountETH); | |
function removeLiquidityWithPermit( | |
address tokenA, | |
address tokenB, | |
uint256 liquidity, | |
uint256 amountAMin, | |
uint256 amountBMin, | |
address to, | |
uint256 deadline, | |
bool approveMax, | |
uint8 v, | |
bytes32 r, | |
bytes32 s | |
) external returns (uint256 amountA, uint256 amountB); | |
function removeLiquidityETHWithPermit( | |
address token, | |
uint256 liquidity, | |
uint256 amountTokenMin, | |
uint256 amountETHMin, | |
address to, | |
uint256 deadline, | |
bool approveMax, | |
uint8 v, | |
bytes32 r, | |
bytes32 s | |
) external returns (uint256 amountToken, uint256 amountETH); | |
function swapExactTokensForTokens( | |
uint256 amountIn, | |
uint256 amountOutMin, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external returns (uint256[] memory amounts); | |
function swapTokensForExactTokens( | |
uint256 amountOut, | |
uint256 amountInMax, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external returns (uint256[] memory amounts); | |
function swapExactETHForTokens( | |
uint256 amountOutMin, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external payable returns (uint256[] memory amounts); | |
function swapTokensForExactETH( | |
uint256 amountOut, | |
uint256 amountInMax, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external returns (uint256[] memory amounts); | |
function swapExactTokensForETH( | |
uint256 amountIn, | |
uint256 amountOutMin, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external returns (uint256[] memory amounts); | |
function swapETHForExactTokens( | |
uint256 amountOut, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external payable returns (uint256[] memory amounts); | |
function quote( | |
uint256 amountA, | |
uint256 reserveA, | |
uint256 reserveB | |
) external pure returns (uint256 amountB); | |
function getAmountOut( | |
uint256 amountIn, | |
uint256 reserveIn, | |
uint256 reserveOut | |
) external pure returns (uint256 amountOut); | |
function getAmountIn( | |
uint256 amountOut, | |
uint256 reserveIn, | |
uint256 reserveOut | |
) external pure returns (uint256 amountIn); | |
function getAmountsOut(uint256 amountIn, address[] calldata path) external view returns (uint256[] memory amounts); | |
function getAmountsIn(uint256 amountOut, address[] calldata path) external view returns (uint256[] memory amounts); | |
} | |
interface IWETH { | |
function deposit() external payable; | |
function transfer(address to, uint256 value) external returns (bool); | |
function withdraw(uint256) external; | |
} | |
interface IERC20 { | |
event Approval(address indexed owner, address indexed spender, uint256 value); | |
event Transfer(address indexed from, address indexed to, uint256 value); | |
function name() external view returns (string memory); | |
function symbol() external view returns (string memory); | |
function decimals() external view returns (uint8); | |
function totalSupply() external view returns (uint256); | |
function balanceOf(address owner) external view returns (uint256); | |
function allowance(address owner, address spender) external view returns (uint256); | |
function approve(address spender, uint256 value) external returns (bool); | |
function transfer(address to, uint256 value) external returns (bool); | |
function transferFrom( | |
address from, | |
address to, | |
uint256 value | |
) external returns (bool); | |
} | |
// a library for performing overflow-safe math, courtesy of DappHub (https://github.com/dapphub/ds-math) | |
library SafeMath { | |
function add(uint256 x, uint256 y) internal pure returns (uint256 z) { | |
require((z = x + y) >= x, 'ds-math-add-overflow'); | |
} | |
function sub(uint256 x, uint256 y) internal pure returns (uint256 z) { | |
require((z = x - y) <= x, 'ds-math-sub-underflow'); | |
} | |
function mul(uint256 x, uint256 y) internal pure returns (uint256 z) { | |
require(y == 0 || (z = x * y) / y == x, 'ds-math-mul-overflow'); | |
} | |
} | |
library UniswapV2Library { | |
using SafeMath for uint256; | |
// returns sorted token addresses, used to handle return values from pairs sorted in this order | |
function sortTokens(address tokenA, address tokenB) internal pure returns (address token0, address token1) { | |
require(tokenA != tokenB, 'UniswapV2Library: IDENTICAL_ADDRESSES'); | |
(token0, token1) = tokenA < tokenB ? (tokenA, tokenB) : (tokenB, tokenA); | |
require(token0 != address(0), 'UniswapV2Library: ZERO_ADDRESS'); | |
} | |
// calculates the CREATE2 address for a pair without making any external calls | |
function pairFor( | |
address factory, | |
address tokenA, | |
address tokenB | |
) internal pure returns (address pair) { | |
(address token0, address token1) = sortTokens(tokenA, tokenB); | |
pair = address( | |
uint256( | |
keccak256( | |
abi.encodePacked( | |
hex'ff', | |
factory, | |
keccak256(abi.encodePacked(token0, token1)), | |
hex'96e8ac4277198ff8b6f785478aa9a39f403cb768dd02cbee326c3e7da348845f' // init code hash | |
) | |
) | |
) | |
); | |
} | |
// fetches and sorts the reserves for a pair | |
function getReserves( | |
address factory, | |
address tokenA, | |
address tokenB | |
) internal view returns (uint256 reserveA, uint256 reserveB) { | |
(address token0, ) = sortTokens(tokenA, tokenB); | |
(uint256 reserve0, uint256 reserve1, ) = IUniswapV2Pair(pairFor(factory, tokenA, tokenB)).getReserves(); | |
(reserveA, reserveB) = tokenA == token0 ? (reserve0, reserve1) : (reserve1, reserve0); | |
} | |
// given some amount of an asset and pair reserves, returns an equivalent amount of the other asset | |
function quote( | |
uint256 amountA, | |
uint256 reserveA, | |
uint256 reserveB | |
) internal pure returns (uint256 amountB) { | |
require(amountA > 0, 'UniswapV2Library: INSUFFICIENT_AMOUNT'); | |
require(reserveA > 0 && reserveB > 0, 'UniswapV2Library: INSUFFICIENT_LIQUIDITY'); | |
amountB = amountA.mul(reserveB) / reserveA; | |
} | |
// given an input amount of an asset and pair reserves, returns the maximum output amount of the other asset | |
function getAmountOut( | |
uint256 amountIn, | |
uint256 reserveIn, | |
uint256 reserveOut | |
) internal pure returns (uint256 amountOut) { | |
require(amountIn > 0, 'UniswapV2Library: INSUFFICIENT_INPUT_AMOUNT'); | |
require(reserveIn > 0 && reserveOut > 0, 'UniswapV2Library: INSUFFICIENT_LIQUIDITY'); | |
uint256 amountInWithFee = amountIn.mul(997); | |
uint256 numerator = amountInWithFee.mul(reserveOut); | |
uint256 denominator = reserveIn.mul(1000).add(amountInWithFee); | |
amountOut = numerator / denominator; | |
} | |
// given an output amount of an asset and pair reserves, returns a required input amount of the other asset | |
function getAmountIn( | |
uint256 amountOut, | |
uint256 reserveIn, | |
uint256 reserveOut | |
) internal pure returns (uint256 amountIn) { | |
require(amountOut > 0, 'UniswapV2Library: INSUFFICIENT_OUTPUT_AMOUNT'); | |
require(reserveIn > 0 && reserveOut > 0, 'UniswapV2Library: INSUFFICIENT_LIQUIDITY'); | |
uint256 numerator = reserveIn.mul(amountOut).mul(1000); | |
uint256 denominator = reserveOut.sub(amountOut).mul(997); | |
amountIn = (numerator / denominator).add(1); | |
} | |
// performs chained getAmountOut calculations on any number of pairs | |
function getAmountsOut( | |
address factory, | |
uint256 amountIn, | |
address[] memory path | |
) internal view returns (uint256[] memory amounts) { | |
require(path.length >= 2, 'UniswapV2Library: INVALID_PATH'); | |
amounts = new uint256[](path.length); | |
amounts[0] = amountIn; | |
for (uint256 i; i < path.length - 1; i++) { | |
(uint256 reserveIn, uint256 reserveOut) = getReserves(factory, path[i], path[i + 1]); | |
amounts[i + 1] = getAmountOut(amounts[i], reserveIn, reserveOut); | |
} | |
} | |
// performs chained getAmountIn calculations on any number of pairs | |
function getAmountsIn( | |
address factory, | |
uint256 amountOut, | |
address[] memory path | |
) internal view returns (uint256[] memory amounts) { | |
require(path.length >= 2, 'UniswapV2Library: INVALID_PATH'); | |
amounts = new uint256[](path.length); | |
amounts[amounts.length - 1] = amountOut; | |
for (uint256 i = path.length - 1; i > 0; i--) { | |
(uint256 reserveIn, uint256 reserveOut) = getReserves(factory, path[i - 1], path[i]); | |
amounts[i - 1] = getAmountIn(amounts[i], reserveIn, reserveOut); | |
} | |
} | |
} | |
interface IUniswapV2Router02 is IUniswapV2Router01 { | |
function removeLiquidityETHSupportingFeeOnTransferTokens( | |
address token, | |
uint256 liquidity, | |
uint256 amountTokenMin, | |
uint256 amountETHMin, | |
address to, | |
uint256 deadline | |
) external returns (uint256 amountETH); | |
function removeLiquidityETHWithPermitSupportingFeeOnTransferTokens( | |
address token, | |
uint256 liquidity, | |
uint256 amountTokenMin, | |
uint256 amountETHMin, | |
address to, | |
uint256 deadline, | |
bool approveMax, | |
uint8 v, | |
bytes32 r, | |
bytes32 s | |
) external returns (uint256 amountETH); | |
function swapExactTokensForTokensSupportingFeeOnTransferTokens( | |
uint256 amountIn, | |
uint256 amountOutMin, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external; | |
function swapExactETHForTokensSupportingFeeOnTransferTokens( | |
uint256 amountOutMin, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external payable; | |
function swapExactTokensForETHSupportingFeeOnTransferTokens( | |
uint256 amountIn, | |
uint256 amountOutMin, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external; | |
} | |
// helper methods for interacting with ERC20 tokens and sending ETH that do not consistently return true/false | |
library TransferHelper { | |
function safeApprove( | |
address token, | |
address to, | |
uint256 value | |
) internal { | |
// bytes4(keccak256(bytes('approve(address,uint256)'))); | |
(bool success, bytes memory data) = token.call(abi.encodeWithSelector(0x095ea7b3, to, value)); | |
require(success && (data.length == 0 || abi.decode(data, (bool))), 'TransferHelper: APPROVE_FAILED'); | |
} | |
function safeTransfer( | |
address token, | |
address to, | |
uint256 value | |
) internal { | |
// bytes4(keccak256(bytes('transfer(address,uint256)'))); | |
(bool success, bytes memory data) = token.call(abi.encodeWithSelector(0xa9059cbb, to, value)); | |
require(success && (data.length == 0 || abi.decode(data, (bool))), 'TransferHelper: TRANSFER_FAILED'); | |
} | |
function safeTransferFrom( | |
address token, | |
address from, | |
address to, | |
uint256 value | |
) internal { | |
// bytes4(keccak256(bytes('transferFrom(address,address,uint256)'))); | |
(bool success, bytes memory data) = token.call(abi.encodeWithSelector(0x23b872dd, from, to, value)); | |
require(success && (data.length == 0 || abi.decode(data, (bool))), 'TransferHelper: TRANSFER_FROM_FAILED'); | |
} | |
function safeTransferETH(address to, uint256 value) internal { | |
(bool success, ) = to.call{value: value}(new bytes(0)); | |
require(success, 'TransferHelper: ETH_TRANSFER_FAILED'); | |
} | |
} | |
interface IUniswapV2Factory { | |
event PairCreated(address indexed token0, address indexed token1, address pair, uint256); | |
function feeTo() external view returns (address); | |
function feeToSetter() external view returns (address); | |
function getPair(address tokenA, address tokenB) external view returns (address pair); | |
function allPairs(uint256) external view returns (address pair); | |
function allPairsLength() external view returns (uint256); | |
function createPair(address tokenA, address tokenB) external returns (address pair); | |
function setFeeTo(address) external; | |
function setFeeToSetter(address) external; | |
} | |
contract UniswapV2Router02 is IUniswapV2Router02 { | |
using SafeMath for uint256; | |
address public immutable override factory; | |
address public immutable override WETH; | |
modifier ensure(uint256 deadline) { | |
require(deadline >= block.timestamp, 'UniswapV2Router: EXPIRED'); | |
_; | |
} | |
constructor(address _factory, address _WETH) public { | |
factory = _factory; | |
WETH = _WETH; | |
} | |
receive() external payable { | |
assert(msg.sender == WETH); // only accept ETH via fallback from the WETH contract | |
} | |
// **** ADD LIQUIDITY **** | |
function _addLiquidity( | |
address tokenA, | |
address tokenB, | |
uint256 amountADesired, | |
uint256 amountBDesired, | |
uint256 amountAMin, | |
uint256 amountBMin | |
) internal virtual returns (uint256 amountA, uint256 amountB) { | |
// create the pair if it doesn't exist yet | |
if (IUniswapV2Factory(factory).getPair(tokenA, tokenB) == address(0)) { | |
IUniswapV2Factory(factory).createPair(tokenA, tokenB); | |
} | |
(uint256 reserveA, uint256 reserveB) = UniswapV2Library.getReserves(factory, tokenA, tokenB); | |
if (reserveA == 0 && reserveB == 0) { | |
(amountA, amountB) = (amountADesired, amountBDesired); | |
} else { | |
uint256 amountBOptimal = UniswapV2Library.quote(amountADesired, reserveA, reserveB); | |
if (amountBOptimal <= amountBDesired) { | |
require(amountBOptimal >= amountBMin, 'UniswapV2Router: INSUFFICIENT_B_AMOUNT'); | |
(amountA, amountB) = (amountADesired, amountBOptimal); | |
} else { | |
uint256 amountAOptimal = UniswapV2Library.quote(amountBDesired, reserveB, reserveA); | |
assert(amountAOptimal <= amountADesired); | |
require(amountAOptimal >= amountAMin, 'UniswapV2Router: INSUFFICIENT_A_AMOUNT'); | |
(amountA, amountB) = (amountAOptimal, amountBDesired); | |
} | |
} | |
} | |
function addLiquidity( | |
address tokenA, | |
address tokenB, | |
uint256 amountADesired, | |
uint256 amountBDesired, | |
uint256 amountAMin, | |
uint256 amountBMin, | |
address to, | |
uint256 deadline | |
) | |
external | |
virtual | |
override | |
ensure(deadline) | |
returns ( | |
uint256 amountA, | |
uint256 amountB, | |
uint256 liquidity | |
) | |
{ | |
(amountA, amountB) = _addLiquidity(tokenA, tokenB, amountADesired, amountBDesired, amountAMin, amountBMin); | |
address pair = UniswapV2Library.pairFor(factory, tokenA, tokenB); | |
TransferHelper.safeTransferFrom(tokenA, msg.sender, pair, amountA); | |
TransferHelper.safeTransferFrom(tokenB, msg.sender, pair, amountB); | |
liquidity = IUniswapV2Pair(pair).mint(to); | |
} | |
function addLiquidityETH( | |
address token, | |
uint256 amountTokenDesired, | |
uint256 amountTokenMin, | |
uint256 amountETHMin, | |
address to, | |
uint256 deadline | |
) | |
external | |
virtual | |
override | |
payable | |
ensure(deadline) | |
returns ( | |
uint256 amountToken, | |
uint256 amountETH, | |
uint256 liquidity | |
) | |
{ | |
(amountToken, amountETH) = _addLiquidity( | |
token, | |
WETH, | |
amountTokenDesired, | |
msg.value, | |
amountTokenMin, | |
amountETHMin | |
); | |
address pair = UniswapV2Library.pairFor(factory, token, WETH); | |
TransferHelper.safeTransferFrom(token, msg.sender, pair, amountToken); | |
IWETH(WETH).deposit{value: amountETH}(); | |
assert(IWETH(WETH).transfer(pair, amountETH)); | |
liquidity = IUniswapV2Pair(pair).mint(to); | |
// refund dust eth, if any | |
if (msg.value > amountETH) TransferHelper.safeTransferETH(msg.sender, msg.value - amountETH); | |
} | |
// **** REMOVE LIQUIDITY **** | |
function removeLiquidity( | |
address tokenA, | |
address tokenB, | |
uint256 liquidity, | |
uint256 amountAMin, | |
uint256 amountBMin, | |
address to, | |
uint256 deadline | |
) public virtual override ensure(deadline) returns (uint256 amountA, uint256 amountB) { | |
address pair = UniswapV2Library.pairFor(factory, tokenA, tokenB); | |
IUniswapV2Pair(pair).transferFrom(msg.sender, pair, liquidity); // send liquidity to pair | |
(uint256 amount0, uint256 amount1) = IUniswapV2Pair(pair).burn(to); | |
(address token0, ) = UniswapV2Library.sortTokens(tokenA, tokenB); | |
(amountA, amountB) = tokenA == token0 ? (amount0, amount1) : (amount1, amount0); | |
require(amountA >= amountAMin, 'UniswapV2Router: INSUFFICIENT_A_AMOUNT'); | |
require(amountB >= amountBMin, 'UniswapV2Router: INSUFFICIENT_B_AMOUNT'); | |
} | |
function removeLiquidityETH( | |
address token, | |
uint256 liquidity, | |
uint256 amountTokenMin, | |
uint256 amountETHMin, | |
address to, | |
uint256 deadline | |
) public virtual override ensure(deadline) returns (uint256 amountToken, uint256 amountETH) { | |
(amountToken, amountETH) = removeLiquidity( | |
token, | |
WETH, | |
liquidity, | |
amountTokenMin, | |
amountETHMin, | |
address(this), | |
deadline | |
); | |
TransferHelper.safeTransfer(token, to, amountToken); | |
IWETH(WETH).withdraw(amountETH); | |
TransferHelper.safeTransferETH(to, amountETH); | |
} | |
function removeLiquidityWithPermit( | |
address tokenA, | |
address tokenB, | |
uint256 liquidity, | |
uint256 amountAMin, | |
uint256 amountBMin, | |
address to, | |
uint256 deadline, | |
bool approveMax, | |
uint8 v, | |
bytes32 r, | |
bytes32 s | |
) external virtual override returns (uint256 amountA, uint256 amountB) { | |
address pair = UniswapV2Library.pairFor(factory, tokenA, tokenB); | |
uint256 value = approveMax ? uint256(-1) : liquidity; | |
IUniswapV2Pair(pair).permit(msg.sender, address(this), value, deadline, v, r, s); | |
(amountA, amountB) = removeLiquidity(tokenA, tokenB, liquidity, amountAMin, amountBMin, to, deadline); | |
} | |
function removeLiquidityETHWithPermit( | |
address token, | |
uint256 liquidity, | |
uint256 amountTokenMin, | |
uint256 amountETHMin, | |
address to, | |
uint256 deadline, | |
bool approveMax, | |
uint8 v, | |
bytes32 r, | |
bytes32 s | |
) external virtual override returns (uint256 amountToken, uint256 amountETH) { | |
address pair = UniswapV2Library.pairFor(factory, token, WETH); | |
uint256 value = approveMax ? uint256(-1) : liquidity; | |
IUniswapV2Pair(pair).permit(msg.sender, address(this), value, deadline, v, r, s); | |
(amountToken, amountETH) = removeLiquidityETH(token, liquidity, amountTokenMin, amountETHMin, to, deadline); | |
} | |
// **** REMOVE LIQUIDITY (supporting fee-on-transfer tokens) **** | |
function removeLiquidityETHSupportingFeeOnTransferTokens( | |
address token, | |
uint256 liquidity, | |
uint256 amountTokenMin, | |
uint256 amountETHMin, | |
address to, | |
uint256 deadline | |
) public virtual override ensure(deadline) returns (uint256 amountETH) { | |
(, amountETH) = removeLiquidity(token, WETH, liquidity, amountTokenMin, amountETHMin, address(this), deadline); | |
TransferHelper.safeTransfer(token, to, IERC20(token).balanceOf(address(this))); | |
IWETH(WETH).withdraw(amountETH); | |
TransferHelper.safeTransferETH(to, amountETH); | |
} | |
function removeLiquidityETHWithPermitSupportingFeeOnTransferTokens( | |
address token, | |
uint256 liquidity, | |
uint256 amountTokenMin, | |
uint256 amountETHMin, | |
address to, | |
uint256 deadline, | |
bool approveMax, | |
uint8 v, | |
bytes32 r, | |
bytes32 s | |
) external virtual override returns (uint256 amountETH) { | |
address pair = UniswapV2Library.pairFor(factory, token, WETH); | |
uint256 value = approveMax ? uint256(-1) : liquidity; | |
IUniswapV2Pair(pair).permit(msg.sender, address(this), value, deadline, v, r, s); | |
amountETH = removeLiquidityETHSupportingFeeOnTransferTokens( | |
token, | |
liquidity, | |
amountTokenMin, | |
amountETHMin, | |
to, | |
deadline | |
); | |
} | |
// **** SWAP **** | |
// requires the initial amount to have already been sent to the first pair | |
function _swap( | |
uint256[] memory amounts, | |
address[] memory path, | |
address _to | |
) internal virtual { | |
for (uint256 i; i < path.length - 1; i++) { | |
(address input, address output) = (path[i], path[i + 1]); | |
(address token0, ) = UniswapV2Library.sortTokens(input, output); | |
uint256 amountOut = amounts[i + 1]; | |
(uint256 amount0Out, uint256 amount1Out) = input == token0 | |
? (uint256(0), amountOut) | |
: (amountOut, uint256(0)); | |
address to = i < path.length - 2 ? UniswapV2Library.pairFor(factory, output, path[i + 2]) : _to; | |
IUniswapV2Pair(UniswapV2Library.pairFor(factory, input, output)).swap( | |
amount0Out, | |
amount1Out, | |
to, | |
new bytes(0) | |
); | |
} | |
} | |
function swapExactTokensForTokens( | |
uint256 amountIn, | |
uint256 amountOutMin, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external virtual override ensure(deadline) returns (uint256[] memory amounts) { | |
amounts = UniswapV2Library.getAmountsOut(factory, amountIn, path); | |
require(amounts[amounts.length - 1] >= amountOutMin, 'UniswapV2Router: INSUFFICIENT_OUTPUT_AMOUNT'); | |
TransferHelper.safeTransferFrom( | |
path[0], | |
msg.sender, | |
UniswapV2Library.pairFor(factory, path[0], path[1]), | |
amounts[0] | |
); | |
_swap(amounts, path, to); | |
} | |
function swapTokensForExactTokens( | |
uint256 amountOut, | |
uint256 amountInMax, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external virtual override ensure(deadline) returns (uint256[] memory amounts) { | |
amounts = UniswapV2Library.getAmountsIn(factory, amountOut, path); | |
require(amounts[0] <= amountInMax, 'UniswapV2Router: EXCESSIVE_INPUT_AMOUNT'); | |
TransferHelper.safeTransferFrom( | |
path[0], | |
msg.sender, | |
UniswapV2Library.pairFor(factory, path[0], path[1]), | |
amounts[0] | |
); | |
_swap(amounts, path, to); | |
} | |
function swapExactETHForTokens( | |
uint256 amountOutMin, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external virtual override payable ensure(deadline) returns (uint256[] memory amounts) { | |
require(path[0] == WETH, 'UniswapV2Router: INVALID_PATH'); | |
amounts = UniswapV2Library.getAmountsOut(factory, msg.value, path); | |
require(amounts[amounts.length - 1] >= amountOutMin, 'UniswapV2Router: INSUFFICIENT_OUTPUT_AMOUNT'); | |
IWETH(WETH).deposit{value: amounts[0]}(); | |
assert(IWETH(WETH).transfer(UniswapV2Library.pairFor(factory, path[0], path[1]), amounts[0])); | |
_swap(amounts, path, to); | |
} | |
function swapTokensForExactETH( | |
uint256 amountOut, | |
uint256 amountInMax, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external virtual override ensure(deadline) returns (uint256[] memory amounts) { | |
require(path[path.length - 1] == WETH, 'UniswapV2Router: INVALID_PATH'); | |
amounts = UniswapV2Library.getAmountsIn(factory, amountOut, path); | |
require(amounts[0] <= amountInMax, 'UniswapV2Router: EXCESSIVE_INPUT_AMOUNT'); | |
TransferHelper.safeTransferFrom( | |
path[0], | |
msg.sender, | |
UniswapV2Library.pairFor(factory, path[0], path[1]), | |
amounts[0] | |
); | |
_swap(amounts, path, address(this)); | |
IWETH(WETH).withdraw(amounts[amounts.length - 1]); | |
TransferHelper.safeTransferETH(to, amounts[amounts.length - 1]); | |
} | |
function swapExactTokensForETH( | |
uint256 amountIn, | |
uint256 amountOutMin, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external virtual override ensure(deadline) returns (uint256[] memory amounts) { | |
require(path[path.length - 1] == WETH, 'UniswapV2Router: INVALID_PATH'); | |
amounts = UniswapV2Library.getAmountsOut(factory, amountIn, path); | |
require(amounts[amounts.length - 1] >= amountOutMin, 'UniswapV2Router: INSUFFICIENT_OUTPUT_AMOUNT'); | |
TransferHelper.safeTransferFrom( | |
path[0], | |
msg.sender, | |
UniswapV2Library.pairFor(factory, path[0], path[1]), | |
amounts[0] | |
); | |
_swap(amounts, path, address(this)); | |
IWETH(WETH).withdraw(amounts[amounts.length - 1]); | |
TransferHelper.safeTransferETH(to, amounts[amounts.length - 1]); | |
} | |
function swapETHForExactTokens( | |
uint256 amountOut, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external virtual override payable ensure(deadline) returns (uint256[] memory amounts) { | |
require(path[0] == WETH, 'UniswapV2Router: INVALID_PATH'); | |
amounts = UniswapV2Library.getAmountsIn(factory, amountOut, path); | |
require(amounts[0] <= msg.value, 'UniswapV2Router: EXCESSIVE_INPUT_AMOUNT'); | |
IWETH(WETH).deposit{value: amounts[0]}(); | |
assert(IWETH(WETH).transfer(UniswapV2Library.pairFor(factory, path[0], path[1]), amounts[0])); | |
_swap(amounts, path, to); | |
// refund dust eth, if any | |
if (msg.value > amounts[0]) TransferHelper.safeTransferETH(msg.sender, msg.value - amounts[0]); | |
} | |
// **** SWAP (supporting fee-on-transfer tokens) **** | |
// requires the initial amount to have already been sent to the first pair | |
function _swapSupportingFeeOnTransferTokens(address[] memory path, address _to) internal virtual { | |
for (uint256 i; i < path.length - 1; i++) { | |
(address input, address output) = (path[i], path[i + 1]); | |
(address token0, ) = UniswapV2Library.sortTokens(input, output); | |
IUniswapV2Pair pair = IUniswapV2Pair(UniswapV2Library.pairFor(factory, input, output)); | |
uint256 amountInput; | |
uint256 amountOutput; | |
{ | |
// scope to avoid stack too deep errors | |
(uint256 reserve0, uint256 reserve1, ) = pair.getReserves(); | |
(uint256 reserveInput, uint256 reserveOutput) = input == token0 | |
? (reserve0, reserve1) | |
: (reserve1, reserve0); | |
amountInput = IERC20(input).balanceOf(address(pair)).sub(reserveInput); | |
amountOutput = UniswapV2Library.getAmountOut(amountInput, reserveInput, reserveOutput); | |
} | |
(uint256 amount0Out, uint256 amount1Out) = input == token0 | |
? (uint256(0), amountOutput) | |
: (amountOutput, uint256(0)); | |
address to = i < path.length - 2 ? UniswapV2Library.pairFor(factory, output, path[i + 2]) : _to; | |
pair.swap(amount0Out, amount1Out, to, new bytes(0)); | |
} | |
} | |
function swapExactTokensForTokensSupportingFeeOnTransferTokens( | |
uint256 amountIn, | |
uint256 amountOutMin, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external virtual override ensure(deadline) { | |
TransferHelper.safeTransferFrom( | |
path[0], | |
msg.sender, | |
UniswapV2Library.pairFor(factory, path[0], path[1]), | |
amountIn | |
); | |
uint256 balanceBefore = IERC20(path[path.length - 1]).balanceOf(to); | |
_swapSupportingFeeOnTransferTokens(path, to); | |
require( | |
IERC20(path[path.length - 1]).balanceOf(to).sub(balanceBefore) >= amountOutMin, | |
'UniswapV2Router: INSUFFICIENT_OUTPUT_AMOUNT' | |
); | |
} | |
function swapExactETHForTokensSupportingFeeOnTransferTokens( | |
uint256 amountOutMin, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external virtual override payable ensure(deadline) { | |
require(path[0] == WETH, 'UniswapV2Router: INVALID_PATH'); | |
uint256 amountIn = msg.value; | |
IWETH(WETH).deposit{value: amountIn}(); | |
assert(IWETH(WETH).transfer(UniswapV2Library.pairFor(factory, path[0], path[1]), amountIn)); | |
uint256 balanceBefore = IERC20(path[path.length - 1]).balanceOf(to); | |
_swapSupportingFeeOnTransferTokens(path, to); | |
require( | |
IERC20(path[path.length - 1]).balanceOf(to).sub(balanceBefore) >= amountOutMin, | |
'UniswapV2Router: INSUFFICIENT_OUTPUT_AMOUNT' | |
); | |
} | |
function swapExactTokensForETHSupportingFeeOnTransferTokens( | |
uint256 amountIn, | |
uint256 amountOutMin, | |
address[] calldata path, | |
address to, | |
uint256 deadline | |
) external virtual override ensure(deadline) { | |
require(path[path.length - 1] == WETH, 'UniswapV2Router: INVALID_PATH'); | |
TransferHelper.safeTransferFrom( | |
path[0], | |
msg.sender, | |
UniswapV2Library.pairFor(factory, path[0], path[1]), | |
amountIn | |
); | |
_swapSupportingFeeOnTransferTokens(path, address(this)); | |
uint256 amountOut = IERC20(WETH).balanceOf(address(this)); | |
require(amountOut >= amountOutMin, 'UniswapV2Router: INSUFFICIENT_OUTPUT_AMOUNT'); | |
IWETH(WETH).withdraw(amountOut); | |
TransferHelper.safeTransferETH(to, amountOut); | |
} | |
// **** LIBRARY FUNCTIONS **** | |
function quote( | |
uint256 amountA, | |
uint256 reserveA, | |
uint256 reserveB | |
) public virtual override pure returns (uint256 amountB) { | |
return UniswapV2Library.quote(amountA, reserveA, reserveB); | |
} | |
function getAmountOut( | |
uint256 amountIn, | |
uint256 reserveIn, | |
uint256 reserveOut | |
) public virtual override pure returns (uint256 amountOut) { | |
return UniswapV2Library.getAmountOut(amountIn, reserveIn, reserveOut); | |
} | |
function getAmountIn( | |
uint256 amountOut, | |
uint256 reserveIn, | |
uint256 reserveOut | |
) public virtual override pure returns (uint256 amountIn) { | |
return UniswapV2Library.getAmountIn(amountOut, reserveIn, reserveOut); | |
} | |
function getAmountsOut(uint256 amountIn, address[] memory path) | |
public | |
virtual | |
override | |
view | |
returns (uint256[] memory amounts) | |
{ | |
return UniswapV2Library.getAmountsOut(factory, amountIn, path); | |
} | |
function getAmountsIn(uint256 amountOut, address[] memory path) | |
public | |
virtual | |
override | |
view | |
returns (uint256[] memory amounts) | |
{ | |
return UniswapV2Library.getAmountsIn(factory, amountOut, path); | |
} | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment