eip: 7634
title: Limited Transferrable NFT
description: An ERC-721 extension to limit transferability based on counts among NFTs
author: Qin Wang (@qinwang-git), Saber Yu (@OniReimu), Shiping Chen shiping.chen@data61.csiro.au
status: Draft
type: Standards Track
category: ERC
created: 2024-02-22
requires: 165, 721
Abstract
This standard extends ERC-721 to allow minters to customize the transferability of NFTs by setting parameters via TransferCount. The standard introduces an interface with internal functions to facilitate this functionality.
Motivation
Once NFTs are sold, they detach from their minters (creators) and can be perpetually transferred thereafter. Yet, many circumstances demand precise control over NFT issuance. We outline their advantages across three dimensions.
Firstly, by imposing limitations on the frequency of NFT sales or trades, the worth of rare NFTs can be safeguarded. For example, in auctions, limiting the round of bids for a coveted item can uphold its premium price (especially in the Dutch Auction). Similarly, in the intellectual property sector, patents could be bounded by a finite number of transfers prior to becoming freely accessible (entering CC0). In the gaming sphere, items like weapons, apparel, and vehicles might possess a finite lifespan, with each usage or exchange contributing to wear and tear, culminating in automatic decommissioning (burn) upon reaching a predetermined threshold.
Secondly, enforcing restrictions on trading frequency can enhance network security and stability by mitigating the risks associated with malicious NFT arbitrage, including high-frequency trading (HFT). While this presents a common vulnerability, the lack of easily deployable and effective methods to address it has been notable, making our approach particularly valuable.
Additionally, limiting the round of transfers can mitigate the economic risks associated with (re)staking NFTs, thereby curbing potential bubbles. With the rapid evolution of restaking mechanisms, it’s foreseeable that users may soon engage in multiple rounds of NFT staking (e.g., NFT → stNFT → st^2NFT), akin to staking liquidity tokens with third-party platforms like EigenLayer (Ethereum), Babylon (Bitcoin), and Picasso (Solana). Notably, the current setup of EigenLayer employs an NFT as the restaking position (a type of proof-of-restake) for participants. Should this NFT be restaked repeatedly into the market, it could amplify leverage and exacerbate bubble dynamics. By imposing limits on the number of stake iterations, we can proactively prevent the emergence of Ponzi-like dynamics within staking ecosystems.
Specification
The key words “MUST”, “MUST NOT”, “REQUIRED”, “SHALL”, “SHALL NOT”, “SHOULD”, “SHOULD NOT”, “RECOMMENDED”, “MAY”, and “OPTIONAL” in this document are to be interpreted as described in RFC 2119.
setTransferLimit: a function establishes the transfer limit for a tokenId.transferLimitOf: a function retrieves the transfer limit for a tokenId.transferCountOf: a function returns the current transfer count for a tokenId._incrementTransferCount: an internal function facilitates incrementing the transfer count._beforeTokenTransfer: an overrided function defines the state before transfer._afterTokenTransfe: an overrided function outlines the state after transfer.
Implementers of this standard MUST have all of the following functions:
pragma solidity ^0.8.4;
import "@openzeppelin/contracts/token/ERC721/IERC721.sol";
/// @title IERC7634 Interface for Limited Transferable NFT
/// @dev Interface for ERC7634 Limited Transferable NFT extension for ERC721
/// @author Saber Yu
interface IERC7634 is IERC721 {
/**
* @dev Emitted when transfer count is set or updated
*/
event TransferCount(uint256 indexed tokenId, address owner, uint256 counts);
/**
* @dev Returns the current transfer count for a tokenId
*/
function transferCountOf(uint256 tokenId) external view returns (uint256);
/**
* @dev Sets the transfer limit for a tokenId. Can only be called by the token owner or an approved address.
* @param tokenId The ID of the token for which to set the limit
* @param limit The maximum number of transfers allowed for the token
*/
function setTransferLimit(uint256 tokenId, uint256 limit) external;
/**
* @dev Returns the transfer limit for a tokenId
*/
function transferLimitOf(uint256 tokenId) external view returns (uint256);
}
Rationale
Controlled Value Preservation: By allowing minters to set customized transfer limits for NFTs, this standard facilitates the preservation of value for digital assets Just as physical collectibles often gain or maintain value due to scarcity, limiting the number of transfers for an NFT can help ensure its continued value over time.
Ensuring Intended Usage: Setting transfer limits can ensure that NFTs are used in ways that align with their intended purpose. For example, if an NFT represents a limited-edition digital artwork, limiting transfers can prevent it from being excessively traded and potentially devalued.
Expanding Use Cases: These enhancements broaden the potential applications of NFTs by offering more control and flexibility to creators and owners. For instance, NFTs could be used to represent memberships or licenses with limited transferability, opening up new possibilities for digital ownership models.
Backwards Compatibility
This standard can be fully ERC-721 compatible by adding an extension function set.
Extensions
This standard can be enhanced with additional advanced functionalities alongside existing NFT protocols. For example:
-
Incorporating a burn function (e.g., ERC-5679) would enable NFTs to automatically expire after reaching their transfer limits, akin to the ephemeral nature of Snapchat messages that disappear after multiple views.
-
Incorporating a non-transferring function, as defined in the SBT standards, would enable NFTs to settle and bond with a single owner after a predetermined number of transactions. This functionality mirrors the scenario where a bidder ultimately secures a treasury after participating in multiple bidding rounds.
Reference Implementation
pragma solidity ^0.8.4;
import "@openzeppelin/contracts/token/ERC721/ERC721.sol";
import "./IERC7634.sol";
/// @title Limited Transferable NFT Extension for ERC721
/// @dev Implementation of the Limited Transferable NFT extension for ERC721
/// @author Saber Yu
contract ERC7634 is ERC721, IERC7634 {
// Mapping from tokenId to the transfer count
mapping(uint256 => uint256) private _transferCounts;
// Mapping from tokenId to its maximum transfer limit
mapping(uint256 => uint256) private _transferLimits;
/**
* @dev See {IERC7634-transferCountOf}.
*/
function transferCountOf(uint256 tokenId) public view override returns (uint256) {
require(_exists(tokenId), "ERC7634: Nonexistent token");
return _transferCounts[tokenId];
}
/**
* @dev See {IERC7634-setTransferLimit}.
*/
function setTransferLimit(uint256 tokenId, uint256 limit) public override {
require(_isApprovedOrOwner(_msgSender(), tokenId), "ERC7634: caller is not owner nor approved");
_transferLimits[tokenId] = limit;
}
/**
* @dev See {IERC7634-transferLimitOf}.
*/
function transferLimitOf(uint256 tokenId) public view override returns (uint256) {
require(_exists(tokenId), "ERC7634: Nonexistent token");
return _transferLimits[tokenId];
}
/**
* @dev Internal function to increment transfer count.
*/
function _incrementTransferCount(uint256 tokenId) internal {
_transferCounts[tokenId] += 1;
emit TransferCount(tokenId, ownerOf(tokenId), _transferCounts[tokenId]);
}
/**
* @dev Override {_beforeTokenTransfer} to enforce transfer limit.
*/
function _beforeTokenTransfer(
address from,
address to,
uint256 tokenId
) internal override {
require(_transferCounts[tokenId] < _transferLimits[tokenId], "ERC7634: Transfer limit reached");
super._beforeTokenTransfer(from, to, tokenId);
}
/**
* @dev Override {_afterTokenTransfer} to handle post-transfer logic.
*/
function _afterTokenTransfer(
address from,
address to,
uint256 tokenId,
uint256 quantity
) internal virtual override {
_incrementTransferCount(tokenId);
if (_transferCounts[tokenId] == _transferLimits[tokenId]) {
// Optional post-transfer operations once the limit is reached
// Uncomment the following based on the desired behavior such as the `burn` opearation
// ---------------------------------------
// _burn(tokenId); // Burn the token
// ---------------------------------------
}
super._afterTokenTransfer(from, to, tokenId, quantity);
}
/**
* @dev Override {supportsInterface} to declare support for IERC7634.
*/
function supportsInterface(bytes4 interfaceId) public view virtual override(IERC165, ERC721) returns (bool) {
return interfaceId == type(IERC7634).interfaceId || super.supportsInterface(interfaceId);
}
}
Security Considerations
- Ensure that each NFT minter can call this function to set transfer limits.
- Consider making transfer limits immutable once set to prevent tampering or unauthorized modifications.
- Avoid performing resource-intensive operations when integration with advanced functions that could exceed the gas limit during execution.
Copyright
Copyright and related rights waived via CC0.