Currently, mainstream NFT trading markets utilize the approve function to take control of users’ assets for order matching.
To save gas, trading markets request users to approve the max amount of ERC20 tokens and all ERC721 tokens, so users don’t need to approve each trade repeatedly. But this leaves a tremendous potential security threat: if the market contract is compromised, all users’ assets could be stolen.
So I want to discuss a more secure way of trading, learning from main trading markets’ offline listing and bidding mechanisms. We could store users’ one-time approval off-chain and make them expirable.
Extensions of token protocol
Add extension function to ERC20:
transferFromWithAuthority(address from, address to, uint256 amount, uint256 nonce, uint256 expiration, bytes signature)
Add extension function to ERC721:
function transferFromWithAuthority(address from, address to, uint256 tokenId, uint256 nonce, uint256 expiration, bytes signature)
Process of listing ERC721 token
- sign for approving ERC721 token
signer._signTypedData(
domain,
{
Approve: [
{ name: 'tokenId', type: 'uint256' },
{ name: 'operator', type: 'address' },
{ name: 'expiration', type: 'uint256' },
{ name: 'nonce', type: 'uint256' },
],
},
{
tokenId: 1,
operator: '0x0000000000000000000000000000000000000000',
expiration: 1653868800,
nonce: 1234567 // a random number, signature can only be used once
}
)
- sign for the market order
- order taker executing market contract
function atomicMatch(Order order, bytes orderSignature, uint256 authorityNonce, uint256 authorityExpiration, bytes nftAuthoritySignature) public payable {
require(validateOrder(order, orderSignature), 'Invalid order');
require(msg.value == order.amount, 'No enough value');
ERC721(order.itemAddress).transferFromWithAuthority(order.from, order.to, order.tokenId, authorityNonce, authorityExpiration, nftAuthoritySignature);
payable(order.maker).transfer(order.amount);
}
The marketplace then needs to store two signatures off-chain, one more comparing the mainstream market like the opensea. It seems there’s no way to sign only once for two contracts to operate.
Process of biding using ERC20 token
- sign for approving ERC20 token
signer._signTypedData(
domain,
{
Approve: [
{ name: 'spender', type: 'address' },
{ name: 'amount', type: 'uint256' },
{ name: 'expiration', type: 'uint256' },
{ name: 'nonce', type: 'uint256'},
],
},
{
spender: '0x0000000000000000000000000000000000000000',
amount: 1000000000000000000,
expiration: 1653868800,
nonce: 1234567, // a random number, signature can only be used once
}
)
- sign for the market order
- owner takes the bidding
function atomicMatch(
Order order, bytes orderSignature,
uint256 erc20AuthorityNonce, uint256 erc20AuthorityExpiration, bytes erc20AuthoritySignature,
uint256 erc721AuthorityNonce, uint256 erc721AuthorityExpiration, bytes erc721AuthoritySignature) {
require(validateOrder(order, orderSignature), 'Invalid order');
ERC20(order.paymentTokenAddress).transferFromWithAuthority(order.from, order.to, order.amount, erc20AuthorityNonce, erc20AuthorityExpiration, erc20AuthoritySignature);
ERC721(order.itemAddress).transferFromWithAuthority(order.from, order.to, order.tokenId, erc721AuthorityNonce, erc721AuthorityExpiration, erc721AuthoritySignature);
}