UniDex is a decentralized exchange for ERC20 tokens that allows users to swap tokens using limit orders. The team is also developing a dashboard to monitor users' liquidity pool positions and fees earned.
For this audit, we analyzed UniDex's contracts that handle the platform's Automated Market Maker platform with Limit Orders, currently integrated with Uniswap. Please note we did not analyze UniDex's token contract as part of this audit.
Notable security features of the contracts:
Users can swap tokens using limit order on the platform.
Relayers, for a fee similar to what Uniswap charges, are meant to look across exchanges to find prices that meets the user's limit order request and fulfil those orders using the most cost-effective route.
Currently the platform appears to only be integrated with Uniswap V2, with more integrations to come.
Utilization of SafeMath and SafeERC20 across all contracts to prevent overflows.
Audit Findings Summary:
As a precautionary measure against attacks, we reccomended an implementation of ReentrancyGuard in the LimitOrders contract. UniDex's team reviewed and ultimatley implemented our proposed change, further ensuring the security of the platform.
No security issues were identified.
Date: November 23rd, 2020
We ran over 400,000 transactions interacting with this suite of contracts on a test blockchain to determine these results. Date: November 23rd, 2020
// File: contracts/libs/SafeMath.sol
// SPDX-License-Identifier: GPL-2.0
pragma solidity ^0.6.8;
/**
* @dev Wrappers over Solidity's arithmetic operations with added overflow
* checks.
*
* Arithmetic operations in Solidity wrap on overflow. This can easily result
* in bugs, because programmers usually assume that an overflow raises an
* error, which is the standard behavior in high level programming languages.
* `SafeMath` restores this intuition by reverting the transaction when an
* operation overflows.
*
* Using this library instead of the unchecked operations eliminates an entire
* class of bugs, so it's recommended to use it always.
*/
library SafeMath {
/**
* @dev Returns the addition of two unsigned integers, reverting on
* overflow.
*
* Counterpart to Solidity's `+` operator.
*
* Requirements:
* - Addition cannot overflow.
*/
function add(uint256 a, uint256 b) internal pure returns (uint256) {
uint256 c = a + b;
require(c >= a, "SafeMath: addition overflow");
return c;
}
/**
* @dev Returns the subtraction of two unsigned integers, reverting on
* overflow (when the result is negative).
*
* Counterpart to Solidity's `-` operator.
*
* Requirements:
* - Subtraction cannot overflow.
*/
function sub(uint256 a, uint256 b) internal pure returns (uint256) {
return sub(a, b, "SafeMath: subtraction overflow");
}
/**
* @dev Returns the subtraction of two unsigned integers, reverting with custom message on
* overflow (when the result is negative).
*
* Counterpart to Solidity's `-` operator.
*
* Requirements:
* - Subtraction cannot overflow.
*/
function sub(uint256 a, uint256 b, string memory errorMessage) internal pure returns (uint256) {
require(b <= a, errorMessage);
uint256 c = a - b;
return c;
}
/**
* @dev Returns the multiplication of two unsigned integers, reverting on
* overflow.
*
* Counterpart to Solidity's `*` operator.
*
* Requirements:
* - Multiplication cannot overflow.
*/
function mul(uint256 a, uint256 b) internal pure returns (uint256) {
// Gas optimization: this is cheaper than requiring 'a' not being zero, but the
// benefit is lost if 'b' is also tested.
// See: https://github.com/OpenZeppelin/openzeppelin-contracts/pull/522
if (a == 0) {
return 0;
}
uint256 c = a * b;
require(c / a == b, "SafeMath: multiplication overflow");
return c;
}
/**
* @dev Returns the integer division of two unsigned integers. Reverts on
* division by zero. The result is rounded towards zero.
*
* Counterpart to Solidity's `/` operator. Note: this function uses a
* `revert` opcode (which leaves remaining gas untouched) while Solidity
* uses an invalid opcode to revert (consuming all remaining gas).
*
* Requirements:
* - The divisor cannot be zero.
*/
function div(uint256 a, uint256 b) internal pure returns (uint256) {
return div(a, b, "SafeMath: division by zero");
}
/**
* @dev Returns the integer division of two unsigned integers. Reverts with custom message on
* division by zero. The result is rounded towards zero.
*
* Counterpart to Solidity's `/` operator. Note: this function uses a
* `revert` opcode (which leaves remaining gas untouched) while Solidity
* uses an invalid opcode to revert (consuming all remaining gas).
*
* Requirements:
* - The divisor cannot be zero.
*/
function div(uint256 a, uint256 b, string memory errorMessage) internal pure returns (uint256) {
require(b > 0, errorMessage);
uint256 c = a / b;
// assert(a == b * c + a % b); // There is no case in which this doesn't hold
return c;
}
/**
* @dev Returns the remainder of dividing two unsigned integers. (unsigned integer modulo),
* Reverts when dividing by zero.
*
* Counterpart to Solidity's `%` operator. This function uses a `revert`
* opcode (which leaves remaining gas untouched) while Solidity uses an
* invalid opcode to revert (consuming all remaining gas).
*
* Requirements:
* - The divisor cannot be zero.
*/
function mod(uint256 a, uint256 b) internal pure returns (uint256) {
return mod(a, b, "SafeMath: modulo by zero");
}
/**
* @dev Returns the remainder of dividing two unsigned integers. (unsigned integer modulo),
* Reverts with custom message when dividing by zero.
*
* Counterpart to Solidity's `%` operator. This function uses a `revert`
* opcode (which leaves remaining gas untouched) while Solidity uses an
* invalid opcode to revert (consuming all remaining gas).
*
* Requirements:
* - The divisor cannot be zero.
*/
function mod(uint256 a, uint256 b, string memory errorMessage) internal pure returns (uint256) {
require(b != 0, errorMessage);
return a % b;
}
}
// File: contracts/libs/ECDSA.sol
pragma solidity ^0.6.8;
/**
* @dev Elliptic Curve Digital Signature Algorithm (ECDSA) operations.
*
* These functions can be used to verify that a message was signed by the holder
* of the private keys of a given address.
*/
library ECDSA {
/**
* @dev Returns the address that signed a hashed message (`hash`) with
* `signature`. This address can then be used for verification purposes.
*
* The `ecrecover` EVM opcode allows for malleable (non-unique) signatures:
* this function rejects them by requiring the `s` value to be in the lower
* half order, and the `v` value to be either 27 or 28.
*
* IMPORTANT: `hash` _must_ be the result of a hash operation for the
* verification to be secure: it is possible to craft signatures that
* recover to arbitrary addresses for non-hashed data. A safe way to ensure
* this is by receiving a hash of the original message (which may otherwise
* be too long), and then calling {toEthSignedMessageHash} on it.
*/
function recover(bytes32 hash, bytes memory signature) internal pure returns (address) {
// Check the signature length
if (signature.length != 65) {
revert("ECDSA: invalid signature length");
}
// Divide the signature in r, s and v variables
bytes32 r;
bytes32 s;
uint8 v;
// ecrecover takes the signature parameters, and the only way to get them
// currently is to use assembly.
// solhint-disable-next-line no-inline-assembly
assembly {
r := mload(add(signature, 0x20))
s := mload(add(signature, 0x40))
v := byte(0, mload(add(signature, 0x60)))
}
// EIP-2 still allows signature malleability for ecrecover(). Remove this possibility and make the signature
// unique. Appendix F in the Ethereum Yellow paper (https://ethereum.github.io/yellowpaper/paper.pdf), defines
// the valid range for s in (281): 0 < s < secp256k1n ÷ 2 + 1, and for v in (282): v ∈ {27, 28}. Most
// signatures from current libraries generate a unique signature with an s-value in the lower half order.
//
// If your library generates malleable signatures, such as s-values in the upper range, calculate a new s-value
// with 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141 - s1 and flip v from 27 to 28 or
// vice versa. If your library also generates signatures with 0/1 for v instead 27/28, add 27 to v to accept
// these malleable signatures as well.
if (uint256(s) > 0x7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF5D576E7357A4501DDFE92F46681B20A0) {
revert("ECDSA: invalid signature 's' value");
}
if (v != 27 && v != 28) {
revert("ECDSA: invalid signature 'v' value");
}
// If the signature is valid (and not malleable), return the signer address
address signer = ecrecover(hash, v, r, s);
require(signer != address(0), "ECDSA: invalid signature");
return signer;
}
/**
* @dev Returns an Ethereum Signed Message, created from a `hash`. This
* replicates the behavior of the
* https://github.com/ethereum/wiki/wiki/JSON-RPC#eth_sign[`eth_sign`]
* JSON-RPC method.
*
* See {recover}.
*/
function toEthSignedMessageHash(bytes32 hash) internal pure returns (bytes32) {
// 32 is the length in bytes of hash,
// enforced by the type signature above
return keccak256(abi.encodePacked("\x19Ethereum Signed Message:\n32", hash));
}
}
// File: contracts/interfaces/IERC20.sol
pragma solidity ^0.6.8;
/**
* @dev Interface of the ERC20 standard as defined in the EIP. Does not include
* the optional functions; to access them see {ERC20Detailed}.
*/
interface IERC20 {
/**
* @dev Returns the amount of tokens in existence.
*/
function totalSupply() external view returns (uint256);
/**
* @dev Returns the amount of tokens owned by `account`.
*/
function balanceOf(address account) external view returns (uint256);
/**
* @dev Moves `amount` tokens from the caller's account to `recipient`.
*
* Returns a boolean value indicating whether the operation succeeded.
*
* Emits a {Transfer} event.
*/
function transfer(address recipient, uint256 amount) external returns (bool);
/**
* @dev Returns the remaining number of tokens that `spender` will be
* allowed to spend on behalf of `owner` through {transferFrom}. This is
* zero by default.
*
* This value changes when {approve} or {transferFrom} are called.
*/
function allowance(address owner, address spender) external view returns (uint256);
/**
* @dev Sets `amount` as the allowance of `spender` over the caller's tokens.
*
* Returns a boolean value indicating whether the operation succeeded.
*
* IMPORTANT: Beware that changing an allowance with this method brings the risk
* that someone may use both the old and the new allowance by unfortunate
* transaction ordering. One possible solution to mitigate this race
* condition is to first reduce the spender's allowance to 0 and set the
* desired value afterwards:
* https://github.com/ethereum/EIPs/issues/20#issuecomment-263524729
*
* Emits an {Approval} event.
*/
function approve(address spender, uint256 amount) external returns (bool);
/**
* @dev Moves `amount` tokens from `sender` to `recipient` using the
* allowance mechanism. `amount` is then deducted from the caller's
* allowance.
*
* Returns a boolean value indicating whether the operation succeeded.
*
* Emits a {Transfer} event.
*/
function transferFrom(address sender, address recipient, uint256 amount) external returns (bool);
/**
* @dev Emitted when `value` tokens are moved from one account (`from`) to
* another (`to`).
*
* Note that `value` may be zero.
*/
event Transfer(address indexed from, address indexed to, uint256 value);
/**
* @dev Emitted when the allowance of a `spender` for an `owner` is set by
* a call to {approve}. `value` is the new allowance.
*/
event Approval(address indexed owner, address indexed spender, uint256 value);
}
// File: contracts/libs/Fabric.sol
pragma solidity ^0.6.8;
/**
* @title Fabric
* @dev Create deterministics vaults.
*/
library Fabric {
/*Vault bytecode
def _fallback() payable:
call cd[56] with:
funct call.data[0 len 4]
gas cd[56] wei
args call.data[4 len 64]
selfdestruct(tx.origin)
// Constructor bytecode
0x6012600081600A8239f3
0x60 12 - PUSH1 12 // Size of the contract to return
0x60 00 - PUSH1 00 // Memory offset to return stored code
0x81 - DUP2 12 // Size of code to copy
0x60 0a - PUSH1 0A // Start of the code to copy
0x82 - DUP3 00 // Dest memory for code copy
0x39 - CODECOPY 00 0A 12 // Code copy to memory
0xf3 - RETURN 00 12 // Return code to store
// Deployed contract bytecode
0x60008060448082803781806038355AF132FF
0x60 00 - PUSH1 00 // Size for the call output
0x80 - DUP1 00 // Offset for the call output
0x60 44 - PUSH1 44 // Size for the call input
0x80 - DUP1 44 // Size for copying calldata to memory
0x82 - DUP3 00 // Offset for calldata copy
0x80 - DUP1 00 // Offset for destination of calldata copy
0x37 - CALLDATACOPY 00 00 44 // Execute calldata copy, is going to be used for next call
0x81 - DUP2 00 // Offset for call input
0x80 - DUP1 00 // Amount of ETH to send during call
0x60 38 - PUSH1 38 // calldata pointer to load value into stack
0x35 - CALLDATALOAD 38 (A) // Load value (A), address to call
0x5a - GAS // Remaining gas
0xf1 - CALL (A) (A) 00 00 44 00 00 // Execute call to address (A) with calldata mem[0:64]
0x32 - ORIGIN (B) // Dest funds for selfdestruct
0xff - SELFDESTRUCT (B) // selfdestruct contract, end of execution
*/
bytes public constant code = hex"6012600081600A8239F360008060448082803781806038355AF132FF";
bytes32 public constant vaultCodeHash = bytes32(0xfa3da1081bc86587310fce8f3a5309785fc567b9b20875900cb289302d6bfa97);
/**
* @dev Get a deterministics vault.
*/
function getVault(bytes32 _key) internal view returns (address) {
return address(
uint256(
keccak256(
abi.encodePacked(
byte(0xff),
address(this),
_key,
vaultCodeHash
)
)
)
);
}
/**
* @dev Create deterministic vault.
*/
function executeVault(bytes32 _key, IERC20 _token, address _to) internal returns (uint256 value) {
address addr;
bytes memory slotcode = code;
/* solium-disable-next-line */
assembly{
// Create the contract arguments for the constructor
addr := create2(0, add(slotcode, 0x20), mload(slotcode), _key)
}
value = _token.balanceOf(addr);
/* solium-disable-next-line */
(bool success, ) = addr.call(
abi.encodePacked(
abi.encodeWithSelector(
_token.transfer.selector,
_to,
value
),
address(_token)
)
);
require(success, "Error pulling tokens");
}
}
// File: contracts/interfaces/IModule.sol
pragma solidity ^0.6.8;
interface IModule {
/// @notice receive ETH
receive() external payable;
/**
* @notice Executes an order
* @param _inputToken - Address of the input token
* @param _inputAmount - uint256 of the input token amount (order amount)
* @param _owner - Address of the order's owner
* @param _data - Bytes of the order's data
* @param _auxData - Bytes of the auxiliar data used for the handlers to execute the order
* @return bought - amount of output token bought
*/
function execute(
IERC20 _inputToken,
uint256 _inputAmount,
address payable _owner,
bytes calldata _data,
bytes calldata _auxData
) external returns (uint256 bought);
/**
* @notice Check whether an order can be executed or not
* @param _inputToken - Address of the input token
* @param _inputAmount - uint256 of the input token amount (order amount)
* @param _data - Bytes of the order's data
* @param _auxData - Bytes of the auxiliar data used for the handlers to execute the order
* @return bool - whether the order can be executed or not
*/
function canExecute(
IERC20 _inputToken,
uint256 _inputAmount,
bytes calldata _data,
bytes calldata _auxData
) external view returns (bool);
}
// File: contracts/commons/Order.sol
pragma solidity ^0.6.8;
contract Order {
address public constant ETH_ADDRESS = address(0x00eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee);
}
// File: contracts/UniDexCore.sol
pragma solidity ^0.6.8;
/// @notice Core contract used to create, cancel and execute orders.
contract UniDexCore is Order {
using SafeMath for uint256;
using Fabric for bytes32;
// ETH orders
mapping(bytes32 => uint256) public ethDeposits;
// Events
event DepositETH(
bytes32 indexed _key,
address indexed _caller,
uint256 _amount,
bytes _data
);
event OrderExecuted(
bytes32 indexed _key,
address _inputToken,
address _owner,
address _witness,
bytes _data,
bytes _auxData,
uint256 _amount,
uint256 _bought
);
event OrderCancelled(
bytes32 indexed _key,
address _inputToken,
address _owner,
address _witness,
bytes _data,
uint256 _amount
);
/**
* @dev Prevent users to send Ether directly to this contract
*/
receive() external payable {
require(
msg.sender != tx.origin,
"UniDexCore#receive: NO_SEND_ETH_PLEASE"
);
}
/**
* @notice Create an order from ETH to token
* @param _data - Bytes of an ETH to token. See `encodeEthOrder` for more info
*/
function depositEth(
bytes calldata _data
) external payable {
require(msg.value > 0, "UniDexCore#depositEth: VALUE_IS_0");
(
address module,
address inputToken,
address payable owner,
address witness,
bytes memory data,
) = decodeOrder(_data);
require(inputToken == ETH_ADDRESS, "UniDexCore#depositEth: WRONG_INPUT_TOKEN");
bytes32 key = keyOf(
IModule(uint160(module)),
IERC20(inputToken),
owner,
witness,
data
);
ethDeposits[key] = ethDeposits[key].add(msg.value);
emit DepositETH(key, msg.sender, msg.value, _data);
}
/**
* @notice Cancel order
* @dev The params should be the same used for the order creation
* @param _module - Address of the module to use for the order execution
* @param _inputToken - Address of the input token
* @param _owner - Address of the order's owner
* @param _witness - Address of the witness
* @param _data - Bytes of the order's data
*/
function cancelOrder(
IModule _module,
IERC20 _inputToken,
address payable _owner,
address _witness,
bytes calldata _data
) external {
require(msg.sender == _owner, "UniDexCore#cancelOrder: INVALID_OWNER");
bytes32 key = keyOf(
_module,
_inputToken,
_owner,
_witness,
_data
);
uint256 amount;
if (address(_inputToken) == ETH_ADDRESS) {
amount = ethDeposits[key];
ethDeposits[key] = 0;
(bool success,) = msg.sender.call{value: amount}("");
require(success, "UniDexCore#cancelOrder: ETHER_TRANSFER_FAILED");
} else {
amount = key.executeVault(_inputToken, msg.sender);
}
emit OrderCancelled(
key,
address(_inputToken),
_owner,
_witness,
_data,
amount
);
}
/**
* @notice Get the calldata needed to create a token to token/ETH order
* @dev Returns the input data that the user needs to use to create the order
* The _secret is used to prevent a front-running at the order execution
* The _amount is used as the param `_value` for the ERC20 `transfer` function
* @param _module - Address of the module to use for the order execution
* @param _inputToken - Address of the input token
* @param _owner - Address of the order's owner
* @param _witness - Address of the witness
* @param _data - Bytes of the order's data
* @param _secret - Private key of the _witness
* @param _amount - uint256 of the order amount
* @return bytes - input data to send the transaction
*/
function encodeTokenOrder(
IModule _module,
IERC20 _inputToken,
address payable _owner,
address _witness,
bytes calldata _data,
bytes32 _secret,
uint256 _amount
) external view returns (bytes memory) {
return abi.encodeWithSelector(
_inputToken.transfer.selector,
vaultOfOrder(
_module,
_inputToken,
_owner,
_witness,
_data
),
_amount,
abi.encode(
_module,
_inputToken,
_owner,
_witness,
_data,
_secret
)
);
}
/**
* @notice Get the calldata needed to create a ETH to token order
* @dev Returns the input data that the user needs to use to create the order
* The _secret is used to prevent a front-running at the order execution
* @param _module - Address of the module to use for the order execution
* @param _inputToken - Address of the input token
* @param _owner - Address of the order's owner
* @param _witness - Address of the witness
* @param _data - Bytes of the order's data
* @param _secret - Private key of the _witness
* @return bytes - input data to send the transaction
*/
function encodeEthOrder(
address _module,
address _inputToken,
address payable _owner,
address _witness,
bytes calldata _data,
bytes32 _secret
) external pure returns (bytes memory) {
return abi.encode(
_module,
_inputToken,
_owner,
_witness,
_data,
_secret
);
}
/**
* @notice Get order's properties
* @param _data - Bytes of the order
* @return module - Address of the module to use for the order execution
* @return inputToken - Address of the input token
* @return owner - Address of the order's owner
* @return witness - Address of the witness
* @return data - Bytes of the order's data
* @return secret - Private key of the _witness
*/
function decodeOrder(
bytes memory _data
) public pure returns (
address module,
address inputToken,
address payable owner,
address witness,
bytes memory data,
bytes32 secret
) {
(
module,
inputToken,
owner,
witness,
data,
secret
) = abi.decode(
_data,
(
address,
address,
address,
address,
bytes,
bytes32
)
);
}
/**
* @notice Get the vault's address of a token to token/ETH order
* @param _module - Address of the module to use for the order execution
* @param _inputToken - Address of the input token
* @param _owner - Address of the order's owner
* @param _witness - Address of the witness
* @param _data - Bytes of the order's data
* @return address - The address of the vault
*/
function vaultOfOrder(
IModule _module,
IERC20 _inputToken,
address payable _owner,
address _witness,
bytes memory _data
) public view returns (address) {
return keyOf(
_module,
_inputToken,
_owner,
_witness,
_data
).getVault();
}
/**
* @notice Executes an order
* @dev The sender should use the _secret to sign its own address
* to prevent front-runnings
* @param _module - Address of the module to use for the order execution
* @param _inputToken - Address of the input token
* @param _owner - Address of the order's owner
* @param _data - Bytes of the order's data
* @param _signature - Signature to calculate the witness
* @param _auxData - Bytes of the auxiliar data used for the handlers to execute the order
*/
function executeOrder(
IModule _module,
IERC20 _inputToken,
address payable _owner,
bytes calldata _data,
bytes calldata _signature,
bytes calldata _auxData
) external {
// Calculate witness using signature
address witness = ECDSA.recover(
keccak256(abi.encodePacked(msg.sender)),
_signature
);
bytes32 key = keyOf(
_module,
_inputToken,
_owner,
witness,
_data
);
// Pull amount
uint256 amount = _pullOrder(_inputToken, key, address(_module));
require(amount > 0, "UniDexCore#executeOrder: INVALID_ORDER");
uint256 bought = _module.execute(
_inputToken,
amount,
_owner,
_data,
_auxData
);
emit OrderExecuted(
key,
address(_inputToken),
_owner,
witness,
_data,
_auxData,
amount,
bought
);
}
/**
* @notice Check whether an order exists or not
* @dev Check the balance of the order
* @param _module - Address of the module to use for the order execution
* @param _inputToken - Address of the input token
* @param _owner - Address of the order's owner
* @param _witness - Address of the witness
* @param _data - Bytes of the order's data
* @return bool - whether the order exists or not
*/
function existOrder(
IModule _module,
IERC20 _inputToken,
address payable _owner,
address _witness,
bytes calldata _data
) external view returns (bool) {
bytes32 key = keyOf(
_module,
_inputToken,
_owner,
_witness,
_data
);
if (address(_inputToken) == ETH_ADDRESS) {
return ethDeposits[key] != 0;
} else {
return _inputToken.balanceOf(key.getVault()) != 0;
}
}
/**
* @notice Check whether an order can be executed or not
* @param _module - Address of the module to use for the order execution
* @param _inputToken - Address of the input token
* @param _owner - Address of the order's owner
* @param _witness - Address of the witness
* @param _data - Bytes of the order's data
* @param _auxData - Bytes of the auxiliar data used for the handlers to execute the order
* @return bool - whether the order can be executed or not
*/
function canExecuteOrder(
IModule _module,
IERC20 _inputToken,
address payable _owner,
address _witness,
bytes calldata _data,
bytes calldata _auxData
) external view returns (bool) {
bytes32 key = keyOf(
_module,
_inputToken,
_owner,
_witness,
_data
);
// Pull amount
uint256 amount;
if (address(_inputToken) == ETH_ADDRESS) {
amount = ethDeposits[key];
} else {
amount = _inputToken.balanceOf(key.getVault());
}
return _module.canExecute(
_inputToken,
amount,
_data,
_auxData
);
}
/**
* @notice Transfer the order amount to a recipient.
* @dev For an ETH order, the ETH will be transferred from this contract
* For a token order, its vault will be executed transferring the amount of tokens to
* the recipient
* @param _inputToken - Address of the input token
* @param _key - Order's key
* @param _to - Address of the recipient
* @return amount - amount transferred
*/
function _pullOrder(
IERC20 _inputToken,
bytes32 _key,
address payable _to
) private returns (uint256 amount) {
if (address(_inputToken) == ETH_ADDRESS) {
amount = ethDeposits[_key];
ethDeposits[_key] = 0;
(bool success,) = _to.call{value: amount}("");
require(success, "UniDexCore#_pullOrder: PULL_ETHER_FAILED");
} else {
amount = _key.executeVault(_inputToken, _to);
}
}
/**
* @notice Get the order's key
* @param _module - Address of the module to use for the order execution
* @param _inputToken - Address of the input token
* @param _owner - Address of the order's owner
* @param _witness - Address of the witness
* @param _data - Bytes of the order's data
* @return bytes32 - order's key
*/
function keyOf(
IModule _module,
IERC20 _inputToken,
address payable _owner,
address _witness,
bytes memory _data
) public pure returns (bytes32) {
return keccak256(
abi.encode(
_module,
_inputToken,
_owner,
_witness,
_data
)
);
}
}
Function Graph
Inheritence Chart
Functions Overview
($) = payable function
# = non-constant function
Int = Internal
Ext = External
Pub = Public
+ ReentrancyGuard
- [Int] #
+ [Int] IERC20
- [Ext] totalSupply
- [Ext] balanceOf
- [Ext] transfer #
- [Ext] allowance
- [Ext] approve #
- [Ext] transferFrom #
+ [Int] IModule
- [Ext] ($)
- [Ext] execute #
- [Ext] canExecute
+ [Int] IHandler
- [Ext] ($)
- [Ext] handle ($)
- [Ext] canHandle
+ Order
+ [Lib] SafeMath
- [Int] add
- [Int] sub
- [Int] sub
- [Int] mul
- [Int] div
- [Int] div
- [Int] mod
- [Int] mod
+ [Lib] SafeERC20
- [Int] transfer #
+ [Lib] UniDexUtils
- [Int] balanceOf
- [Int] transfer #
+ LimitOrders (IModule, Order, ReentrancyGuard)
- [Ext] ($)
- [Ext] execute #
- modifiers: nonReentrant
- [Ext] canExecute
- [Int] _transferAmount #
pragma solidity ^0.6.8;
// SPDX-License-Identifier: MIT
pragma solidity >=0.6.0 <0.8.0;
/**
* @dev Contract module that helps prevent reentrant calls to a function.
*
* Inheriting from `ReentrancyGuard` will make the {nonReentrant} modifier
* available, which can be applied to functions to make sure there are no nested
* (reentrant) calls to them.
*
* Note that because there is a single `nonReentrant` guard, functions marked as
* `nonReentrant` may not call one another. This can be worked around by making
* those functions `private`, and then adding `external` `nonReentrant` entry
* points to them.
*
* TIP: If you would like to learn more about reentrancy and alternative ways
* to protect against it, check out our blog post
* https://blog.openzeppelin.com/reentrancy-after-istanbul/[Reentrancy After Istanbul].
*/
abstract contract ReentrancyGuard {
// Booleans are more expensive than uint256 or any type that takes up a full
// word because each write operation emits an extra SLOAD to first read the
// slot's contents, replace the bits taken up by the boolean, and then write
// back. This is the compiler's defense against contract upgrades and
// pointer aliasing, and it cannot be disabled.
// The values being non-zero value makes deployment a bit more expensive,
// but in exchange the refund on every call to nonReentrant will be lower in
// amount. Since refunds are capped to a percentage of the total
// transaction's gas, it is best to keep them low in cases like this one, to
// increase the likelihood of the full refund coming into effect.
uint256 private constant _NOT_ENTERED = 1;
uint256 private constant _ENTERED = 2;
uint256 private _status;
constructor () internal {
_status = _NOT_ENTERED;
}
/**
* @dev Prevents a contract from calling itself, directly or indirectly.
* Calling a `nonReentrant` function from another `nonReentrant`
* function is not supported. It is possible to prevent this from happening
* by making the `nonReentrant` function external, and make it call a
* `private` function that does the actual work.
*/
modifier nonReentrant() {
// On the first call to nonReentrant, _notEntered will be true
require(_status != _ENTERED, "ReentrancyGuard: reentrant call");
// Any calls to nonReentrant after this point will fail
_status = _ENTERED;
_;
// By storing the original value once again, a refund is triggered (see
// https://eips.ethereum.org/EIPS/eip-2200)
_status = _NOT_ENTERED;
}
}
/**
* @dev Interface of the ERC20 standard as defined in the EIP. Does not include
* the optional functions; to access them see {ERC20Detailed}.
*/
interface IERC20 {
/**
* @dev Returns the amount of tokens in existence.
*/
function totalSupply() external view returns (uint256);
/**
* @dev Returns the amount of tokens owned by `account`.
*/
function balanceOf(address account) external view returns (uint256);
/**
* @dev Moves `amount` tokens from the caller's account to `recipient`.
*
* Returns a boolean value indicating whether the operation succeeded.
*
* Emits a {Transfer} event.
*/
function transfer(address recipient, uint256 amount) external returns (bool);
/**
* @dev Returns the remaining number of tokens that `spender` will be
* allowed to spend on behalf of `owner` through {transferFrom}. This is
* zero by default.
*
* This value changes when {approve} or {transferFrom} are called.
*/
function allowance(address owner, address spender) external view returns (uint256);
/**
* @dev Sets `amount` as the allowance of `spender` over the caller's tokens.
*
* Returns a boolean value indicating whether the operation succeeded.
*
* IMPORTANT: Beware that changing an allowance with this method brings the risk
* that someone may use both the old and the new allowance by unfortunate
* transaction ordering. One possible solution to mitigate this race
* condition is to first reduce the spender's allowance to 0 and set the
* desired value afterwards:
* https://github.com/ethereum/EIPs/issues/20#issuecomment-263524729
*
* Emits an {Approval} event.
*/
function approve(address spender, uint256 amount) external returns (bool);
/**
* @dev Moves `amount` tokens from `sender` to `recipient` using the
* allowance mechanism. `amount` is then deducted from the caller's
* allowance.
*
* Returns a boolean value indicating whether the operation succeeded.
*
* Emits a {Transfer} event.
*/
function transferFrom(address sender, address recipient, uint256 amount) external returns (bool);
/**
* @dev Emitted when `value` tokens are moved from one account (`from`) to
* another (`to`).
*
* Note that `value` may be zero.
*/
event Transfer(address indexed from, address indexed to, uint256 value);
/**
* @dev Emitted when the allowance of a `spender` for an `owner` is set by
* a call to {approve}. `value` is the new allowance.
*/
event Approval(address indexed owner, address indexed spender, uint256 value);
}
// File: contracts/interfaces/IModule.sol
pragma solidity ^0.6.8;
interface IModule {
/// @notice receive ETH
receive() external payable;
/**
* @notice Executes an order
* @param _inputToken - Address of the input token
* @param _inputAmount - uint256 of the input token amount (order amount)
* @param _owner - Address of the order's owner
* @param _data - Bytes of the order's data
* @param _auxData - Bytes of the auxiliar data used for the handlers to execute the order
* @return bought - amount of output token bought
*/
function execute(
IERC20 _inputToken,
uint256 _inputAmount,
address payable _owner,
bytes calldata _data,
bytes calldata _auxData
) external returns (uint256 bought);
/**
* @notice Check whether an order can be executed or not
* @param _inputToken - Address of the input token
* @param _inputAmount - uint256 of the input token amount (order amount)
* @param _data - Bytes of the order's data
* @param _auxData - Bytes of the auxiliar data used for the handlers to execute the order
* @return bool - whether the order can be executed or not
*/
function canExecute(
IERC20 _inputToken,
uint256 _inputAmount,
bytes calldata _data,
bytes calldata _auxData
) external view returns (bool);
}
// File: contracts/interfaces/IHandler.sol
pragma solidity ^0.6.8;
interface IHandler {
/// @notice receive ETH
receive() external payable;
/**
* @notice Handle an order execution
* @param _inputToken - Address of the input token
* @param _outputToken - Address of the output token
* @param _inputAmount - uint256 of the input token amount
* @param _minReturn - uint256 of the min return amount of output token
* @param _data - Bytes of arbitrary data
* @return bought - Amount of output token bought
*/
function handle(
IERC20 _inputToken,
IERC20 _outputToken,
uint256 _inputAmount,
uint256 _minReturn,
bytes calldata _data
) external payable returns (uint256 bought);
/**
* @notice Check whether can handle an order execution
* @param _inputToken - Address of the input token
* @param _outputToken - Address of the output token
* @param _inputAmount - uint256 of the input token amount
* @param _minReturn - uint256 of the min return amount of output token
* @param _data - Bytes of arbitrary data
* @return bool - Whether the execution can be handled or not
*/
function canHandle(
IERC20 _inputToken,
IERC20 _outputToken,
uint256 _inputAmount,
uint256 _minReturn,
bytes calldata _data
) external view returns (bool);
}
// File: contracts/commons/Order.sol
pragma solidity ^0.6.8;
contract Order {
address public constant ETH_ADDRESS = address(0x00eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee);
}
// File: contracts/libs/SafeMath.sol
pragma solidity ^0.6.8;
/**
* @dev Wrappers over Solidity's arithmetic operations with added overflow
* checks.
*
* Arithmetic operations in Solidity wrap on overflow. This can easily result
* in bugs, because programmers usually assume that an overflow raises an
* error, which is the standard behavior in high level programming languages.
* `SafeMath` restores this intuition by reverting the transaction when an
* operation overflows.
*
* Using this library instead of the unchecked operations eliminates an entire
* class of bugs, so it's recommended to use it always.
*/
library SafeMath {
/**
* @dev Returns the addition of two unsigned integers, reverting on
* overflow.
*
* Counterpart to Solidity's `+` operator.
*
* Requirements:
* - Addition cannot overflow.
*/
function add(uint256 a, uint256 b) internal pure returns (uint256) {
uint256 c = a + b;
require(c >= a, "SafeMath: addition overflow");
return c;
}
/**
* @dev Returns the subtraction of two unsigned integers, reverting on
* overflow (when the result is negative).
*
* Counterpart to Solidity's `-` operator.
*
* Requirements:
* - Subtraction cannot overflow.
*/
function sub(uint256 a, uint256 b) internal pure returns (uint256) {
return sub(a, b, "SafeMath: subtraction overflow");
}
/**
* @dev Returns the subtraction of two unsigned integers, reverting with custom message on
* overflow (when the result is negative).
*
* Counterpart to Solidity's `-` operator.
*
* Requirements:
* - Subtraction cannot overflow.
*/
function sub(uint256 a, uint256 b, string memory errorMessage) internal pure returns (uint256) {
require(b <= a, errorMessage);
uint256 c = a - b;
return c;
}
/**
* @dev Returns the multiplication of two unsigned integers, reverting on
* overflow.
*
* Counterpart to Solidity's `*` operator.
*
* Requirements:
* - Multiplication cannot overflow.
*/
function mul(uint256 a, uint256 b) internal pure returns (uint256) {
// Gas optimization: this is cheaper than requiring 'a' not being zero, but the
// benefit is lost if 'b' is also tested.
// See: https://github.com/OpenZeppelin/openzeppelin-contracts/pull/522
if (a == 0) {
return 0;
}
uint256 c = a * b;
require(c / a == b, "SafeMath: multiplication overflow");
return c;
}
/**
* @dev Returns the integer division of two unsigned integers. Reverts on
* division by zero. The result is rounded towards zero.
*
* Counterpart to Solidity's `/` operator. Note: this function uses a
* `revert` opcode (which leaves remaining gas untouched) while Solidity
* uses an invalid opcode to revert (consuming all remaining gas).
*
* Requirements:
* - The divisor cannot be zero.
*/
function div(uint256 a, uint256 b) internal pure returns (uint256) {
return div(a, b, "SafeMath: division by zero");
}
/**
* @dev Returns the integer division of two unsigned integers. Reverts with custom message on
* division by zero. The result is rounded towards zero.
*
* Counterpart to Solidity's `/` operator. Note: this function uses a
* `revert` opcode (which leaves remaining gas untouched) while Solidity
* uses an invalid opcode to revert (consuming all remaining gas).
*
* Requirements:
* - The divisor cannot be zero.
*/
function div(uint256 a, uint256 b, string memory errorMessage) internal pure returns (uint256) {
require(b > 0, errorMessage);
uint256 c = a / b;
// assert(a == b * c + a % b); // There is no case in which this doesn't hold
return c;
}
/**
* @dev Returns the remainder of dividing two unsigned integers. (unsigned integer modulo),
* Reverts when dividing by zero.
*
* Counterpart to Solidity's `%` operator. This function uses a `revert`
* opcode (which leaves remaining gas untouched) while Solidity uses an
* invalid opcode to revert (consuming all remaining gas).
*
* Requirements:
* - The divisor cannot be zero.
*/
function mod(uint256 a, uint256 b) internal pure returns (uint256) {
return mod(a, b, "SafeMath: modulo by zero");
}
/**
* @dev Returns the remainder of dividing two unsigned integers. (unsigned integer modulo),
* Reverts with custom message when dividing by zero.
*
* Counterpart to Solidity's `%` operator. This function uses a `revert`
* opcode (which leaves remaining gas untouched) while Solidity uses an
* invalid opcode to revert (consuming all remaining gas).
*
* Requirements:
* - The divisor cannot be zero.
*/
function mod(uint256 a, uint256 b, string memory errorMessage) internal pure returns (uint256) {
require(b != 0, errorMessage);
return a % b;
}
}
// File: contracts/libs/SafeERC20.sol
pragma solidity ^0.6.8;
library SafeERC20 {
function transfer(IERC20 _token, address _to, uint256 _val) internal returns (bool) {
(bool success, bytes memory data) = address(_token).call(abi.encodeWithSelector(_token.transfer.selector, _to, _val));
return success && (data.length == 0 || abi.decode(data, (bool)));
}
}
// File: contracts/libs/UniDexUtils.sol
pragma solidity ^0.6.8;
library UniDexUtils {
address internal constant ETH_ADDRESS = address(0x00eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee);
/**
* @notice Get the account's balance of token or ETH
* @param _token - Address of the token
* @param _addr - Address of the account
* @return uint256 - Account's balance of token or ETH
*/
function balanceOf(IERC20 _token, address _addr) internal view returns (uint256) {
if (ETH_ADDRESS == address(_token)) {
return _addr.balance;
}
return _token.balanceOf(_addr);
}
/**
* @notice Transfer token or ETH to a destinatary
* @param _token - Address of the token
* @param _to - Address of the recipient
* @param _val - Uint256 of the amount to transfer
* @return bool - Whether the transfer was success or not
*/
function transfer(IERC20 _token, address _to, uint256 _val) internal returns (bool) {
if (ETH_ADDRESS == address(_token)) {
(bool success, ) = _to.call{value:_val}("");
return success;
}
return SafeERC20.transfer(_token, _to, _val);
}
}
// File: contracts/modules/LimitOrders.sol
pragma solidity ^0.6.8;
/*
* Original work by Pine.Finance
* - https://github.com/pine-finance
* Modified by UniDex.Finance
* - https://github.com/supakawaiidesu
* Authors:
* - Agustin Aguilar
* - Ignacio Mazzara
*/
contract LimitOrders is IModule, Order, ReentrancyGuard {
using SafeMath for uint256;
/// @notice receive ETH
receive() external override payable { }
/**
* @notice Executes an order
* @param _inputToken - Address of the input token
* @param _owner - Address of the order's owner
* @param _data - Bytes of the order's data
* @param _auxData - Bytes of the auxiliar data used for the handlers to execute the order
* @return bought - amount of output token bought
*/
function execute(
IERC20 _inputToken,
uint256,
address payable _owner,
bytes calldata _data,
bytes calldata _auxData
) nonReentrant external override returns (uint256 bought) {
(
IERC20 outputToken,
uint256 minReturn
) = abi.decode(
_data,
(
IERC20,
uint256
)
);
(IHandler handler) = abi.decode(_auxData, (IHandler));
// Do not trust on _inputToken, it can mismatch the real balance
uint256 inputAmount = UniDexUtils.balanceOf(_inputToken, address(this));
_transferAmount(_inputToken, address(handler), inputAmount);
handler.handle(
_inputToken,
outputToken,
inputAmount,
minReturn,
_auxData
);
bought = UniDexUtils.balanceOf(outputToken, address(this));
require(bought >= minReturn, "LimitOrders#execute: ISSUFICIENT_BOUGHT_TOKENS");
_transferAmount(outputToken, _owner, bought);
return bought;
}
/**
* @notice Check whether an order can be executed or not
* @param _inputToken - Address of the input token
* @param _inputAmount - uint256 of the input token amount (order amount)
* @param _data - Bytes of the order's data
* @param _auxData - Bytes of the auxiliar data used for the handlers to execute the order
* @return bool - whether the order can be executed or not
*/
function canExecute(
IERC20 _inputToken,
uint256 _inputAmount,
bytes calldata _data,
bytes calldata _auxData
) external override view returns (bool) {
(
IERC20 outputToken,
uint256 minReturn
) = abi.decode(
_data,
(
IERC20,
uint256
)
);
(IHandler handler) = abi.decode(_auxData, (IHandler));
return handler.canHandle(
_inputToken,
outputToken,
_inputAmount,
minReturn,
_auxData
);
}
/**
* @notice Transfer token or Ether amount to a recipient
* @param _token - Address of the token
* @param _to - Address of the recipient
* @param _amount - uint256 of the amount to be transferred
*/
function _transferAmount(
IERC20 _token,
address payable _to,
uint256 _amount
) internal {
if (address(_token) == ETH_ADDRESS) {
(bool success,) = _to.call{value: _amount}("");
require(success, "LimitOrders#_transferAmount: ETH_TRANSFER_FAILED");
} else {
require(SafeERC20.transfer(_token, _to, _amount), "LimitOrders#_transferAmount: TOKEN_TRANSFER_FAILED");
}
}
}
// File: contracts/interfaces/IERC20.sol
// SPDX-License-Identifier: GPL-2.0
pragma solidity ^0.6.8;
/**
* @dev Interface of the ERC20 standard as defined in the EIP. Does not include
* the optional functions; to access them see {ERC20Detailed}.
*/
interface IERC20 {
/**
* @dev Returns the amount of tokens in existence.
*/
function totalSupply() external view returns (uint256);
/**
* @dev Returns the amount of tokens owned by `account`.
*/
function balanceOf(address account) external view returns (uint256);
/**
* @dev Moves `amount` tokens from the caller's account to `recipient`.
*
* Returns a boolean value indicating whether the operation succeeded.
*
* Emits a {Transfer} event.
*/
function transfer(address recipient, uint256 amount) external returns (bool);
/**
* @dev Returns the remaining number of tokens that `spender` will be
* allowed to spend on behalf of `owner` through {transferFrom}. This is
* zero by default.
*
* This value changes when {approve} or {transferFrom} are called.
*/
function allowance(address owner, address spender) external view returns (uint256);
/**
* @dev Sets `amount` as the allowance of `spender` over the caller's tokens.
*
* Returns a boolean value indicating whether the operation succeeded.
*
* IMPORTANT: Beware that changing an allowance with this method brings the risk
* that someone may use both the old and the new allowance by unfortunate
* transaction ordering. One possible solution to mitigate this race
* condition is to first reduce the spender's allowance to 0 and set the
* desired value afterwards:
* https://github.com/ethereum/EIPs/issues/20#issuecomment-263524729
*
* Emits an {Approval} event.
*/
function approve(address spender, uint256 amount) external returns (bool);
/**
* @dev Moves `amount` tokens from `sender` to `recipient` using the
* allowance mechanism. `amount` is then deducted from the caller's
* allowance.
*
* Returns a boolean value indicating whether the operation succeeded.
*
* Emits a {Transfer} event.
*/
function transferFrom(address sender, address recipient, uint256 amount) external returns (bool);
/**
* @dev Emitted when `value` tokens are moved from one account (`from`) to
* another (`to`).
*
* Note that `value` may be zero.
*/
event Transfer(address indexed from, address indexed to, uint256 value);
/**
* @dev Emitted when the allowance of a `spender` for an `owner` is set by
* a call to {approve}. `value` is the new allowance.
*/
event Approval(address indexed owner, address indexed spender, uint256 value);
}
// File: contracts/interfaces/IWETH.sol
pragma solidity ^0.6.8;
interface IWETH is IERC20 {
function deposit() external payable;
function withdraw(uint wad) external;
}
// File: contracts/interfaces/IHandler.sol
pragma solidity ^0.6.8;
interface IHandler {
/// @notice receive ETH
receive() external payable;
/**
* @notice Handle an order execution
* @param _inputToken - Address of the input token
* @param _outputToken - Address of the output token
* @param _inputAmount - uint256 of the input token amount
* @param _minReturn - uint256 of the min return amount of output token
* @param _data - Bytes of arbitrary data
* @return bought - Amount of output token bought
*/
function handle(
IERC20 _inputToken,
IERC20 _outputToken,
uint256 _inputAmount,
uint256 _minReturn,
bytes calldata _data
) external payable returns (uint256 bought);
/**
* @notice Check whether can handle an order execution
* @param _inputToken - Address of the input token
* @param _outputToken - Address of the output token
* @param _inputAmount - uint256 of the input token amount
* @param _minReturn - uint256 of the min return amount of output token
* @param _data - Bytes of arbitrary data
* @return bool - Whether the execution can be handled or not
*/
function canHandle(
IERC20 _inputToken,
IERC20 _outputToken,
uint256 _inputAmount,
uint256 _minReturn,
bytes calldata _data
) external view returns (bool);
}
// File: contracts/interfaces/uniswapV2/IUniswapV2Pair.sol
pragma solidity >0.5.8;
interface IUniswapV2Pair {
event Approval(address indexed owner, address indexed spender, uint value);
event Transfer(address indexed from, address indexed to, uint value);
event Mint(address indexed sender, uint amount0, uint amount1);
event Burn(address indexed sender, uint amount0, uint amount1, address indexed to);
event Swap(
address indexed sender,
uint amount0In,
uint amount1In,
uint amount0Out,
uint amount1Out,
address indexed to
);
event Sync(uint112 reserve0, uint112 reserve1);
function MINIMUM_LIQUIDITY() external pure returns (uint);
function factory() external view returns (address);
function token0() external view returns (address);
function token1() external view returns (address);
function getReserves() external view returns (uint112 reserve0, uint112 reserve1, uint32 blockTimestampLast);
function price0CumulativeLast() external view returns (uint);
function price1CumulativeLast() external view returns (uint);
function kLast() external view returns (uint);
function mint(address to) external returns (uint liquidity);
function burn(address to) external returns (uint amount0, uint amount1);
function swap(uint amount0Out, uint amount1Out, address to, bytes calldata data) external;
function skim(address to) external;
function sync() external;
function initialize(address, address) external;
}
// File: contracts/libs/SafeMath.sol
pragma solidity ^0.6.8;
/**
* @dev Wrappers over Solidity's arithmetic operations with added overflow
* checks.
*
* Arithmetic operations in Solidity wrap on overflow. This can easily result
* in bugs, because programmers usually assume that an overflow raises an
* error, which is the standard behavior in high level programming languages.
* `SafeMath` restores this intuition by reverting the transaction when an
* operation overflows.
*
* Using this library instead of the unchecked operations eliminates an entire
* class of bugs, so it's recommended to use it always.
*/
library SafeMath {
/**
* @dev Returns the addition of two unsigned integers, reverting on
* overflow.
*
* Counterpart to Solidity's `+` operator.
*
* Requirements:
* - Addition cannot overflow.
*/
function add(uint256 a, uint256 b) internal pure returns (uint256) {
uint256 c = a + b;
require(c >= a, "SafeMath: addition overflow");
return c;
}
/**
* @dev Returns the subtraction of two unsigned integers, reverting on
* overflow (when the result is negative).
*
* Counterpart to Solidity's `-` operator.
*
* Requirements:
* - Subtraction cannot overflow.
*/
function sub(uint256 a, uint256 b) internal pure returns (uint256) {
return sub(a, b, "SafeMath: subtraction overflow");
}
/**
* @dev Returns the subtraction of two unsigned integers, reverting with custom message on
* overflow (when the result is negative).
*
* Counterpart to Solidity's `-` operator.
*
* Requirements:
* - Subtraction cannot overflow.
*/
function sub(uint256 a, uint256 b, string memory errorMessage) internal pure returns (uint256) {
require(b <= a, errorMessage);
uint256 c = a - b;
return c;
}
/**
* @dev Returns the multiplication of two unsigned integers, reverting on
* overflow.
*
* Counterpart to Solidity's `*` operator.
*
* Requirements:
* - Multiplication cannot overflow.
*/
function mul(uint256 a, uint256 b) internal pure returns (uint256) {
// Gas optimization: this is cheaper than requiring 'a' not being zero, but the
// benefit is lost if 'b' is also tested.
// See: https://github.com/OpenZeppelin/openzeppelin-contracts/pull/522
if (a == 0) {
return 0;
}
uint256 c = a * b;
require(c / a == b, "SafeMath: multiplication overflow");
return c;
}
/**
* @dev Returns the integer division of two unsigned integers. Reverts on
* division by zero. The result is rounded towards zero.
*
* Counterpart to Solidity's `/` operator. Note: this function uses a
* `revert` opcode (which leaves remaining gas untouched) while Solidity
* uses an invalid opcode to revert (consuming all remaining gas).
*
* Requirements:
* - The divisor cannot be zero.
*/
function div(uint256 a, uint256 b) internal pure returns (uint256) {
return div(a, b, "SafeMath: division by zero");
}
/**
* @dev Returns the integer division of two unsigned integers. Reverts with custom message on
* division by zero. The result is rounded towards zero.
*
* Counterpart to Solidity's `/` operator. Note: this function uses a
* `revert` opcode (which leaves remaining gas untouched) while Solidity
* uses an invalid opcode to revert (consuming all remaining gas).
*
* Requirements:
* - The divisor cannot be zero.
*/
function div(uint256 a, uint256 b, string memory errorMessage) internal pure returns (uint256) {
require(b > 0, errorMessage);
uint256 c = a / b;
// assert(a == b * c + a % b); // There is no case in which this doesn't hold
return c;
}
/**
* @dev Returns the remainder of dividing two unsigned integers. (unsigned integer modulo),
* Reverts when dividing by zero.
*
* Counterpart to Solidity's `%` operator. This function uses a `revert`
* opcode (which leaves remaining gas untouched) while Solidity uses an
* invalid opcode to revert (consuming all remaining gas).
*
* Requirements:
* - The divisor cannot be zero.
*/
function mod(uint256 a, uint256 b) internal pure returns (uint256) {
return mod(a, b, "SafeMath: modulo by zero");
}
/**
* @dev Returns the remainder of dividing two unsigned integers. (unsigned integer modulo),
* Reverts with custom message when dividing by zero.
*
* Counterpart to Solidity's `%` operator. This function uses a `revert`
* opcode (which leaves remaining gas untouched) while Solidity uses an
* invalid opcode to revert (consuming all remaining gas).
*
* Requirements:
* - The divisor cannot be zero.
*/
function mod(uint256 a, uint256 b, string memory errorMessage) internal pure returns (uint256) {
require(b != 0, errorMessage);
return a % b;
}
}
// File: contracts/libs/UniswapUtils.sol
pragma solidity ^0.6.8;
library UniswapUtils {
using SafeMath for uint256;
/**
* @notice Returns the current block timestamp within the range of uint32, i.e. [0, 2**32 - 1]
* @return uint32 - block timestamp
*/
function currentBlockTimestamp() internal view returns (uint32) {
return uint32(block.timestamp % 2 ** 32);
}
/**
* @notice Returns sorted token addresses, used to handle return values from pairs sorted in this order
* @param _tokenA - Address of the token A
* @param _tokenB - Address of the token B
* @return token0 - Address of the lower token
* @return token1 - Address of the higher token
*/
function sortTokens(address _tokenA, address _tokenB) internal pure returns (address token0, address token1) {
require(_tokenA != _tokenB, 'UniswapUtils#sortTokens: IDENTICAL_ADDRESSES');
(token0, token1) = _tokenA < _tokenB ? (_tokenA, _tokenB) : (_tokenB, _tokenA);
require(token0 != address(0), 'UniswapUtils#sortTokens: ZERO_ADDRESS');
}
/**
* @notice Calculates the CREATE2 address for a pair without making any external calls
* @param _factory - Address of the uniswapV2 factory contract
* @param _tokenA - Address of the token A
* @param _tokenB - Address of the token B
* @param _initCodeHash - Bytes32 of the uniswap v2 pair contract unit code hash
* @return pair - Address of the pair
*/
function pairFor(address _factory, address _tokenA, address _tokenB, bytes32 _initCodeHash) internal pure returns (address pair) {
(address token0, address token1) = sortTokens(_tokenA, _tokenB);
pair = address(uint(keccak256(abi.encodePacked(
hex'ff',
_factory,
keccak256(abi.encodePacked(token0, token1)),
_initCodeHash // init code hash
))));
}
/**
* @notice Calculates the CREATE2 address for a pair without making any external calls
* @dev Tokens should be in order
* @param _factory - Address of the uniswapV2 factory contract
* @param _token0 - Address of the token 0
* @param _token1 - Address of the token 1
* @param _initCodeHash - Bytes32 of the uniswap v2 pair contract unit code hash
* @return pair - Address of the pair
*/
function pairForSorted(address _factory, address _token0, address _token1, bytes32 _initCodeHash) internal pure returns (address pair) {
pair = address(uint(keccak256(abi.encodePacked(
hex'ff',
_factory,
keccak256(abi.encodePacked(_token0, _token1)),
_initCodeHash // init code hash
))));
}
/**
* @notice Given an input amount of an asset and pair reserves, returns the maximum output amount of the other asset
* @param _amountIn - uint of the input token's amount
* @param _reserveIn - uint of the input token's reserve
* @param _reserveOut - uint of the output token's reserve
* @return amountOut - Maximum output amount
*/
function getAmountOut(uint _amountIn, uint _reserveIn, uint _reserveOut) internal pure returns (uint amountOut) {
require(_amountIn > 0, 'UniswapUtils#getAmountOut: INSUFFICIENT_INPUT_AMOUNT');
require(_reserveIn > 0 && _reserveOut > 0, 'UniswapUtils#getAmountOut: INSUFFICIENT_LIQUIDITY');
uint amountInWithFee = _amountIn.mul(997);
uint numerator = amountInWithFee.mul(_reserveOut);
uint denominator = _reserveIn.mul(1000).add(amountInWithFee);
amountOut = numerator / denominator;
}
}
// File: contracts/libs/SafeERC20.sol
pragma solidity ^0.6.8;
library SafeERC20 {
function transfer(IERC20 _token, address _to, uint256 _val) internal returns (bool) {
(bool success, bytes memory data) = address(_token).call(abi.encodeWithSelector(_token.transfer.selector, _to, _val));
return success && (data.length == 0 || abi.decode(data, (bool)));
}
}
// File: contracts/libs/UniDexUtils.sol
pragma solidity ^0.6.8;
library UniDexUtils {
address internal constant ETH_ADDRESS = address(0x00eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee);
/**
* @notice Get the account's balance of token or ETH
* @param _token - Address of the token
* @param _addr - Address of the account
* @return uint256 - Account's balance of token or ETH
*/
function balanceOf(IERC20 _token, address _addr) internal view returns (uint256) {
if (ETH_ADDRESS == address(_token)) {
return _addr.balance;
}
return _token.balanceOf(_addr);
}
/**
* @notice Transfer token or ETH to a destinatary
* @param _token - Address of the token
* @param _to - Address of the recipient
* @param _val - Uint256 of the amount to transfer
* @return bool - Whether the transfer was success or not
*/
function transfer(IERC20 _token, address _to, uint256 _val) internal returns (bool) {
if (ETH_ADDRESS == address(_token)) {
(bool success, ) = _to.call{value:_val}("");
return success;
}
return SafeERC20.transfer(_token, _to, _val);
}
}
// File: contracts/handlers/UniswapV2Handler.sol
pragma solidity ^0.6.8;
/// @notice UniswapV2 Handler used to execute an order
contract UniswapV2Handler is IHandler {
using SafeMath for uint256;
IWETH public immutable WETH;
address public immutable FACTORY;
bytes32 public immutable FACTORY_CODE_HASH;
/**
* @notice Creates the handler
* @param _factory - Address of the uniswap v2 factory contract
* @param _weth - Address of WETH contract
* @param _codeHash - Bytes32 of the uniswap v2 pair contract unit code hash
*/
constructor(address _factory, IWETH _weth, bytes32 _codeHash) public {
FACTORY = _factory;
WETH = _weth;
FACTORY_CODE_HASH = _codeHash;
}
/// @notice receive ETH
receive() external override payable {
require(msg.sender != tx.origin, "UniswapV2Handler#receive: NO_SEND_ETH_PLEASE");
}
/**
* @notice Handle an order execution
* @param _inputToken - Address of the input token
* @param _outputToken - Address of the output token
* @param _data - Bytes of arbitrary data
* @return bought - Amount of output token bought
*/
function handle(
IERC20 _inputToken,
IERC20 _outputToken,
uint256,
uint256,
bytes calldata _data
) external payable override returns (uint256 bought) {
// Load real initial balance, don't trust provided value
uint256 amount = UniDexUtils.balanceOf(_inputToken, address(this));
address inputToken = address(_inputToken);
address outputToken = address(_outputToken);
address weth = address(WETH);
// Decode extra data
(,address relayer, uint256 fee) = abi.decode(_data, (address, address, uint256));
if (inputToken == weth || inputToken == UniDexUtils.ETH_ADDRESS) {
// Swap WETH -> outputToken
amount = amount.sub(fee);
// Convert from ETH to WETH if necessary
if (inputToken == UniDexUtils.ETH_ADDRESS) {
WETH.deposit{ value: amount }();
inputToken = weth;
} else {
WETH.withdraw(fee);
}
// Trade
bought = _swap(inputToken, outputToken, amount, msg.sender);
} else if (outputToken == weth || outputToken == UniDexUtils.ETH_ADDRESS) {
// Swap inputToken -> WETH
bought = _swap(inputToken, weth, amount, address(this));
// Convert from WETH to ETH if necessary
if (outputToken == UniDexUtils.ETH_ADDRESS) {
WETH.withdraw(bought);
} else {
WETH.withdraw(fee);
}
// Transfer amount to sender
bought = bought.sub(fee);
UniDexUtils.transfer(IERC20(outputToken), msg.sender, bought);
} else {
// Swap inputToken -> WETH -> outputToken
// - inputToken -> WETH
bought = _swap(inputToken, weth, amount, address(this));
// Withdraw fee
WETH.withdraw(fee);
// - WETH -> outputToken
bought = _swap(weth, outputToken, bought.sub(fee), msg.sender);
}
// Send fee to relayer
(bool successRelayer,) = relayer.call{value: fee}("");
require(successRelayer, "UniswapV2Handler#handle: TRANSFER_ETH_TO_RELAYER_FAILED");
}
/**
* @notice Check whether can handle an order execution
* @param _inputToken - Address of the input token
* @param _outputToken - Address of the output token
* @param _inputAmount - uint256 of the input token amount
* @param _minReturn - uint256 of the min return amount of output token
* @param _data - Bytes of arbitrary data
* @return bool - Whether the execution can be handled or not
*/
function canHandle(
IERC20 _inputToken,
IERC20 _outputToken,
uint256 _inputAmount,
uint256 _minReturn,
bytes calldata _data
) external override view returns (bool) {
address inputToken = address(_inputToken);
address outputToken = address(_outputToken);
address weth = address(WETH);
// Decode extra data
(,, uint256 fee) = abi.decode(_data, (address, address, uint256));
if (inputToken == weth || inputToken == UniDexUtils.ETH_ADDRESS) {
if (_inputAmount <= fee) {
return false;
}
return _estimate(weth, outputToken, _inputAmount.sub(fee)) >= _minReturn;
} else if (outputToken == weth || outputToken == UniDexUtils.ETH_ADDRESS) {
uint256 bought = _estimate(inputToken, weth, _inputAmount);
if (bought <= fee) {
return false;
}
return bought.sub(fee) >= _minReturn;
} else {
uint256 bought = _estimate(inputToken, weth, _inputAmount);
if (bought <= fee) {
return false;
}
return _estimate(weth, outputToken, bought.sub(fee)) >= _minReturn;
}
}
/**
* @notice Simulate an order execution
* @param _inputToken - Address of the input token
* @param _outputToken - Address of the output token
* @param _inputAmount - uint256 of the input token amount
* @param _minReturn - uint256 of the min return amount of output token
* @param _data - Bytes of arbitrary data
* @return bool - Whether the execution can be handled or not
* @return uint256 - Amount of output token bought
*/
function simulate(
IERC20 _inputToken,
IERC20 _outputToken,
uint256 _inputAmount,
uint256 _minReturn,
bytes calldata _data
) external view returns (bool, uint256) {
address inputToken = address(_inputToken);
address outputToken = address(_outputToken);
address weth = address(WETH);
// Decode extra data
(,, uint256 fee) = abi.decode(_data, (address, address, uint256));
uint256 bought;
if (inputToken == weth || inputToken == UniDexUtils.ETH_ADDRESS) {
if (_inputAmount <= fee) {
return (false, 0);
}
bought = _estimate(weth, outputToken, _inputAmount.sub(fee));
} else if (outputToken == weth || outputToken == UniDexUtils.ETH_ADDRESS) {
bought = _estimate(inputToken, weth, _inputAmount);
if (bought <= fee) {
return (false, 0);
}
bought = bought.sub(fee);
} else {
bought = _estimate(inputToken, weth, _inputAmount);
if (bought <= fee) {
return (false, 0);
}
bought = _estimate(weth, outputToken, bought.sub(fee));
}
return (bought >= _minReturn, bought);
}
/**
* @notice Estimate output token amount
* @param _inputToken - Address of the input token
* @param _outputToken - Address of the output token
* @param _inputAmount - uint256 of the input token amount
* @return bought - Amount of output token bought
*/
function _estimate(address _inputToken, address _outputToken, uint256 _inputAmount) internal view returns (uint256 bought) {
// Get uniswap trading pair
(address token0, address token1) = UniswapUtils.sortTokens(_inputToken, _outputToken);
IUniswapV2Pair pair = IUniswapV2Pair(UniswapUtils.pairForSorted(FACTORY, token0, token1, FACTORY_CODE_HASH));
// Compute limit for uniswap trade
(uint112 reserve0, uint112 reserve1,) = pair.getReserves();
// Optimal amounts for uniswap trade
uint256 reserveIn; uint256 reserveOut;
if (_inputToken == token0) {
reserveIn = reserve0;
reserveOut = reserve1;
} else {
reserveIn = reserve1;
reserveOut = reserve0;
}
bought = UniswapUtils.getAmountOut(_inputAmount, reserveIn, reserveOut);
}
/**
* @notice Swap input token to output token
* @param _inputToken - Address of the input token
* @param _outputToken - Address of the output token
* @param _inputAmount - uint256 of the input token amount
* @param _recipient - Address of the recipient
* @return bought - Amount of output token bought
*/
function _swap(address _inputToken, address _outputToken, uint256 _inputAmount, address _recipient) internal returns (uint256 bought) {
// Get uniswap trading pair
(address token0, address token1) = UniswapUtils.sortTokens(_inputToken, _outputToken);
IUniswapV2Pair pair = IUniswapV2Pair(UniswapUtils.pairForSorted(FACTORY, token0, token1, FACTORY_CODE_HASH));
// Send tokens to uniswap pair
require(SafeERC20.transfer(IERC20(_inputToken), address(pair), _inputAmount), "UniswapV2Handler#_swap: ERROR_SENDING_TOKENS");
// Get current reserves
(uint112 reserve0, uint112 reserve1,) = pair.getReserves();
// Optimal amounts for uniswap trade
{
uint256 reserveIn; uint256 reserveOut;
if (_inputToken == token0) {
reserveIn = reserve0;
reserveOut = reserve1;
} else {
reserveIn = reserve1;
reserveOut = reserve0;
}
bought = UniswapUtils.getAmountOut(_inputAmount, reserveIn, reserveOut);
}
// Determine if output amount is token1 or token0
uint256 amount1Out; uint256 amount0Out;
if (_inputToken == token0) {
amount1Out = bought;
} else {
amount0Out = bought;
}
// Execute swap
pair.swap(amount0Out, amount1Out, _recipient, bytes(""));
}
}
