Untitled Diff
Creato Il diff non scade mai
498 rimozioni
| Linee | |
|---|---|
| Totale | |
| Rimosso | |
| Caratteri | |
| Totale | |
| Rimosso | |
621 aggiunte
| Linee | |
|---|---|
| Totale | |
| Aggiunto | |
| Caratteri | |
| Totale | |
| Aggiunto | |
// SPDX-License-Identifier: MIT
/**
pragma solidity ^0.8.0;
*Submitted for verification at Etherscan.io on 2022-02-01
*/
// OpenZeppelin contracts
import {Ownable} from "@openzeppelin/contracts/access/Ownable.sol";
import {ReentrancyGuard} from "@openzeppelin/contracts/security/ReentrancyGuard.sol";
import {IERC20, SafeERC20} from "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol";
// LooksRare interfaces
import {ICurrencyManager} from "./interfaces/ICurrencyManager.sol";
import {IExecutionManager} from "./interfaces/IExecutionManager.sol";
import {IExecutionStrategy} from "./interfaces/IExecutionStrategy.sol";
import {IRoyaltyFeeManager} from "./interfaces/IRoyaltyFeeManager.sol";
import {ILooksRareExchange} from "./interfaces/ILooksRareExchange.sol";
import {ITransferManagerNFT} from "./interfaces/ITransferManagerNFT.sol";
import {ITransferSelectorNFT} from "./interfaces/ITransferSelectorNFT.sol";
import {IWETH} from "./interfaces/IWETH.sol";
// LooksRare libraries
pragma solidity 0.4.26;
import {OrderTypes} from "./libraries/OrderTypes.sol";
import {SignatureChecker} from "./libraries/SignatureChecker.sol";
contract LooksRareExchange is ILooksRareExchange, ReentrancyGuard, Ownable {
using SafeERC20 for IERC20;
using OrderTypes for OrderTypes.MakerOrder;
library SafeMath {
using OrderTypes for OrderTypes.TakerOrder;
address public immutable WETH;
/**
bytes32 public immutable DOMAIN_SEPARATOR;
* @dev Multiplies two numbers, throws on overflow.
*/
function mul(uint256 a, uint256 b) internal pure returns (uint256 c) {
if (a == 0) {
return 0;
}
c = a * b;
assert(c / a == b);
return c;
}
address public protocolFeeRecipient;
/**
* @dev Integer division of two numbers, truncating the quotient.
*/
function div(uint256 a, uint256 b) internal pure returns (uint256) {
// assert(b > 0); // Solidity automatically throws when dividing by 0
// uint256 c = a / b;
// assert(a == b * c + a % b); // There is no case in which this doesn't hold
return a / b;
}
ICurrencyManager public currencyManager;
/**
IExecutionManager public executionManager;
* @dev Subtracts two numbers, throws on overflow (i.e. if subtrahend is greater than minuend).
IRoyaltyFeeManager public royaltyFeeManager;
*/
ITransferSelectorNFT public transferSelectorNFT;
function sub(uint256 a, uint256 b) internal pure returns (uint256) {
assert(b <= a);
return a - b;
}
mapping(address => uint256) public userMinOrderNonce;
/**
mapping(address => mapping(uint256 => bool)) private _isUserOrderNonceExecutedOrCancelled;
* @dev Adds two numbers, throws on overflow.
*/
function add(uint256 a, uint256 b) internal pure returns (uint256 c) {
c = a + b;
assert(c >= a);
return c;
}
}
event CancelAllOrders(address indexed user, uint256 newMinNonce);
contract Ownable {
event CancelMultipleOrders(address indexed user, uint256[] orderNonces);
address public owner;
event NewCurrencyManager(address indexed currencyManager);
event NewExecutionManager(address indexed executionManager);
event NewProtocolFeeRecipient(address indexed protocolFeeRecipient);
event NewRoyaltyFeeManager(address indexed royaltyFeeManager);
event NewTransferSelectorNFT(address indexed transferSelectorNFT);
event RoyaltyPayment(
address indexed collection,
uint256 indexed tokenId,
address indexed royaltyRecipient,
address currency,
uint256 amount
);
event TakerAsk(
event OwnershipRenounced(address indexed previousOwner);
bytes32 orderHash, // bid hash of the maker order
event OwnershipTransferred(
uint256 orderNonce, // user order nonce
address indexed previousOwner,
address indexed taker, // sender address for the taker ask order
address indexed newOwner
address indexed maker, // maker address of the initial bid order
address indexed strategy, // strategy that defines the execution
address currency, // currency address
address collection, // collection address
uint256 tokenId, // tokenId transferred
uint256 amount, // amount of tokens transferred
uint256 price // final transacted price
);
);
event TakerBid(
bytes32 orderHash, // ask hash of the maker order
uint256 orderNonce, // user order nonce
address indexed taker, // sender address for the taker bid order
address indexed maker, // maker address of the initial ask order
address indexed strategy, // strategy that defines the execution
address currency, // currency address
address collection, // collection address
uint256 tokenId, // tokenId transferred
uint256 amount, // amount of tokens transferred
uint256 price // final transacted price
);
/**
/**
* @notice Constructor
* @dev The Ownable constructor sets the original `owner` of the contract to the sender
* @param _currencyManager currency manager address
* account.
* @param _executionManager execution manager address
* @param _royaltyFeeManager royalty fee manager address
* @param _WETH wrapped ether address (for other chains, use wrapped native asset)
* @param _protocolFeeRecipient protocol fee recipient
*/
*/
constructor(
constructor() public {
address _currencyManager,
owner = msg.sender;
address _executionManager,
address _royaltyFeeManager,
address _WETH,
address _protocolFeeRecipient
) {
// Calculate the domain separator
DOMAIN_SEPARATOR = keccak256(
abi.encode(
0x8b73c3c69bb8fe3d512ecc4cf759cc79239f7b179b0ffacaa9a75d522b39400f, // keccak256("EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)")
0xda9101ba92939daf4bb2e18cd5f942363b9297fbc3232c9dd964abb1fb70ed71, // keccak256("LooksRareExchange")
0xc89efdaa54c0f20c7adf612882df0950f5a951637e0307cdcb4c672f298b8bc6, // keccak256(bytes("1")) for versionId = 1
block.chainid,
Text moved to lines 513-515
address(this)
)
);
currencyManager = ICurrencyManager(_currencyManager);
executionManager = IExecutionManager(_executionManager);
royaltyFeeManager = IRoyaltyFeeManager(_royaltyFeeManager);
WETH = _WETH;
protocolFeeRecipient = _protocolFeeRecipient;
}
}
/**
/**
* @notice Cancel all pending orders for a sender
* @dev Throws if called by any account other than the owner.
* @param minNonce minimum user nonce
*/
*/
function cancelAllOrdersForSender(uint256 minNonce) external {
modifier onlyOwner() {
require(minNonce > userMinOrderNonce[msg.sender], "Cancel: Order nonce lower than current");
require(msg.sender == owner);
require(minNonce < userMinOrderNonce[msg.sender] + 500000, "Cancel: Cannot cancel more orders");
_;
userMinOrderNonce[msg.sender] = minNonce;
emit CancelAllOrders(msg.sender, minNonce);
}
}
/**
/**
* @notice Cancel maker orders
* @dev Allows the current owner to transfer control of the contract to a newOwner.
* @param orderNonces array of order nonces
* @param newOwner The address to transfer ownership to.
*/
*/
function cancelMultipleMakerOrders(uint256[] calldata orderNonces) external {
function transferOwnership(address newOwner) public onlyOwner {
require(orderNonces.length > 0, "Cancel: Cannot be empty");
require(newOwner != address(0));
emit OwnershipTransferred(owner, newOwner);
for (uint256 i = 0; i < orderNonces.length; i++) {
owner = newOwner;
require(orderNonces[i] >= userMinOrderNonce[msg.sender], "Cancel: Order nonce lower than current");
_isUserOrderNonceExecutedOrCancelled[msg.sender][orderNonces[i]] = true;
}
emit CancelMultipleOrders(msg.sender, orderNonces);
}
}
/**
/**
* @notice Match ask with a taker bid order using ETH
* @dev Allows the current owner to relinquish control of the contract.
* @param takerBid taker bid order
* @param makerAsk maker ask order
*/
*/
function matchAskWithTakerBidUsingETHAndWETH(
function renounceOwnership() public onlyOwner {
OrderTypes.TakerOrder calldata takerBid,
emit OwnershipRenounced(owner);
OrderTypes.MakerOrder calldata makerAsk
owner = address(0);
) external payable override nonReentrant {
}
require((makerAsk.isOrderAsk) && (!takerBid.isOrderAsk), "Order: Wrong sides");
require(makerAsk.currency == WETH, "Order: Currency must be WETH");
require(msg.sender == takerBid.taker, "Order: Taker must be the sender");
// If not enough ETH to cover the price, use WETH
if (takerBid.price > msg.value) {
IERC20(WETH).safeTransferFrom(msg.sender, address(this), (takerBid.price - msg.value));
} else {
require(takerBid.price == msg.value, "Order: Msg.value too high");
}
}
// Wrap ETH sent to this contract
contract ERC20Basic {
IWETH(WETH).deposit{value: msg.value}();
function totalSupply() public view returns (uint256);
function balanceOf(address who) public view returns (uint256);
// Check the maker ask order
function transfer(address to, uint256 value) public returns (bool);
bytes32 askHash = makerAsk.hash();
event Transfer(address indexed from, address indexed to, uint256 value);
_validateOrder(makerAsk, askHash);
}
// Retrieve execution parameters
(bool isExecutionValid, uint256 tokenId, uint256 amount) = IExecutionStrategy(makerAsk.strategy)
.canExecuteTakerBid(takerBid, makerAsk);
require(isExecutionValid, "Strategy: Execution invalid");
// Update maker ask order status to true (prevents replay)
_isUserOrderNonceExecutedOrCancelled[makerAsk.signer][makerAsk.nonce] = true;
// Execution part 1/2
contract ERC20 is ERC20Basic {
_transferFeesAndFundsWithWETH(
function allowance(address owner, address spender)
makerAsk.strategy,
public view returns (uint256);
makerAsk.collection,
tokenId,
makerAsk.signer,
takerBid.price,
makerAsk.minPercentageToAsk
);
// Execution part 2/2
function transferFrom(address from, address to, uint256 value)
_transferNonFungibleToken(makerAsk.collection, makerAsk.signer, takerBid.taker, tokenId, amount);
public returns (bool);
emit TakerBid(
function approve(address spender, uint256 value) public returns (bool);
askHash,
event Approval(
makerAsk.nonce,
address indexed owner,
takerBid.taker,
address indexed spender,
makerAsk.signer,
uint256 value
makerAsk.strategy,
makerAsk.currency,
makerAsk.collection,
tokenId,
amount,
takerBid.price
);
);
}
}
library ArrayUtils {
/**
/**
* @notice Match a takerBid with a matchAsk
* Replace bytes in an array with bytes in another array, guarded by a bitmask
* @param takerBid taker bid order
* Efficiency of this function is a bit unpredictable because of the EVM's word-specific model (arrays under 32 bytes will be slower)
* @param makerAsk maker ask order
*
* @dev Mask must be the size of the byte array. A nonzero byte means the byte array can be changed.
* @param array The original array
* @param desired The target array
* @param mask The mask specifying which bits can be changed
* @return The updated byte array (the parameter will be modified inplace)
*/
*/
function matchAskWithTakerBid(OrderTypes.TakerOrder calldata takerBid, OrderTypes.MakerOrder calldata makerAsk)
function guardedArrayReplace(bytes memory array, bytes memory desired, bytes memory mask)
external
internal
override
pure
nonReentrant
{
{
require((makerAsk.isOrderAsk) && (!takerBid.isOrderAsk), "Order: Wrong sides");
require(array.length == desired.length);
require(msg.sender == takerBid.taker, "Order: Taker must be the sender");
require(array.length == mask.length);
// Check the maker ask order
bytes32 askHash = makerAsk.hash();
_validateOrder(makerAsk, askHash);
(bool isExecutionValid, uint256 tokenId, uint256 amount) = IExecutionStrategy(makerAsk.strategy)
.canExecuteTakerBid(takerBid, makerAsk);
require(isExecutionValid, "Strategy: Execution invalid");
// Update maker ask order status to true (prevents replay)
_isUserOrderNonceExecutedOrCancelled[makerAsk.signer][makerAsk.nonce] = true;
// Execution part 1/2
uint words = array.length / 0x20;
_transferFeesAndFunds(
uint index = words * 0x20;
makerAsk.strategy,
assert(index / 0x20 == words);
makerAsk.collection,
uint i;
tokenId,
makerAsk.currency,
msg.sender,
makerAsk.signer,
takerBid.price,
makerAsk.minPercentageToAsk
);
// Execution part 2/2
for (i = 0; i < words; i++) {
_transferNonFungibleToken(makerAsk.collection, makerAsk.signer, takerBid.taker, tokenId, amount);
/* Conceptually: array[i] = (!mask[i] && array[i]) || (mask[i] && desired[i]), bitwise in word chunks. */
assembly {
let commonIndex := mul(0x20, add(1, i))
let maskValue := mload(add(mask, commonIndex))
mstore(add(array, commonIndex), or(and(not(maskValue), mload(add(array, commonIndex))), and(maskValue, mload(add(desired, commonIndex)))))
}
}
emit TakerBid(
/* Deal with the last section of the byte array. */
askHash,
if (words > 0) {
makerAsk.nonce,
/* This overlaps with bytes already set but is still more efficient than iterating through each of the remaining bytes individually. */
takerBid.taker,
i = words;
makerAsk.signer,
assembly {
makerAsk.strategy,
let commonIndex := mul(0x20, add(1, i))
makerAsk.currency,
let maskValue := mload(add(mask, commonIndex))
makerAsk.collection,
mstore(add(array, commonIndex), or(and(not(maskValue), mload(add(array, commonIndex))), and(maskValue, mload(add(desired, commonIndex)))))
tokenId,
}
amount,
} else {
takerBid.price
/* If the byte array is shorter than a word, we must unfortunately do the whole thing bytewise.
);
(bounds checks could still probably be optimized away in assembly, but this is a rare case) */
for (i = index; i < array.length; i++) {
array[i] = ((mask[i] ^ 0xff) & array[i]) | (mask[i] & desired[i]);
}
}
}
}
/**
/**
* @notice Match a takerAsk with a makerBid
* Test if two arrays are equal
* @param takerAsk taker ask order
* @param a First array
* @param makerBid maker bid order
* @param b Second array
* @return Whether or not all bytes in the arrays are equal
*/
*/
function matchBidWithTakerAsk(OrderTypes.TakerOrder calldata takerAsk, OrderTypes.MakerOrder calldata makerBid)
function arrayEq(bytes memory a, bytes memory b)
external
internal
override
pure
nonReentrant
returns (bool)
{
{
require((!makerBid.isOrderAsk) && (takerAsk.isOrderAsk), "Order: Wrong sides");
return keccak256(a) == keccak256(b);
require(msg.sender == takerAsk.taker, "Order: Taker must be the sender");
// Check the maker bid order
bytes32 bidHash = makerBid.hash();
_validateOrder(makerBid, bidHash);
(bool isExecutionValid, uint256 tokenId, uint256 amount) = IExecutionStrategy(makerBid.strategy)
.canExecuteTakerAsk(takerAsk, makerBid);
require(isExecutionValid, "Strategy: Execution invalid");
// Update maker bid order status to true (prevents replay)
_isUserOrderNonceExecutedOrCancelled[makerBid.signer][makerBid.nonce] = true;
// Execution part 1/2
_transferNonFungibleToken(makerBid.collection, msg.sender, makerBid.signer, tokenId, amount);
// Execution part 2/2
_transferFeesAndFunds(
makerBid.strategy,
makerBid.collection,
tokenId,
makerBid.currency,
makerBid.signer,
takerAsk.taker,
takerAsk.price,
takerAsk.minPercentageToAsk
);
emit TakerAsk(
bidHash,
makerBid.nonce,
takerAsk.taker,
makerBid.signer,
makerBid.strategy,
makerBid.currency,
makerBid.collection,
tokenId,
amount,
takerAsk.price
);
}
}
/**
/**
* @notice Update currency manager
* Unsafe write byte array into a memory location
* @param _currencyManager new currency manager address
*
* @param index Memory location
* @param source Byte array to write
* @return End memory index
*/
*/
function updateCurrencyManager(address _currencyManager) external onlyOwner {
function unsafeWriteBytes(uint index, bytes source)
require(_currencyManager != address(0), "Owner: Cannot be null address");
internal
currencyManager = ICurrencyManager(_currencyManager);
pure
emit NewCurrencyManager(_currencyManager);
returns (uint)
{
if (source.length > 0) {
assembly {
let length := mload(source)
let end := add(source, add(0x20, length))
let arrIndex := add(source, 0x20)
let tempIndex := index
for { } eq(lt(arrIndex, end), 1) {
arrIndex := add(arrIndex, 0x20)
tempIndex := add(tempIndex, 0x20)
} {
mstore(tempIndex, mload(arrIndex))
}
index := add(index, length)
}
}
return index;
}
}
/**
/**
* @notice Update execution manager
* Unsafe write address into a memory location
* @param _executionManager new execution manager address
*
* @param index Memory location
* @param source Address to write
* @return End memory index
*/
*/
function updateExecutionManager(address _executionManager) external onlyOwner {
function unsafeWriteAddress(uint index, address source)
require(_executionManager != address(0), "Owner: Cannot be null address");
internal
executionManager = IExecutionManager(_executionManager);
pure
emit NewExecutionManager(_executionManager);
returns (uint)
{
uint conv = uint(source) << 0x60;
assembly {
mstore(index, conv)
index := add(index, 0x14)
}
return index;
}
}
/**
/**
* @notice Update protocol fee and recipient
* Unsafe write address into a memory location using entire word
* @param _protocolFeeRecipient new recipient for protocol fees
*
* @param index Memory location
* @param source uint to write
* @return End memory index
*/
*/
function updateProtocolFeeRecipient(address _protocolFeeRecipient) external onlyOwner {
function unsafeWriteAddressWord(uint index, address source)
protocolFeeRecipient = _protocolFeeRecipient;
internal
emit NewProtocolFeeRecipient(_protocolFeeRecipient);
pure
returns (uint)
{
assembly {
mstore(index, source)
index := add(index, 0x20)
}
return index;
}
}
/**
/**
* @notice Update royalty fee manager
* Unsafe write uint into a memory location
* @param _royaltyFeeManager new fee manager address
*
* @param index Memory location
* @param source uint to write
* @return End memory index
*/
*/
function updateRoyaltyFeeManager(address _royaltyFeeManager) external onlyOwner {
function unsafeWriteUint(uint index, uint source)
require(_royaltyFeeManager != address(0), "Owner: Cannot be null address");
internal
royaltyFeeManager = IRoyaltyFeeManager(_royaltyFeeManager);
pure
emit NewRoyaltyFeeManager(_royaltyFeeManager);
returns (uint)
{
assembly {
mstore(index, source)
index := add(index, 0x20)
}
return index;
}
}
/**
/**
* @notice Update transfer selector NFT
* Unsafe write uint8 into a memory location
* @param _transferSelectorNFT new transfer selector address
*
* @param index Memory location
* @param source uint8 to write
* @return End memory index
*/
*/
function updateTransferSelectorNFT(address _transferSelectorNFT) external onlyOwner {
function unsafeWriteUint8(uint index, uint8 source)
require(_transferSelectorNFT != address(0), "Owner: Cannot be null address");
internal
transferSelectorNFT = ITransferSelectorNFT(_transferSelectorNFT);
pure
returns (uint)
emit NewTransferSelectorNFT(_transferSelectorNFT);
{
assembly {
mstore8(index, source)
index := add(index, 0x1)
}
return index;
}
}
/**
/**
* @notice Check whether user order nonce is executed or cancelled
* Unsafe write uint8 into a memory location using entire word
* @param user address of user
*
* @param orderNonce nonce of the order
* @param index Memory location
* @param source uint to write
* @return End memory index
*/
*/
function isUserOrderNonceExecutedOrCancelled(address user, uint256 orderNonce) external view returns (bool) {
function unsafeWriteUint8Word(uint index, uint8 source)
return _isUserOrderNonceExecutedOrCancelled[user][orderNonce];
internal
pure
returns (uint)
{
assembly {
mstore(index, source)
index := add(index, 0x20)
}
return index;
}
}
/**
/**
* @notice Transfer fees and funds to royalty recipient, protocol, and seller
* Unsafe write bytes32 into a memory location using entire word
* @param strategy address of the execution strategy
*
* @param collection non fungible token address for the transfer
* @param index Memory location
* @param tokenId tokenId
* @param source uint to write
* @param currency currency being used for the purchase (e.g., WETH/USDC)
* @return End memory index
* @param from sender of the funds
* @param to seller's recipient
* @param amount amount being transferred (in currency)
* @param minPercentageToAsk minimum percentage of the gross amount that goes to ask
*/
*/
function _transferFeesAndFunds(
function unsafeWriteBytes32(uint index, bytes32 source)
address strategy,
internal
address collection,
pure
uint256 tokenId,
returns (uint)
address currency,
address from,
address to,
uint256 amount,
uint256 minPercentageToAsk
) internal {
// Initialize the final amount that is transferred to seller
uint256 finalSellerAmount = amount;
// 1. Protocol fee
{
{
uint256 protocolFeeAmount = _calculateProtocolFee(strategy, amount);
assembly {
mstore(index, source)
// Check if the protocol fee is different than 0 for this strategy
index := add(index, 0x20)
if ((protocolFeeRecipient != address(0)) && (protocolFeeAmount != 0)) {
}
IERC20(currency).safeTransferFrom(from, protocolFeeRecipient, protocolFeeAmount);
return index;
finalSellerAmount -= protocolFeeAmount;
}
}
}
}
// 2. Royalty fee
contract ReentrancyGuarded {
{
(address royaltyFeeRecipient, uint256 royaltyFeeAmount) = royaltyFeeManager
.calculateRoyaltyFeeAndGetRecipient(collection, tokenId, amount);
// Check if there is a royalty fee and that it is different to 0
bool reentrancyLock = false;
if ((royaltyFeeRecipient != address(0)) && (royaltyFeeAmount != 0)) {
IERC20(currency).safeTransferFrom(from, royaltyFeeRecipient, royaltyFeeAmount);
finalSellerAmount -= royaltyFeeAmount;
emit RoyaltyPayment(collection, tokenId, royaltyFeeRecipient, currency, royaltyFeeAmount);
/* Prevent a contract function from being reentrant-called. */
modifier reentrancyGuard {
if (reentrancyLock) {
revert();
}
reentrancyLock = true;
_;
reentrancyLock = false;
}
}
contract TokenRecipient {
event ReceivedEther(address indexed sender, uint amount);
event ReceivedTokens(address indexed from, uint256 value, address indexed token, bytes extraData);
/**
* @dev Receive tokens and generate a log event
* @param from Address from which to transfer tokens
* @param value Amount of tokens to transfer
* @param token Address of token
* @param extraData Additional data to log
*/
function receiveApproval(address from, uint256 value, address token, bytes extraData) public {
ERC20 t = ERC20(token);
require(t.transferFrom(from, this, value));
emit ReceivedTokens(from, value, token, extraData);
}
/**
* @dev Receive Ether and generate a log event
*/
function () payable public {
emit ReceivedEther(msg.sender, msg.value);
}
}
}
}
require((finalSellerAmount * 10000) >= (minPercentageToAsk * amount), "Fees: Higher than expected");
contract ExchangeCore is ReentrancyGuarded, Ownable {
string public constant name = "Wyvern Exchange Contract";
string public constant version = "2.3";
// 3. Transfer final amount (post-fees) to seller
// NOTE: these hashes are derived and verified in the constructor.
{
bytes32 private constant _EIP_712_DOMAIN_TYPEHASH = 0x8b73c3c69bb8fe3d512ecc4cf759cc79239f7b179b0ffacaa9a75d522b39400f;
IERC20(currency).safeTransferFrom(from, to, finalSellerAmount);
bytes32 private constant _NAME_HASH = 0x9a2ed463836165738cfa54208ff6e7847fd08cbaac309aac057086cb0a144d13;
bytes32 private constant _VERSION_HASH = 0xe2fd538c762ee69cab09ccd70e2438075b7004dd87577dc3937e9fcc8174bb64;
bytes32 private constant _ORDER_TYPEHASH = 0xdba08a88a748f356e8faf8578488343eab21b1741728779c9dcfdc782bc800f8;
bytes4 private constant _EIP_1271_MAGIC_VALUE = 0x1626ba7e;
// // NOTE: chainId opcode is not supported in solidiy 0.4.x; here we hardcode as 1.
// In order to protect against orders that are replayable across forked chains,
// either the solidity version needs to be bumped up or it needs to be retrieved
// from another contract.
uint256 private constant _CHAIN_ID = 1;
// Note: the domain separator is derived and verified in the constructor. */
bytes32 public constant DOMAIN_SEPARATOR = 0x72982d92449bfb3d338412ce4738761aff47fb975ceb17a1bc3712ec716a5a68;
/* The token used to pay exchange fees. */
ERC20 public exchangeToken;
/* User registry. */
ProxyRegistry public registry;
/* Token transfer proxy. */
TokenTransferProxy public tokenTransferProxy;
/* Cancelled / finalized orders, by hash. */
mapping(bytes32 => bool) public cancelledOrFinalized;
/* Orders verified by on-chain approval (alternative to ECDSA signatures so that smart contracts can place orders directly). */
/* Note that the maker's nonce at the time of approval **plus one** is stored in the mapping. */
mapping(bytes32 => uint256) private _approvedOrdersByNonce;
/* Track per-maker nonces that can be incremented by the maker to cancel orders in bulk. */
// The current nonce for the maker represents the only valid nonce that can be signed by the maker
// If a signature was signed with a nonce that's different from the one stored in nonces, it
// will fail validation.
mapping(address => uint256) public nonces;
/* For split fee orders, minimum required protocol maker fee, in basis points. Paid to owner (who can change it). */
uint public minimumMakerProtocolFee = 0;
/* For split fee orders, minimum required protocol taker fee, in basis points. Paid to owner (who can change it). */
uint public minimumTakerProtocolFee = 0;
/* Recipient of protocol fees. */
address public protocolFeeRecipient;
/* Fee method: protocol fee or split fee. */
enum FeeMethod { ProtocolFee, SplitFee }
/* Inverse basis point. */
uint public constant INVERSE_BASIS_POINT = 10000;
/* An ECDSA signature. */
struct Sig {
/* v parameter */
uint8 v;
/* r parameter */
bytes32 r;
/* s parameter */
bytes32 s;
}
/* An order on the exchange. */
struct Order {
/* Exchange address, intended as a versioning mechanism. */
address exchange;
/* Order maker address. */
address maker;
/* Order taker address, if specified. */
address taker;
/* Maker relayer fee of the order, unused for taker order. */
uint makerRelayerFee;
/* Taker relayer fee of the order, or maximum taker fee for a taker order. */
uint takerRelayerFee;
/* Maker protocol fee of the order, unused for taker order. */
uint makerProtocolFee;
/* Taker protocol fee of the order, or maximum taker fee for a taker order. */
uint takerProtocolFee;
/* Order fee recipient or zero address for taker order. */
address feeRecipient;
/* Fee method (protocol token or split fee). */
FeeMethod feeMethod;
/* Side (buy/sell). */
SaleKindInterface.Side side;
/* Kind of sale. */
SaleKindInterface.SaleKind saleKind;
/* Target. */
address target;
/* HowToCall. */
AuthenticatedProxy.HowToCall howToCall;
/* Calldata. */
bytes calldata;
/* Calldata replacement pattern, or an empty byte array for no replacement. */
bytes replacementPattern;
/* Static call target, zero-address for no static call. */
address staticTarget;
/* Static call extra data. */
bytes staticExtradata;
/* Token used to pay for the order, or the zero-address as a sentinel value for Ether. */
address paymentToken;
/* Base price of the order (in paymentTokens). */
uint basePrice;
/* Auction extra parameter - minimum bid increment for English auctions, starting/ending price difference. */
uint extra;
/* Listing timestamp. */
uint listingTime;
/* Expiration timestamp - 0 for no expiry. */
uint expirationTime;
/* Order salt, used to prevent duplicate hashes. */
uint salt;
/* NOTE: uint nonce is an additional component of the order but is read from storage */
}
}
event OrderApprovedPartOne (bytes32 indexed hash, address exchange, address indexed maker, address taker, uint makerRelayerFee, uint takerRelayerFee, uint makerProtocolFee, uint takerProtocolFee, address indexed feeRecipient, FeeMethod feeMethod, SaleKindInterface.Side side, SaleKindInterface.SaleKind saleKind, address target);
event OrderApprovedPartTwo (bytes32 indexed hash, AuthenticatedProxy.HowToCall howToCall, bytes calldata, bytes replacementPattern, address staticTarget, bytes staticExtradata, address paymentToken, uint basePrice, uint extra, uint listingTime, uint expirationTime, uint salt, bool orderbookInclusionDesired);
event OrderCancelled (bytes32 indexed hash);
event OrdersMatched (bytes32 buyHash, bytes32 sellHash, address indexed maker, address indexed taker, uint price, bytes32 indexed metadata);
event NonceIncremented (address indexed maker, uint newNonce);
constructor () public {
require(keccak256("EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)") == _EIP_712_DOMAIN_TYPEHASH);
require(keccak256(bytes(name)) == _NAME_HASH);
require(keccak256(bytes(version)) == _VERSION_HASH);
require(keccak256("Order(address exchange,address maker,address taker,uint256 makerRelayerFee,uint256 takerRelayerFee,uint256 makerProtocolFee,uint256 takerProtocolFee,address feeRecipient,uint8 feeMethod,uint8 side,uint8 saleKind,address target,uint8 howToCall,bytes calldata,bytes replacementPattern,address staticTarget,bytes staticExtradata,address paymentToken,uint256 basePrice,uint256 extra,uint256 listingTime,uint256 expirationTime,uint256 salt,uint256 nonce)") == _ORDER_TYPEHASH);
require(DOMAIN_SEPARATOR == _deriveDomainSeparator());
}
}
/**
/**
* @notice Transfer fees and funds to royalty recipient, protocol, and seller
* @dev Derive the domain separator for EIP-712 signatures.
* @param strategy address of the execution strategy
* @return The domain separator.
* @param collection non fungible token address for the transfer
* @param tokenId tokenId
* @param to seller's recipient
* @param amount amount being transferred (in currency)
* @param minPercentageToAsk minimum percentage of the gross amount that goes to ask
*/
*/
function _transferFeesAndFundsWithWETH(
function _deriveDomainSeparator() private view returns (bytes32) {
address strategy,
return keccak256(
address collection,
abi.encode(
uint256 tokenId,
_EIP_712_DOMAIN_TYPEHASH, // keccak256("EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)")
address to,
_NAME_HASH, // keccak256("Wyvern Exchange Contract")
uint256 amount,
_VERSION_HASH, // keccak256(bytes("2.3"))
uint256 minPercentageToAsk
_CHAIN_ID, // NOTE: this is fixed, need to use solidity 0.5+ or make external call to support!
Text moved from lines 105-107
) internal {
address(this)
// Initialize the final amount that is transferred to seller
)
uint256 finalSellerAmount = amount;
);
// 1. Protocol fee
{
uint256 protocolFeeAmount = _calculateProtocolFee(strategy, amount);
// Check if the protocol fee is different than 0 for this strategy
if ((protocolFeeRecipient != address(0)) && (protocolFeeAmount != 0)) {
IERC20(WETH).safeTransfer(protocolFeeRecipient, protocolFeeAmount);
finalSellerAmount -= protocolFeeAmount;
}
}
/**
* Increment a particular maker's nonce, thereby invalidating all orders that were not signed
* with the original nonce.
*/
function incrementNonce() external {
uint newNonce = ++nonces[msg.sender];
emit NonceIncremented(msg.sender, newNonce);
}
}
// 2. Royalty fee
/**
* @dev Change the minimum maker fee paid to the protocol (owner only)
* @param newMinimumMakerProtocolFee New fee to set in basis points
*/
function changeMinimumMakerProtocolFee(uint newMinimumMakerProtocolFee)
public
onlyOwner
{
{
(address royaltyFeeRecipient, uint256 royaltyFeeAmount) = royaltyFeeManager
minimumMakerProtocolFee = newMinimumMakerProtocolFee;
.calculateRoyaltyFeeAndGetRecipient(collection, tokenId, amount);
// Check if there is a royalty fee and that it is different to 0
if ((royaltyFeeRecipient != address(0)) && (royaltyFeeAmount != 0)) {
IERC20(WETH).safeTransfer(royaltyFeeRecipient, royaltyFeeAmount);
finalSellerAmount -= royaltyFeeAmount;
emit RoyaltyPayment(collection, tokenId, royaltyFeeRecipient, address(WETH), royaltyFeeAmount);
}
}
/**
* @dev Change the minimum taker fee paid to the protocol (owner only)
* @param newMinimumTakerProtocolFee New fee to set in basis points
*/
function changeMinimumTakerProtocolFee(uint newMinimumTakerProtocolFee)
public
onlyOwner
{
minimumTakerProtocolFee = newMinimumTakerProtocolFee;
}
}
require((finalSellerAmount * 10000) >= (minPercentageToAsk * amount), "Fees: Higher than expected");
/**
* @dev Change the protocol fee recipient (owner only)
* @param newProtocolFeeRecipient New protocol fee recipient address
*/
function changeProtocolFeeRecipient(address newProtocolFeeRecipient)
public
onlyOwner
{
protocolFeeRecipient = newProtocolFeeRecipient;
}
// 3. Transfer final amount (post-fees) to seller
/**
* @dev Transfer tokens
* @param token Token to transfer
* @param from Address to charge fees
* @param to Address to receive fees
* @param amount Amount of protocol tokens to charge
*/
function transferTokens(address token, address from, address to, uint amount)
internal
{
{
IERC20(WETH).safeTransfer(to, finalSellerAmount);
if (amount > 0) {
require(tokenTransferProxy.transferFrom(token, from, to, amount));
}
}
}
}
/**
/**
* @notice Transfer NFT
* @dev Charge a fee in protocol tokens
* @param collection address of the token collection
* @param from Address to charge fees
* @param from address of the sender
* @param to Address to receive fees
* @param to address of the recipient
* @param amount Amount of protocol tokens to charge
* @param tokenId tokenId
* @param amount amount of tokens (1 for ERC721, 1+ for ERC1155)
* @dev For ERC721, amount is not used
*/
*/
function _transferNonFungibleToken(
function chargeProtocolFee(address from, address to, uint amount)
address collection,
internal
address from,
{
address to,
transferTokens(exchangeToken, from, to, amount);
uint256 tokenId,
uint256 amount
) internal {
// Retrieve the transfer manager address
address transferManager = transferSelectorNFT.checkTransferManagerForToken(collection);
// If no transfer manager found, it returns address(0)
require(transferManager != address(0), "Transfer: No NFT transfer manager available");
// If one is found, transfer the token
ITransferManagerNFT(transferManager).transferNonFungibleToken(collection, from, to, tokenId, amount);
}
}
/**
/**
* @notice Calculate protocol fee for an execution strategy
* @dev Execute a STATICCALL (introduced with Ethereum Metropolis, non-state-modifying external call)
* @param executionStrategy strategy
* @param target Contract to call
* @param amount amount to transfer
* @param calldata Calldata (appended to extradata)
* @param extradata Base data for STATICCALL (probably function selector and argument encoding)
* @return The result of the call (success or failure)
*/
*/
function _calculateProtocolFee(address executionStrategy, uint256 amount) internal view returns (uint256) {
function staticCall(address target, bytes memory calldata, bytes memory extradata)
uint256 protocolFee = IExecutionStrategy(executionStrategy).viewProtocolFee();
public
return (protocolFee * amount) / 10000;
view
returns (bool result)
{
bytes memory combined = new bytes(calldata.length + extradata.length);
uint index;
assembly {
index := add(combined, 0x20)
}
index = ArrayUtils.unsafeWriteBytes(index, extradata);
ArrayUtils.unsafeWriteBytes(index, calldata);
assembly {
result := staticcall(gas, target, add(combined, 0x20), mload(combined), mload(0x40), 0)
}
return result;
}
}
/**
/**
* @notice Verify the validity of the maker order
* @dev Hash an order, returning the canonical EIP-712 order hash without the domain separator
* @param makerOrder maker order
* @param order Order to hash
* @param orderHash computed hash for the order
* @param nonce maker nonce to hash
* @return Hash of order
*/
*/
function _validateOrder(OrderTypes.MakerOrder calldata makerOrder, bytes32 orderHash) internal view {
function hashOrder(Order memory order, uint nonce)
// Verify whether order nonce has expired
internal
require(
pure
(!_isUserOrderNonceExecutedOrCancelled[makerOrder.signer][makerOrder.nonce]) &&
returns (bytes32 hash)
(makerOrder.nonce >= userMinOrderNonce[makerOrder.signer]),
{
"Order: Matching order expired"
/* Unfortunately abi.encodePacked doesn't work here, stack size constraints. */
);
uint size = 800;
bytes memory array = new bytes(size);
// Verify the signer is not address(0)
uint index;
require(makerOrder.signer != address(0), "Order: Invalid signer");
assembly {
index := add(array, 0x20)
// Verify the amount is not 0
}
require(makerOrder.amount > 0, "Order: Amount cannot be 0");
index = ArrayUtils.unsafeWriteBytes32(index, _ORDER_TYPEHASH);
index = ArrayUtils.unsafeWriteAddressWord(index, order.exchange);
index = ArrayUtils.unsafeWriteAddressWord(index, order.maker);
index = ArrayUtils.unsafeWriteAddressWord(index, order.taker);
index = ArrayUtils.unsafeWriteUint(index, order.makerRelayerFee);
index = ArrayUtils.unsafeWriteUint(index, order.takerRelayerFee);
index = ArrayUtils.unsafeWriteUint(index, order.makerProtocolFee);
index = ArrayUtils.unsafeWriteUint(index, order.takerProtocolFee);
index = ArrayUtils.unsafeWriteAddressWord(index, order.feeRecipient);
index = ArrayUtils.unsafeWriteUint8Word(index, uint8(order.feeMethod));
index = ArrayUtils.unsafeWriteUint8Word(index, uint8(order.side));
index = ArrayUtils.unsafeWriteUint8Word(index, uint8(order.saleKind));
index = ArrayUtils.unsafeWriteAddressWord(index, order.target);
index = ArrayUtils.unsafeWriteUint8Word(index, uint8(order.howToCall));
index = ArrayUtils.unsafeWriteBytes32(index, keccak256(order.calldata));
index = ArrayUtils.unsafeWriteBytes32(index, keccak256(order.replacementPattern));
index = ArrayUtils.unsafeWriteAddressWord(index, order.staticTarget);
index = ArrayUtils.unsafeWriteBytes32(index, keccak256(order.staticExtradata));
index = ArrayUtils.unsafeWriteAddressWord(index, order.paymentToken);
index = ArrayUtils.unsafeWriteUint(index, order.basePrice);
index = ArrayUtils.unsafeWriteUint(index, order.extra);
index = ArrayUtils.unsafeWriteUint(index, order.listingTime);
index = ArrayUtils.unsafeWriteUint(index, order.expirationTime);
index = ArrayUtils.unsafeWriteUint(index, order.salt);
index = ArrayUtils.unsafeWriteUint(index, nonce);
assembly {
hash := keccak256(add(array, 0x20), size)
}
return hash;
}
// Verify the validity of the signature
/**
require(
* @dev Hash an order, returning the hash that a client must sign via EIP-712 including the message prefix
SignatureChecker.verify(
* @param order Order to hash
orderHash,
* @param nonce Nonce to hash
makerOrder.signer,
* @return Hash of message prefix and order hash per Ethereum format
makerOrder.v,
*/
makerOrder.r,
function hashToSign(Order memory order, uint nonce)
makerOrder.s,
internal
DOMAIN_SEPARATOR
pure
),
returns (bytes32)
"Signature: Invalid"
{
return keccak256(
abi.encodePacked("\x19\x01", DOMAIN_SEPARATOR, hashOrder(order, nonce))
);
);
// Verify whether the currency is whitelisted
require(currencyManager.isCurrencyWhitelisted(makerOrder.currency), "Currency: Not whitelisted");
// Verify whether strategy can be executed
require(executionManager.isStrategyWhitelisted(makerOrder.strategy), "Strategy: Not whitelisted");
}
}
/**
* @dev Assert an order is valid and return its hash
* @param order Order to validate
* @param nonce Nonce to validate
* @param sig ECDSA signature
*/
function requireValidOrder(Order memory order, Sig memory sig, uint nonce)
internal
view
returns (bytes32)
{
bytes32 hash = hashToSign(order, nonce);
require(validateOrder(hash, order, sig));
return hash;
}
}
/**
* @dev Validate order parameters (does *not* check signature validity)
* @param order Order to validate
*/
function validateOrderParameters(Order memory order)
internal
view
returns (bool)
{
/* Order must be targeted at this protocol version (this Exchange contract). */
if (order.exchange != address(this)) {