Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.
Awesome Lists | Featured Topics | Projects
https://github.com/dharma-eng/dharma-token

Implementation and testing for core Dharma Token (dToken) contracts, including Dharma Dai and Dharma USD Coin.
https://github.com/dharma-eng/dharma-token
erc20-token ethereum-contract meta-transactions solidity upgradeable
Last synced: 26 days ago
JSON representation
Implementation and testing for core Dharma Token (dToken) contracts, including Dharma Dai and Dharma USD Coin.
Host: GitHub
URL: https://github.com/dharma-eng/dharma-token
Owner: dharma-eng
License: mit
Created: 2020-02-05T20:16:23.000Z (almost 5 years ago)
Default Branch: master
Last Pushed: 2023-01-24T01:18:48.000Z (almost 2 years ago)
Last Synced: 2024-08-03T16:09:27.540Z (4 months ago)
Topics: erc20-token, ethereum-contract, meta-transactions, solidity, upgradeable
Language: JavaScript
Homepage:
Size: 1.49 MB
Stars: 35
Watchers: 6
Forks: 12
Open Issues: 20
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project

awesome-defi - dDAI - wrapped [cDAI](https://compound.finance/ctokens) to retain 10% of the interest earned. (Stablecoins / Derivatives of DAI)
README

        ![HeaderImg](https://i.ibb.co/bHQ9VCX/d-Tokens-Git-Hub.png)

# Dharma Token (dharma-token)

> Implementation and testing for core Dharma Token (dToken) contracts, including Dharma Dai and Dharma USD Coin.

[![Dharma Dai Version](https://img.shields.io/badge/Dharma%20Dai%20Version-1-orange)](https://etherscan.io/address/0x00000000001876eB1444c986fD502e618c587430#readProxyContract)

[![Dharma USD Coin Version](https://img.shields.io/badge/Dharma%20USD%20Coin%20Version-1-blue)](https://etherscan.io/address/0x00000000008943c65cAf789FFFCF953bE156f6f8#readProxyContract)

[![License](https://img.shields.io/github/license/dharma-eng/dharma-token.svg)](https://github.com/dharma-eng/dharma-token/blob/master/LICENSE.md)

[![Dharma Token CI](https://github.com/dharma-eng/dharma-token/workflows/Dharma%20Token%20CI/badge.svg?branch=master)](https://github.com/dharma-eng/dharma-token/actions?query=workflow%3A%22Dharma+Token+CI%22)

[![Coverage](https://img.shields.io/coveralls/github/dharma-eng/dharma-token)](https://coveralls.io/github/dharma-eng/dharma-token)

[![Community](https://img.shields.io/badge/community-Discord-blueviolet)](https://discordapp.com/invite/qvKTDgR)

## Summary

A [**Dharma Token**](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol) (or dToken) is an upgradeable ERC20 token with support for meta-transactions that earns interest with respect to a given stablecoin, and is backed by that stablecoin's respective [Compound cToken](https://compound.finance/developers/ctokens). Interacting with dTokens using the underlying stablecoin is similar to interacting with cTokens, sans borrowing mechanics. In addition, dTokens can be minted and redeemed using the backing cTokens directly.

Interest on dTokens can be [accrued](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L324) at any point, but is automatically accrued whenever new tokens are [minted](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L40) or [redeemed](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L124), when [transfers denominated in underlying tokens](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L348) are performed, or when the surplus (or excess backing cTokens) is [pulled](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L291). On accrual, the new exchange rate of the backing cToken is calculated and the dToken exchange rate increases by 9/10ths of the amount of that of the cToken - in other words, the exchange rate of a dToken appreciates at 90% the rate of that of its backing cToken.

Two Dharma Tokens are currently deployed to mainnet: [Dharma Dai](https://etherscan.io/token/0x00000000001876eb1444c986fd502e618c587430) (dDai) and [Dharma USD Coin](https://etherscan.io/token/0x00000000008943c65caf789fffcf953be156f6f8) (dUSDC).

These contracts were reviewed by [Trail of Bits](https://www.trailofbits.com/) for four days in January 2020, including a general security review, a deeper review of internal math and accounting, and a review of meta-transaction functionality. Their findings and recommendations were immediately incorporated into the code, and [Manticore](https://www.trailofbits.com/research-and-development/manticore/) test cases were developed and are [included in this repository](https://github.com/dharma-eng/dharma-token/blob/master/scripts/mcore-tests/test_fromUnderlying.py). No audit report is currently available.

## Table of Contents

- [Contract Deployment Addresses and Verified Source Code](#contract-deployment-addresses-and-verified-source-code)

- [Overview](#overview)

- [Install](#install)

- [Usage](#usage)

- [Notable Transactions](#notable-transactions)

- [Additional Information](#additional-information)

## Contract Deployment Addresses and Verified Source Code

### Dharma Dai

- [Dharma Dai](https://etherscan.io/address/0x00000000001876eB1444c986fD502e618c587430#readProxyContract)

- [Dharma Dai Upgrade Beacon](https://etherscan.io/address/0x0000000000ccCf289727C20269911159a7bf9eBd#code)

- [Dharma Dai Upgrade Beacon Controller](https://etherscan.io/address/0x00000000001E980d286bE7f5f978f4Cc33128202#code)

- [Dharma Dai Initializer Implementation](https://etherscan.io/address/0x772954310D202A92519F14db92623D5eDe78164c#code)

- [Dharma Dai Implementation V1](https://etherscan.io/address/0x00000000580090B7b5B593AB408000b1AbB5f78d#code)

- [Dharma Dai Implementation V0](https://etherscan.io/address/0x09A8f8cBa6FfCeBC57e4A0aB9110F6BB774B4c97#code) (emergency fallback implementation that pauses minting and pulling surplus)

### Dharma USD Coin

- [Dharma USD Coin](https://etherscan.io/address/0x00000000008943c65cAf789FFFCF953bE156f6f8#readProxyContract)

- [Dharma USD Coin Upgrade Beacon](https://etherscan.io/address/0x00000000000274bE4365Aa18CfDC9A22A947f67D)

- [Dharma USD Coin Upgrade Beacon Controller](https://etherscan.io/address/0x0000000000796dC3aA12EB9FE3B6e8F4D92cc966#code)

- [Dharma USD Coin Initializer Implementation](https://etherscan.io/address/0xa3262589b86cA2C847132fbD470EeB9387899D2b#code)

- [Dharma USD Coin Implementation V1](https://etherscan.io/address/0x00000000e4474ae200cb092b5f002b598e65387e#code)

- [Dharma USD Coin Implementation V0](https://etherscan.io/address/0x87aa50A33899fB292F910c9464F66a68AAAB729a#code) (emergency fallback implementation that pauses minting and pulling surplus)

## Overview

Interaction with [Dharma Dai](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaDaiImplementationV1.sol) and [Dharma USD Coin](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaUSDCImplementationV1.sol) will mostly be mediated by the [Dharma Smart Wallet](https://github.com/dharma-eng/dharma-smart-wallet). To interact with either one directly, use the following ABI (Dharma Token V1) along with the address of the respective token:

```

[{"constant":true,"inputs":[],"name":"name","outputs":[{"internalType":"string","name":"dTokenName","type":"string"}],"payable":false,"stateMutability":"pure","type":"function"},{"constant":false,"inputs":[{"internalType":"address","name":"spender","type":"address"},{"internalType":"uint256","name":"value","type":"uint256"}],"name":"approve","outputs":[{"internalType":"bool","name":"success","type":"bool"}],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":true,"inputs":[],"name":"getVersion","outputs":[{"internalType":"uint256","name":"version","type":"uint256"}],"payable":false,"stateMutability":"pure","type":"function"},{"constant":false,"inputs":[{"internalType":"uint256","name":"underlyingToReceive","type":"uint256"}],"name":"redeemUnderlyingToCToken","outputs":[{"internalType":"uint256","name":"dTokensBurned","type":"uint256"}],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":true,"inputs":[],"name":"totalSupply","outputs":[{"internalType":"uint256","name":"dTokenTotalSupply","type":"uint256"}],"payable":false,"stateMutability":"view","type":"function"},{"constant":false,"inputs":[],"name":"pullSurplus","outputs":[{"internalType":"uint256","name":"cTokenSurplus","type":"uint256"}],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":true,"inputs":[],"name":"getSurplus","outputs":[{"internalType":"uint256","name":"cTokenSurplus","type":"uint256"}],"payable":false,"stateMutability":"view","type":"function"},{"constant":false,"inputs":[{"internalType":"address","name":"sender","type":"address"},{"internalType":"address","name":"recipient","type":"address"},{"internalType":"uint256","name":"amount","type":"uint256"}],"name":"transferFrom","outputs":[{"internalType":"bool","name":"success","type":"bool"}],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":false,"inputs":[{"internalType":"uint256","name":"dTokensToBurn","type":"uint256"}],"name":"redeemToCToken","outputs":[{"internalType":"uint256","name":"cTokensReceived","type":"uint256"}],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":false,"inputs":[{"internalType":"address","name":"owner","type":"address"},{"internalType":"address","name":"spender","type":"address"},{"internalType":"uint256","name":"value","type":"uint256"},{"internalType":"bool","name":"increase","type":"bool"},{"internalType":"uint256","name":"expiration","type":"uint256"},{"internalType":"bytes32","name":"salt","type":"bytes32"},{"internalType":"bytes","name":"signatures","type":"bytes"}],"name":"modifyAllowanceViaMetaTransaction","outputs":[{"internalType":"bool","name":"success","type":"bool"}],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":true,"inputs":[],"name":"decimals","outputs":[{"internalType":"uint8","name":"dTokenDecimals","type":"uint8"}],"payable":false,"stateMutability":"pure","type":"function"},{"constant":false,"inputs":[{"internalType":"address","name":"recipient","type":"address"},{"internalType":"uint256","name":"underlyingEquivalentAmount","type":"uint256"}],"name":"transferUnderlying","outputs":[{"internalType":"bool","name":"success","type":"bool"}],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":false,"inputs":[{"internalType":"address","name":"spender","type":"address"},{"internalType":"uint256","name":"addedValue","type":"uint256"}],"name":"increaseAllowance","outputs":[{"internalType":"bool","name":"success","type":"bool"}],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":true,"inputs":[{"internalType":"address","name":"account","type":"address"}],"name":"balanceOfUnderlying","outputs":[{"internalType":"uint256","name":"underlyingBalance","type":"uint256"}],"payable":false,"stateMutability":"view","type":"function"},{"constant":true,"inputs":[],"name":"getSpreadPerBlock","outputs":[{"internalType":"uint256","name":"rateSpread","type":"uint256"}],"payable":false,"stateMutability":"view","type":"function"},{"constant":true,"inputs":[],"name":"getSurplusUnderlying","outputs":[{"internalType":"uint256","name":"underlyingSurplus","type":"uint256"}],"payable":false,"stateMutability":"view","type":"function"},{"constant":true,"inputs":[],"name":"accrualBlockNumber","outputs":[{"internalType":"uint256","name":"blockNumber","type":"uint256"}],"payable":false,"stateMutability":"view","type":"function"},{"constant":true,"inputs":[{"internalType":"bytes4","name":"functionSelector","type":"bytes4"},{"internalType":"bytes","name":"arguments","type":"bytes"},{"internalType":"uint256","name":"expiration","type":"uint256"},{"internalType":"bytes32","name":"salt","type":"bytes32"}],"name":"getMetaTransactionMessageHash","outputs":[{"internalType":"bytes32","name":"messageHash","type":"bytes32"},{"internalType":"bool","name":"valid","type":"bool"}],"payable":false,"stateMutability":"view","type":"function"},{"constant":true,"inputs":[{"internalType":"address","name":"account","type":"address"}],"name":"balanceOf","outputs":[{"internalType":"uint256","name":"dTokens","type":"uint256"}],"payable":false,"stateMutability":"view","type":"function"},{"constant":false,"inputs":[{"internalType":"address","name":"sender","type":"address"},{"internalType":"address","name":"recipient","type":"address"},{"internalType":"uint256","name":"underlyingEquivalentAmount","type":"uint256"}],"name":"transferUnderlyingFrom","outputs":[{"internalType":"bool","name":"success","type":"bool"}],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":false,"inputs":[{"internalType":"uint256","name":"underlyingToReceive","type":"uint256"}],"name":"redeemUnderlying","outputs":[{"internalType":"uint256","name":"dTokensBurned","type":"uint256"}],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":true,"inputs":[],"name":"symbol","outputs":[{"internalType":"string","name":"dTokenSymbol","type":"string"}],"payable":false,"stateMutability":"pure","type":"function"},{"constant":true,"inputs":[],"name":"getUnderlying","outputs":[{"internalType":"address","name":"underlying","type":"address"}],"payable":false,"stateMutability":"pure","type":"function"},{"constant":false,"inputs":[{"internalType":"uint256","name":"underlyingToSupply","type":"uint256"}],"name":"mint","outputs":[{"internalType":"uint256","name":"dTokensMinted","type":"uint256"}],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":false,"inputs":[{"internalType":"address","name":"spender","type":"address"},{"internalType":"uint256","name":"subtractedValue","type":"uint256"}],"name":"decreaseAllowance","outputs":[{"internalType":"bool","name":"success","type":"bool"}],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":false,"inputs":[],"name":"accrueInterest","outputs":[],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":false,"inputs":[{"internalType":"address","name":"recipient","type":"address"},{"internalType":"uint256","name":"amount","type":"uint256"}],"name":"transfer","outputs":[{"internalType":"bool","name":"success","type":"bool"}],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":true,"inputs":[],"name":"supplyRatePerBlock","outputs":[{"internalType":"uint256","name":"dTokenInterestRate","type":"uint256"}],"payable":false,"stateMutability":"view","type":"function"},{"constant":true,"inputs":[],"name":"exchangeRateCurrent","outputs":[{"internalType":"uint256","name":"dTokenExchangeRate","type":"uint256"}],"payable":false,"stateMutability":"view","type":"function"},{"constant":false,"inputs":[{"internalType":"uint256","name":"cTokensToSupply","type":"uint256"}],"name":"mintViaCToken","outputs":[{"internalType":"uint256","name":"dTokensMinted","type":"uint256"}],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":false,"inputs":[{"internalType":"uint256","name":"dTokensToBurn","type":"uint256"}],"name":"redeem","outputs":[{"internalType":"uint256","name":"underlyingReceived","type":"uint256"}],"payable":false,"stateMutability":"nonpayable","type":"function"},{"constant":true,"inputs":[{"internalType":"address","name":"owner","type":"address"},{"internalType":"address","name":"spender","type":"address"}],"name":"allowance","outputs":[{"internalType":"uint256","name":"dTokenAllowance","type":"uint256"}],"payable":false,"stateMutability":"view","type":"function"},{"constant":true,"inputs":[],"name":"getCToken","outputs":[{"internalType":"address","name":"cToken","type":"address"}],"payable":false,"stateMutability":"pure","type":"function"},{"constant":true,"inputs":[],"name":"totalSupplyUnderlying","outputs":[{"internalType":"uint256","name":"dTokenTotalSupplyInUnderlying","type":"uint256"}],"payable":false,"stateMutability":"view","type":"function"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"address","name":"minter","type":"address"},{"indexed":false,"internalType":"uint256","name":"mintAmount","type":"uint256"},{"indexed":false,"internalType":"uint256","name":"mintDTokens","type":"uint256"}],"name":"Mint","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"address","name":"redeemer","type":"address"},{"indexed":false,"internalType":"uint256","name":"redeemAmount","type":"uint256"},{"indexed":false,"internalType":"uint256","name":"redeemDTokens","type":"uint256"}],"name":"Redeem","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint256","name":"dTokenExchangeRate","type":"uint256"},{"indexed":false,"internalType":"uint256","name":"cTokenExchangeRate","type":"uint256"}],"name":"Accrue","type":"event"},{"anonymous":false,"inputs":[{"indexed":false,"internalType":"uint256","name":"surplusAmount","type":"uint256"},{"indexed":false,"internalType":"uint256","name":"surplusCTokens","type":"uint256"}],"name":"CollectSurplus","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"from","type":"address"},{"indexed":true,"internalType":"address","name":"to","type":"address"},{"indexed":false,"internalType":"uint256","name":"value","type":"uint256"}],"name":"Transfer","type":"event"},{"anonymous":false,"inputs":[{"indexed":true,"internalType":"address","name":"owner","type":"address"},{"indexed":true,"internalType":"address","name":"spender","type":"address"},{"indexed":false,"internalType":"uint256","name":"value","type":"uint256"}],"name":"Approval","type":"event"}]

```

- Dharma Dai: `0x00000000001876eB1444c986fD502e618c587430`

- Dharma USD Coin: `0x00000000008943c65cAf789FFFCF953bE156f6f8`

The complete dToken interface, including ERC20 methods, is as follows:

```Solidity

interface DTokenInterface {

  // Events bear similarity to Compound's supply-related events.

  event Mint(address minter, uint256 mintAmount, uint256 mintDTokens);

  event Redeem(address redeemer, uint256 redeemAmount, uint256 redeemDTokens);

  event Accrue(uint256 dTokenExchangeRate, uint256 cTokenExchangeRate);

  event CollectSurplus(uint256 surplusAmount, uint256 surplusCTokens);

  // These external functions trigger accrual on the dToken and backing cToken.

  function mint(uint256 underlyingToSupply) external returns (uint256 dTokensMinted);

  function redeem(uint256 dTokensToBurn) external returns (uint256 underlyingReceived);

  function redeemUnderlying(uint256 underlyingToReceive) external returns (uint256 dTokensBurned);

  function pullSurplus() external returns (uint256 cTokenSurplus);

  // These external functions only trigger accrual on the dToken.

  function mintViaCToken(uint256 cTokensToSupply) external returns (uint256 dTokensMinted);

  function redeemToCToken(uint256 dTokensToBurn) external returns (uint256 cTokensReceived);

  function redeemUnderlyingToCToken(uint256 underlyingToReceive) external returns (uint256 dTokensBurned);

  function accrueInterest() external;

  function transferUnderlying(address recipient, uint256 underlyingEquivalentAmount) external returns (bool success);

  function transferUnderlyingFrom(address sender, address recipient, uint256 underlyingEquivalentAmount) external returns (bool success);

  // This function provides basic meta-tx support and does not trigger accrual.

  function modifyAllowanceViaMetaTransaction(

    address owner,

    address spender,

    uint256 value,

    bool increase,

    uint256 expiration,

    bytes32 salt,

    bytes calldata signatures

  ) external returns (bool success);

  // View and pure functions do not trigger accrual on the dToken or the cToken.

  function getMetaTransactionMessageHash(

    bytes4 functionSelector, bytes calldata arguments, uint256 expiration, bytes32 salt

  ) external view returns (bytes32 digest, bool valid);

  function totalSupplyUnderlying() external view returns (uint256);

  function balanceOfUnderlying(address account) external view returns (uint256 underlyingBalance);

  function exchangeRateCurrent() external view returns (uint256 dTokenExchangeRate);

  function supplyRatePerBlock() external view returns (uint256 dTokenInterestRate);

  function accrualBlockNumber() external view returns (uint256 blockNumber);

  function getSurplus() external view returns (uint256 cTokenSurplus);

  function getSurplusUnderlying() external view returns (uint256 underlyingSurplus);

  function getSpreadPerBlock() external view returns (uint256 rateSpread);

  function getVersion() external pure returns (uint256 version);

  function getCToken() external pure returns (address cToken);

  function getUnderlying() external pure returns (address underlying);

  // ERC20 events and methods (these do not trigger accrual).

  event Transfer(address indexed from, address indexed to, uint256 value);

  event Approval(address indexed owner, address indexed spender, uint256 value);

  function transfer(address recipient, uint256 amount) external returns (bool);

  function approve(address spender, uint256 amount) external returns (bool);

  function transferFrom(address sender, address recipient, uint256 amount) external returns (bool);

  function increaseAllowance(address spender, uint256 addedValue) external returns (bool success);

  function decreaseAllowance(address spender, uint256 subtractedValue) external returns (bool success);

  function totalSupply() external view returns (uint256);

  function balanceOf(address account) external view returns (uint256);

  function allowance(address owner, address spender) external view returns (uint256);

}

```

### Minting

There are two methods to mint new dTokens:

- [`mint(uint256 underlyingToSupply)`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L40) will transfer the specified amount of underlying from the caller to the dToken, which requires that sufficient allowance first be set by calling `approve` on the underlying and supplying the dToken as the spender, or by using `permit` if applicable. The underlying will be used to mint the backing cTokens, and dTokens will be given to the caller in proportion to the current exchange rate.

- [`mintViaCToken(uint256 cTokensToSupply)`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L86) will transfer the specified amount of _cTokens_ from the caller to the dToken, which requires that sufficient allowance first be set by calling `approve` on the cToken and supplying the dToken as the spender. The cTokens will be retained as backing collateral, and dTokens will be given to the caller in proportion to the current exchange rate.

Whenever calling `mint`, interest accrual will be performed on both the cToken _and_ the dToken - this operation adds quite a bit of additional overhead (and even more so on Dharma Dai, since cDai itself interacts with the Dai Savings Rate contract family). In contrast, calling `mintViaCToken` only accrues interest on the dToken, and simply calculates what the cToken exchange rate _would_ be if accrual was to be performed at that time. This, along with the avoidance of needing to mint new cTokens, results in significant gas savings over `mint`.

### Redeeming

There are four methods to redeem existing dTokens:

- [`redeem(uint256 dTokensToBurn)`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L124) will take the specified amount of dTokens from the caller, then transfer underlying to them in proportion to the current exchange rate.

- [`redeemUnderlying(uint256 underlyingToReceive)`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L206) is equivalent to `redeem`, except that the _underlying received_ is passed as the argument instead of the dTokens burned. Note that this method should not be used to "redeem all", since the dTokens will likely appreciate in value between the time the underlying equivalent is supplied and the time the transaction is mined.

- [`redeemToCToken(uint256 dTokensToBurn)`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L170) will take the specified amount of dTokens from the caller, then transfer _cTokens_ to them in proportion to the current exchange rate.

- [`redeemUnderlyingToCToken(uint256 underlyingToReceive)`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L252) is equivalent to `redeemToCToken`, except that the _underlying received_ is passed as the argument instead of the dTokens burned. Same caveat applies as in `redeemUnderlying`.

Interest accrual is performed on the both the cToken _and_ the dToken when calling `redeem` or `redeemUnderlying`, but only on the dToken when calling `redeemToCToken` or `redeemUnderlyingToCToken`. In general, the direct dToken arguments are also slightly more efficient, both in gas usage and in avoidance of rounding errors when redeeming very small amounts.

### Transferring

There are a handful of different approaches to transferring dTokens:

- [`transfer(address recipient, uint256 amount)`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L335) will simply send dTokens from the caller to the recipient.

- [`approve(address spender, uint256 amount)`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L372) followed by [`transferFrom(address sender, address recipient, uint256 amount)`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L386) will allow the caller to designate a "sender" which will then be able to send dTokens on their behalf.

- [`transferUnderlying(address recipient, uint256 underlyingEquivalentAmount)`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L348) is equivalent to `transfer`, except that the _underlying equivalent value to transfer_ is passed as the argument, and the amount of dTokens to transfer will be determined using the current exchange rate. Note that the amount of dTokens transferred will be rounded up, meaning that _slightly more_ than the specified underlying equivalent value may be transferred. This function will also accrue interest on the dToken.

- [`approve(address spender, uint256 amount)`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L372) followed by [`transferUnderlyingFrom(address sender, address recipient, uint256 underlyingEquivalentAmount)`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L401) is equivalent to `transferFrom`, except that the _underlying equivalent value to transfer_ is passed as the argument. This function will also accrue interest on the dToken. Note that the argument to `approve` still needs to be denominated in dTokens.

In addition to the standard ERC20 `approve` (which is susceptible to a well-known race condition), allowance can be modified via [`increaseAllowance`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L427), [`decreaseAllowance`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L442), and [`modifyAllowanceViaMetaTransaction`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L457).

### Meta-transactions

In order to provide basic meta-transaction support, dToken allowances can be set by providing signatures that are then supplied by arbitrary callers as part of calls to [`modifyAllowanceViaMetaTransaction(address owner, address spender, uint256 value, bool increase, uint256 expiration, bytes32 salt, bytes calldata signatures)`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L457), either to _increase_ allowance (when `increase = true`) or to _decrease_ allowance (when `increase = false`) The [`getMetaTransactionMessageHash(bytes4 functionSelector, bytes calldata arguments, uint256 expiration, bytes32 salt)`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L533) view function can be used to get the message hash that needs to be signed (as a "personal message") in order to generate the signature, with function selector `0x2d657fa5` and arguments `abi.encode(owner, spender, value, increase)` for `modifyAllowanceViaMetaTransaction`.

These meta-transactions are **unordered**, meaning that they are based on a unique message hash rather than on an incrementing nonce per account. This hash is generated from the dToken address, the caller, the function called, and the arguments to the function, including an optional expiration and an arbitrary salt value. Once a specific set of arguments has been used, it cannot be used again. (The Dharma Smart Wallet implements meta-transactions using an incrementing nonce, and is used in place of the native dToken meta-transactions when strict transaction ordering is preferred.)

> **IMPORTANT NOTE**: meta-transactions can be front-run by a griefer in an attempt to disrupt conditional logic on the caller that is predicated on success of the call - to protect against this, calling contracts can perform an allowance check against `allowance` or a message hash validity check against `getMetaTransactionMessageHash` prior to performing the call, or can catch reverts originating from the call and perform either of these two checks on failure.

They also utilize [ERC-1271](https://eips.ethereum.org/EIPS/eip-1271) in cases where the owner is a contract address - this means that the dToken will call into a `isValidSignature(bytes calldata data, bytes calldata signatures)` view function on the contract at the owner account, and that contract will then determine whether or not to allow the meta-transaction to proceed or not. The `data` parameter is comprised of a 32-byte hash digest, followed by a "context" bytes array that contains the arguments used to generate the hash digest (to be precise, the context is hashed to generate the "message hash", then that message hash is prefixed according to [EIP-191](https://eips.ethereum.org/EIPS/eip-191) 0x45, i.e. [geth's personal_sign](https://github.com/ethereum/go-ethereum/wiki/Management-APIs#personal_sign), and hashed again to generate the hash digest). In cases where the owner is _not_ a contract address (i.e. there is no runtime code at the account), `ecrecover` will be used instead.

> **IMPORTANT NOTE**: dTokens can be stolen from contracts that implement ERC-1271 in an insecure fashion - do not return the ERC-1271 magic value from an `isValidSignature` call on your contract unless you're sure that you've properly implemented your desired signature validation scheme!

### View functions

Dharma Tokens have a whole host of view functions and pure functions - many are direct analogues of the equivalents on Compound (though they are all _actually_ view functions) and are mostly self-explanatory. That being said, it is important to note that [`exchangeRateCurrent`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L634), [`supplyRatePerBlock`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L646), and [`getSpreadPerBlock`](https://github.com/dharma-eng/dharma-token/blob/master/contracts/token/DharmaTokenV1.sol#L689) all return values that have been "scaled up" by `10^18`, meaning the returned values should be _divided_ by that scaling factor in order to derive the actual value.

## Install

To install locally, you'll need [Node.js](https://nodejs.org/) 10 through 12 and [Yarn](https://yarnpkg.com/) _(or [npm](https://www.npmjs.com/))_. To get everything set up:

```sh

$ git clone https://github.com/dharma-eng/dharma-token.git

$ cd dharma-token

$ yarn install

$ yarn build

```

## Usage

Tests are performed against a fork of the latest block on mainnet. To run, start the testRPC, trigger the tests, run the linter, and tear down the testRPC _(you can do all of this at once via_ `yarn all` _if you prefer)_:

```sh

$ yarn start

$ yarn test

$ yarn lint

$ yarn stop

```

You can also run code coverage if you like:

```sh

$ yarn build

$ yarn coverage

```

To run [Manticore](https://www.trailofbits.com/research-and-development/manticore/) tests, follow the [installation instructions](https://github.com/trailofbits/manticore#installation) (note that Manticore is only officially supported on Linux) and run:

```sh

$ yarn manticoreTest

```

## Notable Transactions

- [Dharma Dai Deployment](https://etherscan.io/tx/0x5bd46bdeaa043f824355a11a57b6cde8a5c00892e09f55306a0b42e7d15ff551)

- [Dharma USD Coin Deployment](https://etherscan.io/tx/0x57a01b82011228bb8283e0e6a1dce8e34178fc4bf1fafc856324eaa8166c844a)

- [Dharma Dai upgraded to DharmaDaiInitializer](https://etherscan.io/tx/0x31551ab3c5b3119528565aab111eb0b1672bbfd7e90d72fc25a2fddd9305cdd6#eventlog)

- [Dharma USD Coin upgraded to DharmaUSDCInitializer](https://etherscan.io/tx/0xc12ff9e44cd86fc5d6be957901532a6c6da8f7ac5a6625daff6bfe98202c927a#eventlog)

- [Dharma Dai initialized](https://etherscan.io/tx/0x23147b9d2189884f29780141295b911f8d9203764b7ffe131b15c2e130aebd26)

- [Dharma USD Coin initialized](https://etherscan.io/tx/0x1004aa5aa1cfe841583f865fd648aea60e903a14f3493eaadfcfbc077765db76)

- [Dharma Dai upgraded to DharmaDaiImplementationV1](https://etherscan.io/tx/0xbd05feea7836504e79c0f7b3eda12800f96f88bfa18fbb4605bf8bfacf188ff2#eventlog)

- [Dharma USD Coin upgraded to DharmaUSDCImplementationV1](https://etherscan.io/tx/0xb8ad3fbf423e3b213c2bf6fd0952063a0bb5b8dcccba7ce18d1748dac5ee835c#eventlog)

- [First Dharma Dai minted](https://etherscan.io/tx/0x449a91152f4aee8886b0b0395188244e6f7cdf84e35256d537ab0095621f56f8)

- [First Dharma USD Coin minted](https://etherscan.io/tx/0xaeb18f014a93be51ce23a1d9a6677943423a842fa6c5685b298bd0d384da48d0)

- [Ownership of Dharma Dai Upgrade Beacon Controller transferred to Dharma Upgrade Beacon Controller Manager](https://etherscan.io/tx/0xeb34353a02055a9f5c125e0af10c881a5f15d2ec406a278e387f00db411e4164#eventlog)

- [Ownership of Dharma USD Coin Upgrade Beacon Controller transferred to Dharma Upgrade Beacon Controller Manager](https://etherscan.io/tx/0xfa165c93015b3e40f4b37703cd528266b5b64b61c71f32194d156cf5b010e367#eventlog)

- [Dharma USD Coin upgraded to "hotfix" DharmaUSDCImplementationV1](https://etherscan.io/tx/0x8b65791a0ae15ea2ba5568c76878e7e1f0e2a828dbdddf0f58e7826f5e2e5f41#eventlog)

## Additional Information

This repository is maintained by [@0age](https://github.com/0age) and [@carlosflrs](https://github.com/carlosflrs).

Have any questions or feedback? Join the conversation in the [Dharma_HQ Discord server](https://discordapp.com/invite/qvKTDgR).