Contract Source Code:
<i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity ^0.8.29;
import {MainVault} from "./MainVault.sol";
import {IMainVault} from "./interfaces/IMainVault.sol";
import {AgentDistributionProfit} from "./AgentDistributionProfit.sol";
import {IAgentDistributionProfit} from "./interfaces/IAgentDistributionProfit.sol";
import {ERC1967Proxy} from "@openzeppelin/contracts/proxy/ERC1967/ERC1967Proxy.sol";
import {Ownable} from "@openzeppelin/contracts/access/Ownable.sol";
import {IFactory} from "./interfaces/IFactory.sol";
/// @title Factory
/// @dev Factory contract for deploying both MainVault and AgentDistributionProfit instances
contract Factory is IFactory, Ownable {
// MainVault implementation and fixed parameters
address public mainVaultImplementation;
address public investmentVaultImplementation;
address public manager;
address public admin;
address public backupAdmin;
address public emergencyAdmin;
uint256 public feePercentage;
address public pauserList;
address public meraCapitalWallet;
address public meraPriceOracle;
// AgentDistributionProfit implementation and default instance
address public agentDistributionImplementation;
address public defaultAgentDistribution;
string public constant DEFAULT_REFERRAL_CODE = "DEFAULT";
// Common fund wallet for all AgentDistribution contracts
address public fundWallet;
address public immutable defaultAgentWallet;
// Referral code mapping
mapping(string => address) public referralToAgentDistribution;
mapping(address => string) public agentDistributionToReferral;
address public deployer;
constructor(ConstructorParams memory params) Ownable(msg.sender) {
deployer = msg.sender;
require(params.mainVaultImplementation != address(0), ZeroAddress());
require(params.investmentVaultImplementation != address(0), ZeroAddress());
require(params.manager != address(0), ZeroAddress());
require(params.admin != address(0), ZeroAddress());
require(params.backupAdmin != address(0), ZeroAddress());
require(params.emergencyAdmin != address(0), ZeroAddress());
require(params.pauserList != address(0), ZeroAddress());
require(params.agentDistributionImplementation != address(0), ZeroAddress());
require(params.fundWallet != address(0), ZeroAddress());
require(params.defaultAgentWallet != address(0), ZeroAddress());
mainVaultImplementation = params.mainVaultImplementation;
investmentVaultImplementation = params.investmentVaultImplementation;
manager = params.manager;
admin = params.admin;
backupAdmin = params.backupAdmin;
emergencyAdmin = params.emergencyAdmin;
feePercentage = params.feePercentage;
pauserList = params.pauserList;
agentDistributionImplementation = params.agentDistributionImplementation;
fundWallet = params.fundWallet;
defaultAgentWallet = params.defaultAgentWallet;
meraCapitalWallet = params.meraCapitalWallet;
meraPriceOracle = params.meraPriceOracle;
// Deploy default AgentDistribution
bytes memory initData = abi.encodeWithSelector(
AgentDistributionProfit.initialize.selector,
params.fundWallet,
params.defaultAgentWallet,
params.admin,
params.emergencyAdmin,
params.backupAdmin,
params.emergencyAdmin, // Using emergencyAdmin as emergencyAgent for default distribution
params.backupAdmin, // Using backupAdmin as reserveAgent for default distribution
params.meraCapitalWallet
);
ERC1967Proxy proxy = new ERC1967Proxy(params.agentDistributionImplementation, initData);
defaultAgentDistribution = address(proxy);
// Register default referral code
referralToAgentDistribution[DEFAULT_REFERRAL_CODE] = defaultAgentDistribution;
agentDistributionToReferral[defaultAgentDistribution] = DEFAULT_REFERRAL_CODE;
emit DefaultAgentDistributionCreated(defaultAgentDistribution, params.defaultAgentWallet);
emit ReferralCodeRegistered(DEFAULT_REFERRAL_CODE, defaultAgentDistribution);
}
modifier onlyDeployer() {
require(msg.sender == deployer, CallerIsNotDeployer());
_;
}
modifier validReferralCode(string memory referralCode) {
require(bytes(referralCode).length > 0, InvalidReferralCode());
_;
}
/// @inheritdoc IFactory
function createMainVault(
address mainInvestor,
address backupInvestor,
address emergencyInvestor,
address profitWallet,
string calldata referralCode
) external returns (address mainVaultProxy) {
require(mainInvestor != address(0), ZeroAddress());
require(backupInvestor != address(0), ZeroAddress());
require(emergencyInvestor != address(0), ZeroAddress());
// Get profit wallet from referral code or use default
address feeWallet = referralToAgentDistribution[referralCode];
if (feeWallet == address(0)) {
feeWallet = defaultAgentDistribution;
}
// Prepare initialization parameters
IMainVault.InitParams memory initParams = IMainVault.InitParams({
mainInvestor: mainInvestor,
backupInvestor: backupInvestor,
emergencyInvestor: emergencyInvestor,
manager: manager,
admin: admin,
backupAdmin: backupAdmin,
emergencyAdmin: emergencyAdmin,
feeWallet: feeWallet,
profitWallet: profitWallet,
feePercentage: feePercentage,
currentImplementationOfInvestmentVault: investmentVaultImplementation,
pauserList: pauserList,
meraPriceOracle: meraPriceOracle,
lockPeriod: 0
});
// Encode initialization call
bytes memory initData = abi.encodeWithSelector(MainVault.initialize.selector, initParams);
// Deploy proxy
ERC1967Proxy newProxy = new ERC1967Proxy(mainVaultImplementation, initData);
mainVaultProxy = address(newProxy);
// Use actual referral code or DEFAULT if not found
string memory usedReferralCode = feeWallet == defaultAgentDistribution ? DEFAULT_REFERRAL_CODE : referralCode;
emit MainVaultCreated(
mainVaultProxy, mainInvestor, msg.sender, backupInvestor, emergencyInvestor, profitWallet, usedReferralCode
);
return mainVaultProxy;
}
function createMainVaultWithLock(
address mainInvestor,
address backupInvestor,
address emergencyInvestor,
address profitWallet,
string calldata referralCode,
uint64 lockPeriod
) external returns (address mainVaultProxy) {
require(mainInvestor != address(0), ZeroAddress());
require(backupInvestor != address(0), ZeroAddress());
require(emergencyInvestor != address(0), ZeroAddress());
// Get profit wallet from referral code or use default
address feeWallet = referralToAgentDistribution[referralCode];
if (feeWallet == address(0)) {
feeWallet = defaultAgentDistribution;
}
// Prepare initialization parameters
IMainVault.InitParams memory initParams = IMainVault.InitParams({
mainInvestor: mainInvestor,
backupInvestor: backupInvestor,
emergencyInvestor: emergencyInvestor,
manager: manager,
admin: admin,
backupAdmin: backupAdmin,
emergencyAdmin: emergencyAdmin,
feeWallet: feeWallet,
profitWallet: profitWallet,
feePercentage: feePercentage,
currentImplementationOfInvestmentVault: investmentVaultImplementation,
pauserList: pauserList,
meraPriceOracle: meraPriceOracle,
lockPeriod: lockPeriod
});
// Encode initialization call
bytes memory initData = abi.encodeWithSelector(MainVault.initialize.selector, initParams);
// Deploy proxy
ERC1967Proxy newProxy = new ERC1967Proxy(mainVaultImplementation, initData);
mainVaultProxy = address(newProxy);
// Use actual referral code or DEFAULT if not found
string memory usedReferralCode = feeWallet == defaultAgentDistribution ? DEFAULT_REFERRAL_CODE : referralCode;
emit MainVaultCreated(
mainVaultProxy, mainInvestor, msg.sender, backupInvestor, emergencyInvestor, profitWallet, usedReferralCode
);
return mainVaultProxy;
}
/// @inheritdoc IFactory
function setDeployer(address _deployer) external onlyOwner {
require(_deployer != address(0), ZeroAddress());
deployer = _deployer;
emit DeployerUpdated(msg.sender, _deployer);
}
/// @inheritdoc IFactory
function setMeraPriceOracle(address _meraPriceOracle) external onlyOwner {
require(_meraPriceOracle != address(0), ZeroAddress());
address oldMeraPriceOracle = meraPriceOracle;
meraPriceOracle = _meraPriceOracle;
emit MeraPriceOracleUpdated(oldMeraPriceOracle, _meraPriceOracle);
}
/// @inheritdoc IFactory
function createAgentDistribution(
string calldata referralCode,
address agentWallet,
address reserveAgentWallet,
address emergencyAgentWallet
) external onlyDeployer validReferralCode(referralCode) returns (address) {
require(agentWallet != address(0), ZeroAddress());
require(reserveAgentWallet != address(0), ZeroAddress());
require(emergencyAgentWallet != address(0), ZeroAddress());
require(referralToAgentDistribution[referralCode] == address(0), ReferralCodeAlreadyUsed());
// Encode initialization call
bytes memory initData = abi.encodeWithSelector(
AgentDistributionProfit.initialize.selector,
fundWallet,
agentWallet,
admin,
emergencyAdmin,
backupAdmin,
emergencyAgentWallet,
reserveAgentWallet,
meraCapitalWallet
);
// Deploy proxy
ERC1967Proxy proxy = new ERC1967Proxy(agentDistributionImplementation, initData);
address proxyAddress = address(proxy);
// Register referral code
referralToAgentDistribution[referralCode] = proxyAddress;
agentDistributionToReferral[proxyAddress] = referralCode;
emit DistributionContractCreated(proxyAddress, referralCode, agentWallet);
emit ReferralCodeRegistered(referralCode, proxyAddress);
return proxyAddress;
}
/// @inheritdoc IFactory
function updateImplementations(
address newMainVaultImpl,
address newInvestmentVaultImpl,
address newAgentDistributionImpl
) external onlyOwner {
if (newMainVaultImpl != address(0)) {
mainVaultImplementation = newMainVaultImpl;
}
if (newInvestmentVaultImpl != address(0)) {
investmentVaultImplementation = newInvestmentVaultImpl;
}
if (newAgentDistributionImpl != address(0)) {
agentDistributionImplementation = newAgentDistributionImpl;
}
}
/// @inheritdoc IFactory
function updateMainVaultParameters(
address _manager,
address _admin,
address _backupAdmin,
address _emergencyAdmin,
uint256 _feePercentage,
address _pauserList
) external onlyOwner {
require(_manager != address(0), "Zero address not allowed");
require(_admin != address(0), "Zero address not allowed");
require(_backupAdmin != address(0), "Zero address not allowed");
require(_emergencyAdmin != address(0), "Zero address not allowed");
require(_pauserList != address(0), "Zero address not allowed");
manager = _manager;
admin = _admin;
backupAdmin = _backupAdmin;
emergencyAdmin = _emergencyAdmin;
feePercentage = _feePercentage;
pauserList = _pauserList;
}
/// @inheritdoc IFactory
function updateFundWallets(address _fundWallet, address _meraCapitalWallet) external onlyOwner {
require(_fundWallet != address(0), "Zero address not allowed");
require(_meraCapitalWallet != address(0), "Zero address not allowed");
address oldFundWallet = fundWallet;
address oldMeraCapitalWallet = meraCapitalWallet;
fundWallet = _fundWallet;
meraCapitalWallet = _meraCapitalWallet;
emit FounderWalletUpdated(oldFundWallet, _fundWallet);
emit MeraCapitalWalletUpdated(oldMeraCapitalWallet, _meraCapitalWallet);
}
/// @inheritdoc IFactory
function getAgentDistribution(string calldata referralCode) external view returns (address) {
address distribution = referralToAgentDistribution[referralCode];
return distribution != address(0) ? distribution : defaultAgentDistribution;
}
/// @inheritdoc IFactory
function getReferralCode(address agentDistribution) external view returns (string memory) {
return agentDistributionToReferral[agentDistribution];
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity 0.8.29;
import {UUPSUpgradeable} from "@openzeppelin/contracts-upgradeable/proxy/utils/UUPSUpgradeable.sol";
import {MultiAdminSingleHolderAccessControlUppgradable} from
"./utils/MultiAdminSingleHolderAccessControlUppgradable.sol";
import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";
import {SafeERC20} from "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol";
import {Initializable} from "@openzeppelin/contracts-upgradeable/proxy/utils/Initializable.sol";
import {ECDSA} from "@openzeppelin/contracts/utils/cryptography/ECDSA.sol";
import {EIP712Upgradeable} from "@openzeppelin/contracts-upgradeable/utils/cryptography/EIP712Upgradeable.sol";
import {Math} from "@openzeppelin/contracts/utils/math/Math.sol";
import {ERC1967Proxy} from "@openzeppelin/contracts/proxy/ERC1967/ERC1967Proxy.sol";
import {PausableUpgradeable} from "@openzeppelin/contracts-upgradeable/utils/PausableUpgradeable.sol";
import {IMainVault} from "./interfaces/IMainVault.sol";
import {IUniswapV2Router02} from "./interfaces/IUniswapV2Router02.sol";
import {IInvestmentVault} from "./interfaces/IInvestmentVault.sol";
import {ISwapRouter} from "./interfaces/ISwapRouter.sol";
import {IPauserList} from "./interfaces/IPauserList.sol";
import {Constants} from "./utils/Constants.sol";
import {DataTypes} from "./utils/DataTypes.sol";
import {MainVaultSwapLibrary} from "./utils/MainVaultSwapLibrary.sol";
import {IMeraPriceOracle} from "./interfaces/IMeraPriceOracle.sol";
/// @title MainVault
/// @dev Main storage for tokens with UUPS upgrade support and role system
contract MainVault is
Initializable,
UUPSUpgradeable,
MultiAdminSingleHolderAccessControlUppgradable,
EIP712Upgradeable,
PausableUpgradeable,
IMainVault
{
using SafeERC20 for IERC20;
using ECDSA for bytes32;
// Custom Errors
error InvalidSigner();
error TimestampMustBeInTheFuture();
error InvalidImplementationAddress();
error InvalidImplementationDeadline();
error ZeroAddressNotAllowed();
error ExceedsMaximumPercentage();
error TokenNotAvailable();
error WithdrawalLocked();
error InsufficientBalance();
error ZeroAmountNotAllowed();
error RouterNotAvailable();
error InvalidMainVaultAddress();
error InvalidVaultIndex();
error LockPeriodNotAvailable();
error NotPauser();
error InitializePause();
error WithdrawCommitTimestampExpired();
// Role definitions
// Each role is represented by a unique bytes32 value computed from the role name
bytes32 public constant MAIN_INVESTOR_ROLE = keccak256("MAIN_INVESTOR_ROLE"); // Main investor role
bytes32 public constant BACKUP_INVESTOR_ROLE = keccak256("BACKUP_INVESTOR_ROLE"); // Backup investor role
bytes32 public constant EMERGENCY_INVESTOR_ROLE = keccak256("EMERGENCY_INVESTOR_ROLE"); // Emergency investor role
bytes32 public constant MANAGER_ROLE = keccak256("MANAGER_ROLE"); // Manager role
bytes32 public constant ADMIN_ROLE = keccak256("ADMIN_ROLE"); // Admin role
bytes32 public constant BACKUP_ADMIN_ROLE = keccak256("BACKUP_ADMIN_ROLE"); // Backup admin role
bytes32 public constant EMERGENCY_ADMIN_ROLE = keccak256("EMERGENCY_ADMIN_ROLE"); // Emergency admin role
// EIP-712 Type Hashes
bytes32 private constant _FUTURE_MAIN_VAULT_IMPLEMENTATION_TYPEHASH =
keccak256("FutureMainVaultImplementation(address implementation,uint64 deadline)");
bytes32 private constant _FUTURE_INVESTOR_VAULT_IMPLEMENTATION_TYPEHASH =
keccak256("FutureInvestorVaultImplementation(address implementation,uint64 deadline)");
// Allowed tokens and routers mappings
mapping(address => bool) public availableTokensByInvestor;
mapping(address => bool) public availableRouterByInvestor;
mapping(address => bool) public availableTokensByAdmin;
mapping(address => bool) public availableRouterByAdmin;
mapping(uint256 => bool) public availableLock;
mapping(uint256 => address) public investmentVaults;
uint256 public investmentVaultsCount;
uint256 public feePercentage;
address public feeWallet;
address public profitWallet;
uint64 public profitLockedUntil; // Timestamp until profit is locked
uint64 public withdrawalLockedUntil; // Timestamp until withdrawals are locked
bool public autoRenewWithdrawalLock; // Flag indicating whether withdrawal lock should auto-renew
address public currentImplementationOfInvestmentVault;
// we can optimize this storage
address public nextFutureImplementationOfMainVault;
uint64 public nextFutureImplementationOfMainVaultDeadline;
address public nextFutureImplementationOfInvestorVault;
uint64 public nextFutureImplementationOfInvestorVaultDeadline;
uint64 public withdrawCommitTimestamp;
uint64 public pauseToTimestamp;
bool public investorIsCanceledOracleCheck;
bool public adminIsCanceledOracleCheck;
DataTypes.ProfitType public profitType;
uint32 public currentFixedProfitPercent;
uint32 public proposedFixedProfitPercentByAdmin;
address public proposedMeraPriceOracleByAdmin;
IPauserList public pauserList;
IMeraPriceOracle public meraPriceOracle;
modifier isNotLocked() {
require(!_isLock(), WithdrawalLocked());
_;
}
modifier onlyPauser() {
if (!pauserList.hasRole(pauserList.PAUSER_ROLE(), msg.sender)) {
revert NotPauser();
}
_;
}
modifier IsNotAfterSetupPause() {
require(block.timestamp > pauseToTimestamp, InitializePause());
_;
}
/// @custom:oz-upgrades-unsafe-allow constructor
constructor() {
_disableInitializers();
}
/// @dev Contract initialization with role assignment (replaces constructor in upgradeable contracts)
/// @param params All initialization parameters packed into a struct to prevent stack too deep errors
function initialize(InitParams calldata params) public virtual initializer {
__UUPSUpgradeable_init();
__AccessControl_init();
__EIP712_init("MainVault", "1");
__Pausable_init();
// Set initial wallets and configuration
feeWallet = params.feeWallet;
profitWallet = params.profitWallet;
feePercentage = params.feePercentage;
currentImplementationOfInvestmentVault = params.currentImplementationOfInvestmentVault;
autoRenewWithdrawalLock = false; // Default to no auto-renewal
pauserList = IPauserList(params.pauserList);
meraPriceOracle = IMeraPriceOracle(params.meraPriceOracle);
if (params.meraPriceOracle == address(0)) {
investorIsCanceledOracleCheck = true;
adminIsCanceledOracleCheck = true;
}
availableLock[0] = true;
availableLock[10 minutes] = true;
availableLock[365 days] = true;
availableLock[365 days * 3] = true;
availableLock[365 days * 5] = true;
currentFixedProfitPercent = 2000; // 20%
// Assign initial roles to respective addresses
// Due to our custom _grantRole implementation, only one address can have each role
_grantRole(MAIN_INVESTOR_ROLE, params.mainInvestor);
_grantRole(BACKUP_INVESTOR_ROLE, params.backupInvestor);
_grantRole(EMERGENCY_INVESTOR_ROLE, params.emergencyInvestor);
_grantRole(MANAGER_ROLE, params.manager);
_grantRole(ADMIN_ROLE, params.admin);
_grantRole(BACKUP_ADMIN_ROLE, params.backupAdmin);
_grantRole(EMERGENCY_ADMIN_ROLE, params.emergencyAdmin);
// Role admin configuration section
// Each _setRoleAdmin call configures which roles can manage other roles
// Main investor can manage itself
_setRoleAdmin(MAIN_INVESTOR_ROLE, MAIN_INVESTOR_ROLE);
// Backup investor can manage main investor and itself
_setRoleAdmin(MAIN_INVESTOR_ROLE, BACKUP_INVESTOR_ROLE);
_setRoleAdmin(BACKUP_INVESTOR_ROLE, BACKUP_INVESTOR_ROLE);
// Emergency investor can manage main investor, backup investor, and itself
_setRoleAdmin(MAIN_INVESTOR_ROLE, EMERGENCY_INVESTOR_ROLE);
_setRoleAdmin(BACKUP_INVESTOR_ROLE, EMERGENCY_INVESTOR_ROLE);
_setRoleAdmin(EMERGENCY_INVESTOR_ROLE, EMERGENCY_INVESTOR_ROLE);
// Regular management structure
_setRoleAdmin(MANAGER_ROLE, MANAGER_ROLE);
_setRoleAdmin(ADMIN_ROLE, ADMIN_ROLE);
// Backup admin can manage manager, admin, and itself
_setRoleAdmin(MANAGER_ROLE, BACKUP_ADMIN_ROLE);
_setRoleAdmin(ADMIN_ROLE, BACKUP_ADMIN_ROLE);
_setRoleAdmin(BACKUP_ADMIN_ROLE, BACKUP_ADMIN_ROLE);
// Emergency admin has full control over management roles
_setRoleAdmin(MANAGER_ROLE, EMERGENCY_ADMIN_ROLE);
_setRoleAdmin(ADMIN_ROLE, EMERGENCY_ADMIN_ROLE);
_setRoleAdmin(BACKUP_ADMIN_ROLE, EMERGENCY_ADMIN_ROLE);
_setRoleAdmin(EMERGENCY_ADMIN_ROLE, EMERGENCY_ADMIN_ROLE);
//set lock
require(availableLock[params.lockPeriod], LockPeriodNotAvailable());
withdrawalLockedUntil = uint64(block.timestamp + params.lockPeriod);
}
/// @inheritdoc IMainVault
function setFutureMainVaultImplementation(
FutureMainVaultImplementation calldata futureImplementation,
bytes calldata signature
) external onlyRole(ADMIN_ROLE) {
// Verify the signature comes from the main investor
address signer = _verifyFutureMainVaultImplementationSignature(futureImplementation, signature);
require(hasRole(MAIN_INVESTOR_ROLE, signer), InvalidSigner());
// Verify deadline is in the future
require(futureImplementation.deadline > uint64(block.timestamp), TimestampMustBeInTheFuture());
// Set the future implementation
nextFutureImplementationOfMainVault = futureImplementation.implementation;
nextFutureImplementationOfMainVaultDeadline = futureImplementation.deadline;
emit FutureMainVaultImplementationSet(futureImplementation.implementation, futureImplementation.deadline);
}
/// @inheritdoc IMainVault
function setFutureInvestorVaultImplementation(
FutureInvestorVaultImplementation calldata futureImplementation,
bytes calldata signature
) external onlyRole(ADMIN_ROLE) {
// Verify the signature comes from the main investor
address signer = _verifyFutureInvestorVaultImplementationSignature(futureImplementation, signature);
require(hasRole(MAIN_INVESTOR_ROLE, signer), InvalidSigner());
// Verify deadline is in the future
require(futureImplementation.deadline > uint64(block.timestamp), TimestampMustBeInTheFuture());
// Set the future implementation
nextFutureImplementationOfInvestorVault = futureImplementation.implementation;
nextFutureImplementationOfInvestorVaultDeadline = futureImplementation.deadline;
emit FutureInvestorVaultImplementationSet(futureImplementation.implementation, futureImplementation.deadline);
}
/// @inheritdoc IMainVault
function setTokenAvailabilityByInvestor(TokenAvailability[] calldata configs)
external
onlyRole(MAIN_INVESTOR_ROLE)
{
if (_isLock()) {
pauseToTimestamp = uint64(block.timestamp + Constants.PAUSE_AFTER_UPDATE_ACCESS);
}
for (uint256 i = 0; i < configs.length; i++) {
availableTokensByInvestor[configs[i].token] = configs[i].isAvailable;
emit TokenAvailabilityByInvestorChanged(configs[i].token, configs[i].isAvailable);
}
}
/// @inheritdoc IMainVault
function setRouterAvailabilityByInvestor(address[] calldata routers) external onlyRole(MAIN_INVESTOR_ROLE) {
if (_isLock()) {
pauseToTimestamp = uint64(block.timestamp + Constants.PAUSE_AFTER_UPDATE_ACCESS);
}
// Process each router address in the array
for (uint256 i = 0; i < routers.length; i++) {
availableRouterByInvestor[routers[i]] = true;
emit RouterAvailabilityByInvestorChanged(routers[i], true);
}
}
/// @inheritdoc IMainVault
function setTokenAvailabilityByAdmin(TokenAvailability[] calldata configs) external onlyRole(ADMIN_ROLE) {
for (uint256 i = 0; i < configs.length; i++) {
availableTokensByAdmin[configs[i].token] = configs[i].isAvailable;
emit TokenAvailabilityByAdminChanged(configs[i].token, configs[i].isAvailable);
}
}
/// @inheritdoc IMainVault
function setRouterAvailabilityByAdmin(RouterAvailability[] calldata configs) external onlyRole(ADMIN_ROLE) {
for (uint256 i = 0; i < configs.length; i++) {
availableRouterByAdmin[configs[i].router] = configs[i].isAvailable;
emit RouterAvailabilityByAdminChanged(configs[i].router, configs[i].isAvailable);
}
}
/// @inheritdoc IMainVault
function setLockPeriodsAvailability(LockPeriodAvailability[] calldata configs) external onlyRole(ADMIN_ROLE) {
for (uint256 i = 0; i < configs.length; i++) {
availableLock[configs[i].period] = configs[i].isAvailable;
emit LockPeriodAvailabilityChanged(configs[i].period, configs[i].isAvailable);
}
}
/// @inheritdoc IMainVault
function setProfitType(DataTypes.ProfitType _profitType) external onlyRole(MAIN_INVESTOR_ROLE) {
profitType = _profitType;
emit ProfitTypeSet(profitType);
}
/// @inheritdoc IMainVault
function setProposedFixedProfitPercentByAdmin(uint32 _proposedFixedProfitPercent) external onlyRole(ADMIN_ROLE) {
require(_proposedFixedProfitPercent > 0, ZeroAmountNotAllowed());
require(_proposedFixedProfitPercent < Constants.MAX_FIXED_PROFIT_PERCENT, ExceedsMaximumPercentage());
proposedFixedProfitPercentByAdmin = _proposedFixedProfitPercent;
emit ProposedFixedProfitPercentByAdminSet(proposedFixedProfitPercentByAdmin);
}
/// @inheritdoc IMainVault
function setCurrentFixedProfitPercent() external onlyRole(MAIN_INVESTOR_ROLE) {
uint32 oldPercent = currentFixedProfitPercent;
currentFixedProfitPercent = proposedFixedProfitPercentByAdmin;
emit CurrentFixedProfitPercentSet(oldPercent, currentFixedProfitPercent);
}
/// @inheritdoc IMainVault
function setProposedMeraPriceOracleByAdmin(address _proposedOracle) external onlyRole(ADMIN_ROLE) {
require(_proposedOracle != address(0), ZeroAddressNotAllowed());
proposedMeraPriceOracleByAdmin = _proposedOracle;
emit ProposedMeraPriceOracleByAdminSet(proposedMeraPriceOracleByAdmin);
}
/// @inheritdoc IMainVault
function setCurrentMeraPriceOracle() external onlyRole(MAIN_INVESTOR_ROLE) {
require(proposedMeraPriceOracleByAdmin != address(0), ZeroAddressNotAllowed());
address oldOracle = address(meraPriceOracle);
meraPriceOracle = IMeraPriceOracle(proposedMeraPriceOracleByAdmin);
proposedMeraPriceOracleByAdmin = address(0); // Reset proposed oracle after confirmation
emit MeraPriceOracleSet(oldOracle, address(meraPriceOracle));
}
/// @inheritdoc IMainVault
function setProfitWallet(address wallet) external onlyRole(MAIN_INVESTOR_ROLE) {
require(wallet != address(0), ZeroAddressNotAllowed());
address oldWallet = profitWallet;
profitWallet = wallet;
// Set profit locked until at least 7 days from now
profitLockedUntil = uint64(Math.max(profitLockedUntil, block.timestamp + 7 days));
emit ProfitWalletSet(oldWallet, wallet);
}
/// @inheritdoc IMainVault
function setCurrentImplementationOfInvestmentVault(address implementation) external onlyRole(ADMIN_ROLE) {
require(implementation == nextFutureImplementationOfInvestorVault, InvalidImplementationAddress());
require(block.timestamp <= nextFutureImplementationOfInvestorVaultDeadline, InvalidImplementationDeadline());
address oldImplementation = currentImplementationOfInvestmentVault;
currentImplementationOfInvestmentVault = implementation;
nextFutureImplementationOfInvestorVault = address(0);
nextFutureImplementationOfInvestorVaultDeadline = 0;
emit CurrentImplementationOfInvestmentVaultSet(oldImplementation, implementation);
}
/// @inheritdoc IMainVault
function setWithdrawalLock(uint256 period) external onlyRole(MAIN_INVESTOR_ROLE) {
require(availableLock[period], LockPeriodNotAvailable());
_checkAndRenewWithdrawalLock();
withdrawalLockedUntil = uint64(Math.max(withdrawalLockedUntil, block.timestamp + period));
emit WithdrawalLockSet(period, withdrawalLockedUntil);
}
/// @inheritdoc IMainVault
function setAutoRenewWithdrawalLock(bool enabled) external onlyRole(MAIN_INVESTOR_ROLE) {
bool oldValue = autoRenewWithdrawalLock;
autoRenewWithdrawalLock = enabled;
if (oldValue && block.timestamp > withdrawalLockedUntil - Constants.AUTO_RENEW_CHECK_PERIOD) {
withdrawalLockedUntil += uint64(Constants.AUTO_RENEW_PERIOD);
}
emit AutoRenewWithdrawalLockSet(oldValue, enabled);
}
/// @inheritdoc IMainVault
function setWithdrawalLockWithAutoRenew(uint256 period, bool enabled) external onlyRole(MAIN_INVESTOR_ROLE) {
// Check that the lock period is available
require(availableLock[period], LockPeriodNotAvailable());
// Check and renew withdrawal lock if needed
_checkAndRenewWithdrawalLock();
// Set the withdrawal lock
withdrawalLockedUntil = uint64(Math.max(withdrawalLockedUntil, block.timestamp + period));
// Set auto-renewal setting
bool oldAutoRenewValue = autoRenewWithdrawalLock;
autoRenewWithdrawalLock = enabled;
// If auto-renewal is enabled and the lock is about to expire, extend it
if (
enabled && !oldAutoRenewValue && block.timestamp > withdrawalLockedUntil - Constants.AUTO_RENEW_CHECK_PERIOD
) {
withdrawalLockedUntil += uint64(Constants.AUTO_RENEW_PERIOD);
}
// Emit events for both operations
emit WithdrawalLockSet(period, withdrawalLockedUntil);
emit AutoRenewWithdrawalLockSet(oldAutoRenewValue, enabled);
}
/// @dev Pauses the contract operations.
/// Can only be called by a whitelisted pauser from pauserList
function pause() external onlyPauser {
_pause();
}
/// @dev Unpauses the contract operations.
/// Can only be called by a whitelisted pauser from pauserList
function unpause() external onlyPauser {
_unpause();
}
/// @inheritdoc IMainVault
/// @dev Overrides the paused function from PausableUpgradeable and IMainVault
function paused() public view virtual override(PausableUpgradeable, IMainVault) returns (bool) {
return super.paused();
}
/// @inheritdoc IMainVault
function deposit(IERC20 token, uint256 amount) external whenNotPaused {
require(availableTokensByInvestor[address(token)], TokenNotAvailable());
require(amount > 0, ZeroAmountNotAllowed());
token.safeTransferFrom(msg.sender, address(this), amount);
emit Deposited(address(token), msg.sender, amount);
}
/// @inheritdoc IMainVault
function withdraw(IERC20 token, uint256 amount) external isNotLocked onlyRole(MAIN_INVESTOR_ROLE) {
require(amount > 0, ZeroAmountNotAllowed());
uint256 vaultBalance = token.balanceOf(address(this));
require(vaultBalance >= amount, InsufficientBalance());
token.safeTransfer(msg.sender, amount);
emit Withdrawn(address(token), msg.sender, amount);
}
/// @inheritdoc IMainVault
function swapExactTokensForTokens(
address router,
uint256 amountIn,
uint256 amountOutMin,
address[] calldata path,
uint256 deadline
) external onlyRole(MAIN_INVESTOR_ROLE) whenNotPaused IsNotAfterSetupPause returns (uint256[] memory amounts) {
amounts = MainVaultSwapLibrary.executeSwapExactTokensForTokens(
router, amountIn, amountOutMin, path, deadline, availableRouterByAdmin, availableTokensByAdmin
);
}
/// @inheritdoc IMainVault
function swapTokensForExactTokens(
address router,
uint256 amountOut,
uint256 amountInMax,
address[] calldata path,
uint256 deadline
) external onlyRole(MAIN_INVESTOR_ROLE) whenNotPaused IsNotAfterSetupPause returns (uint256[] memory amounts) {
amounts = MainVaultSwapLibrary.executeSwapTokensForExactTokens(
router, amountOut, amountInMax, path, deadline, availableRouterByAdmin, availableTokensByAdmin
);
}
/**
* @dev Deploys a new Investment Vault
* Only the main investor can call this function
*/
function deployInvestmentVault(DataTypes.InvestmentVaultInitData calldata initData)
external
onlyRole(ADMIN_ROLE)
whenNotPaused
returns (address vaultAddress, uint256 vaultId)
{
require(currentImplementationOfInvestmentVault != address(0), InvalidImplementationAddress());
require(availableTokensByInvestor[address(initData.tokenMI)], TokenNotAvailable());
require(address(initData.mainVault) == address(this), InvalidMainVaultAddress());
require(initData.initDeposit > 0, ZeroAmountNotAllowed());
uint256 balance = initData.tokenMI.balanceOf(address(this));
require(balance >= initData.initDeposit, InsufficientBalance());
bytes memory initializationData = abi.encodeWithSelector(IInvestmentVault.initialize.selector, initData);
ERC1967Proxy newProxy = new ERC1967Proxy(currentImplementationOfInvestmentVault, initializationData);
vaultId = investmentVaultsCount;
vaultAddress = address(newProxy);
investmentVaults[vaultId] = vaultAddress;
investmentVaultsCount++;
initData.tokenMI.safeTransfer(vaultAddress, initData.initDeposit);
emit InvestmentVaultDeployed(vaultAddress, address(initData.tokenMI), initData.initDeposit, vaultId);
}
/// @inheritdoc IMainVault
function withdrawFromInvestmentVaults(WithdrawFromVaultData[] calldata withdrawals)
external
onlyRole(MAIN_INVESTOR_ROLE)
isNotLocked
{
require(
block.timestamp > withdrawCommitTimestamp + Constants.WITHDRAW_COMMIT_MIN_DELAY
&& block.timestamp < withdrawCommitTimestamp + Constants.WITHDRAW_COMMIT_MAX_DELAY,
WithdrawCommitTimestampExpired()
);
for (uint256 i = 0; i < withdrawals.length; i++) {
WithdrawFromVaultData calldata withdrawal = withdrawals[i];
if (withdrawal.vaultIndex >= investmentVaultsCount) {
revert InvalidVaultIndex();
}
address vaultAddress = investmentVaults[withdrawal.vaultIndex];
IInvestmentVault vault = IInvestmentVault(vaultAddress);
vault.withdraw(withdrawal.token, withdrawal.amount, address(this));
emit WithdrawnFromInvestmentVault(vaultAddress, address(withdrawal.token), withdrawal.amount, msg.sender);
}
}
/// @notice Commits to withdraw from investment vaults after a delay
/// @dev Sets the withdraw commit timestamp that will be checked in withdrawFromInvestmentVaults
function commitWithdrawFromInvestmentVault() external onlyRole(MAIN_INVESTOR_ROLE) {
withdrawCommitTimestamp = uint64(block.timestamp);
emit WithdrawCommitTimestampSet(withdrawCommitTimestamp);
}
/// @inheritdoc IMainVault
function exactInputSingle(DataTypes.DelegateExactInputSingleParams calldata params)
external
onlyRole(MAIN_INVESTOR_ROLE)
whenNotPaused
IsNotAfterSetupPause
returns (uint256 amountOut)
{
amountOut = MainVaultSwapLibrary.executeExactInputSingle(
params.router, params, availableRouterByAdmin, availableTokensByAdmin
);
}
/// @inheritdoc IMainVault
function exactInput(DataTypes.DelegateExactInputParams calldata params)
external
onlyRole(MAIN_INVESTOR_ROLE)
whenNotPaused
IsNotAfterSetupPause
returns (uint256 amountOut)
{
amountOut = MainVaultSwapLibrary.executeExactInput(
params.router, params, availableRouterByAdmin, availableTokensByAdmin
);
}
/// @inheritdoc IMainVault
function exactOutputSingle(DataTypes.DelegateExactOutputSingleParams calldata params)
external
onlyRole(MAIN_INVESTOR_ROLE)
whenNotPaused
IsNotAfterSetupPause
returns (uint256 amountIn)
{
amountIn = MainVaultSwapLibrary.executeExactOutputSingle(
params.router, params, availableRouterByAdmin, availableTokensByAdmin
);
}
/// @inheritdoc IMainVault
function exactOutput(DataTypes.DelegateExactOutputParams calldata params)
external
onlyRole(MAIN_INVESTOR_ROLE)
whenNotPaused
IsNotAfterSetupPause
returns (uint256 amountIn)
{
amountIn = MainVaultSwapLibrary.executeExactOutput(
params.router, params, availableRouterByAdmin, availableTokensByAdmin
);
}
/// @dev Swaps an exact amount of input tokens for as many output tokens as possible using Quickswap V3
/// @param params The parameters necessary for the swap
/// @return amountOut The amount of the received token
function quickswapExactInputSingle(DataTypes.DelegateQuickswapExactInputSingleParams calldata params)
external
onlyRole(MAIN_INVESTOR_ROLE)
whenNotPaused
IsNotAfterSetupPause
returns (uint256 amountOut)
{
amountOut = MainVaultSwapLibrary.executeQuickswapExactInputSingle(
params.router, params, availableRouterByAdmin, availableTokensByAdmin
);
}
/// @dev Swaps an exact amount of tokens for as many output tokens as possible along the specified path using Quickswap V3
/// @param params The parameters necessary for the multi-hop swap
/// @return amountOut The amount of the received token
function quickswapExactInput(DataTypes.DelegateQuickswapExactInputParams calldata params)
external
onlyRole(MAIN_INVESTOR_ROLE)
whenNotPaused
IsNotAfterSetupPause
returns (uint256 amountOut)
{
amountOut = MainVaultSwapLibrary.executeQuickswapExactInput(
params.router, params, availableRouterByAdmin, availableTokensByAdmin
);
}
/// @dev Swaps as little as possible of one token for an exact amount of another token using Quickswap V3
/// @param params The parameters necessary for the swap
/// @return amountIn The amount of the input token spent
function quickswapExactOutputSingle(DataTypes.DelegateQuickswapExactOutputSingleParams calldata params)
external
onlyRole(MAIN_INVESTOR_ROLE)
whenNotPaused
IsNotAfterSetupPause
returns (uint256 amountIn)
{
amountIn = MainVaultSwapLibrary.executeQuickswapExactOutputSingle(
params.router, params, availableRouterByAdmin, availableTokensByAdmin
);
}
/// @dev Swaps as little as possible of one token for an exact amount of another along the specified path using Quickswap V3
/// @param params The parameters necessary for the multi-hop swap
/// @return amountIn The amount of the input token spent
function quickswapExactOutput(DataTypes.DelegateQuickswapExactOutputParams calldata params)
external
onlyRole(MAIN_INVESTOR_ROLE)
whenNotPaused
IsNotAfterSetupPause
returns (uint256 amountIn)
{
amountIn = MainVaultSwapLibrary.executeQuickswapExactOutput(
params.router, params, availableRouterByAdmin, availableTokensByAdmin
);
}
/// @inheritdoc IMainVault
function setInvestorIsCanceledOracleCheck(bool value) external onlyRole(MAIN_INVESTOR_ROLE) {
investorIsCanceledOracleCheck = value;
}
/// @inheritdoc IMainVault
function setAdminIsCanceledOracleCheck(bool value) external onlyRole(ADMIN_ROLE) {
adminIsCanceledOracleCheck = value;
}
/// @inheritdoc IMainVault
function isCanceledOracleCheck() external view returns (bool) {
return investorIsCanceledOracleCheck && adminIsCanceledOracleCheck;
}
/// @inheritdoc IMainVault
function checkAndRenewWithdrawalLock() external onlyRole(ADMIN_ROLE) returns (bool renewed) {
return _checkAndRenewWithdrawalLock();
}
/// @dev Overrides MultiAdminSingleHolderAccessControlUppgradable._grantRole to ensure only one account has each role
/// @param role The role being assigned
/// @param account The account receiving the role
/// @return Boolean indicating if the operation was successful
function _grantRole(bytes32 role, address account)
internal
virtual
override(MultiAdminSingleHolderAccessControlUppgradable)
returns (bool)
{
// Set lock for 7 days when assigning MAIN_INVESTOR_ROLE
if (role == MAIN_INVESTOR_ROLE) {
withdrawalLockedUntil = uint64(Math.max(withdrawalLockedUntil, block.timestamp + 7 days));
}
// If emergency investor equals backup admin, remove lock and disable auto-renewal
if ((role == EMERGENCY_INVESTOR_ROLE) && hasRole(EMERGENCY_ADMIN_ROLE, account)) {
address backupAdmin = getRoleHolder(BACKUP_ADMIN_ROLE);
_grantRole(BACKUP_INVESTOR_ROLE, backupAdmin);
_grantRole(MAIN_INVESTOR_ROLE, backupAdmin);
// The same address has both EMERGENCY_INVESTOR_ROLE and BACKUP_ADMIN_ROLE
// Remove withdrawal lock and disable auto-renewal
withdrawalLockedUntil = 0;
if (autoRenewWithdrawalLock) {
bool oldValue = autoRenewWithdrawalLock;
autoRenewWithdrawalLock = false;
emit AutoRenewWithdrawalLockSet(oldValue, false);
}
emit WithdrawalLockRemovedBySpecialRole(account);
}
return super._grantRole(role, account);
}
/// @dev Checks if withdrawal lock needs to be renewed and renews it if necessary
/// Called before any operation that requires checking the withdrawal lock
/// If auto-renewal is enabled and lock is about to expire, extends it by 365 days
///
/// @return Whether the lock was renewed
function _checkAndRenewWithdrawalLock() internal returns (bool) {
if (
autoRenewWithdrawalLock && withdrawalLockedUntil != 0
&& withdrawalLockedUntil - Constants.AUTO_RENEW_CHECK_PERIOD <= block.timestamp
) {
withdrawalLockedUntil += uint64(Constants.AUTO_RENEW_PERIOD);
emit WithdrawalLockAutoRenewed(withdrawalLockedUntil);
return true;
}
return false;
}
function _isLock() internal returns (bool) {
_checkAndRenewWithdrawalLock();
return block.timestamp < withdrawalLockedUntil;
}
/// @dev Verifies the EIP-712 signature for a future Main Vault implementation
/// @param futureImplementation The implementation data that was signed
/// @param signature The signature to verify
/// @return The signer's address
function _verifyFutureMainVaultImplementationSignature(
FutureMainVaultImplementation calldata futureImplementation,
bytes calldata signature
) internal view returns (address) {
bytes32 structHash = keccak256(
abi.encode(
_FUTURE_MAIN_VAULT_IMPLEMENTATION_TYPEHASH,
futureImplementation.implementation,
futureImplementation.deadline
)
);
bytes32 hash = _hashTypedDataV4(structHash);
return ECDSA.recover(hash, signature);
}
/// @dev Verifies the EIP-712 signature for a future Investor Vault implementation
/// @param futureImplementation The implementation data that was signed
/// @param signature The signature to verify
/// @return The signer's address
function _verifyFutureInvestorVaultImplementationSignature(
FutureInvestorVaultImplementation calldata futureImplementation,
bytes calldata signature
) internal view returns (address) {
bytes32 structHash = keccak256(
abi.encode(
_FUTURE_INVESTOR_VAULT_IMPLEMENTATION_TYPEHASH,
futureImplementation.implementation,
futureImplementation.deadline
)
);
bytes32 hash = _hashTypedDataV4(structHash);
return ECDSA.recover(hash, signature);
}
/// @dev Contract upgrade authorization function (UUPS pattern)
/// Only the admin role can authorize contract upgrades
///
/// @param newImplementation Address of the new implementation
function _authorizeUpgrade(address newImplementation) internal override onlyRole(ADMIN_ROLE) {
require(newImplementation == nextFutureImplementationOfMainVault, InvalidImplementationAddress());
require(block.timestamp <= nextFutureImplementationOfMainVaultDeadline, InvalidImplementationDeadline());
nextFutureImplementationOfMainVault = address(0);
nextFutureImplementationOfMainVaultDeadline = 0;
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity ^0.8.29;
import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";
import {IInvestmentVault} from "./IInvestmentVault.sol";
import {IMultiAdminSingleHolderAccessControl} from "./IMultiAdminSingleHolderAccessControl.sol";
import {IERC5267} from "@openzeppelin/contracts/interfaces/IERC5267.sol";
import {IPauserList} from "./IPauserList.sol";
import {Constants} from "../utils/Constants.sol";
import {DataTypes} from "../utils/DataTypes.sol";
import {IMeraPriceOracle} from "./IMeraPriceOracle.sol";
/// @title IMainVault
/// @dev Interface for Main Vault
interface IMainVault is IMultiAdminSingleHolderAccessControl, IERC5267 {
function paused() external view returns (bool);
/// @dev Main investor role
function MAIN_INVESTOR_ROLE() external view returns (bytes32);
/// @dev Backup investor role
function BACKUP_INVESTOR_ROLE() external view returns (bytes32);
/// @dev Emergency investor role
function EMERGENCY_INVESTOR_ROLE() external view returns (bytes32);
/// @dev Manager role
function MANAGER_ROLE() external view returns (bytes32);
/// @dev Admin role
function ADMIN_ROLE() external view returns (bytes32);
/// @dev Backup admin role
function BACKUP_ADMIN_ROLE() external view returns (bytes32);
/// @dev Emergency admin role
function EMERGENCY_ADMIN_ROLE() external view returns (bytes32);
/// @dev Emitted when the contract is locked
event ContractLocked(address indexed locker);
/// @dev Emitted when the contract is unlocked
event ContractUnlocked(address indexed unlocker);
/// @dev Emitted when a token's availability is changed by an investor
event TokenAvailabilityByInvestorChanged(address indexed token, bool isAvailable);
/// @dev Emitted when a router's availability is changed by an investor
event RouterAvailabilityByInvestorChanged(address indexed router, bool isAvailable);
/// @dev Emitted when a token's availability is changed by an admin
event TokenAvailabilityByAdminChanged(address indexed token, bool isAvailable);
/// @dev Emitted when a router's availability is changed by an admin
event RouterAvailabilityByAdminChanged(address indexed router, bool isAvailable);
/// @dev Emitted when a lock period's availability is changed
event LockPeriodAvailabilityChanged(uint256 indexed period, bool isAvailable);
/// @dev Emitted when a withdrawal lock is set
event WithdrawalLockSet(uint256 period, uint64 newLockTimestamp);
/// @dev Emitted when withdrawal lock is removed because the same address has both
/// EMERGENCY_INVESTOR_ROLE and BACKUP_ADMIN_ROLE
event WithdrawalLockRemovedBySpecialRole(address indexed account);
/// @dev Emitted when auto-renewal of withdrawal lock is enabled or disabled
event AutoRenewWithdrawalLockSet(bool oldValue, bool newValue);
/// @dev Emitted when withdrawal lock is automatically renewed
event WithdrawalLockAutoRenewed(uint64 newLockTimestamp);
/// @dev Emitted when withdraw commit timestamp is set
event WithdrawCommitTimestampSet(uint64 timestamp);
/// @dev Emitted when a future implementation for Main Vault is set
event FutureMainVaultImplementationSet(address indexed implementation, uint64 deadline);
/// @dev Emitted when a future implementation for Investor Vault is set
event FutureInvestorVaultImplementationSet(address indexed implementation, uint64 deadline);
/// @dev Emitted when profit wallet address is changed
event ProfitWalletSet(address indexed oldWallet, address indexed newWallet);
/// @dev Emitted when fee wallet address is changed
event FeeWalletSet(address indexed oldWallet, address indexed newWallet);
/// @dev Emitted when fee percentage is changed
event FeePercentageChanged(uint256 oldPercentage, uint256 newPercentage);
/// @dev Emitted when current implementation of investment vault is changed
event CurrentImplementationOfInvestmentVaultSet(
address indexed oldImplementation, address indexed newImplementation
);
/// @dev Emitted when tokens are deposited into the vault
event Deposited(address indexed token, address indexed sender, uint256 amount);
/// @dev Emitted when tokens are withdrawn from the vault
event Withdrawn(address indexed token, address indexed receiver, uint256 amount);
/// @dev Emitted when an exact amount of tokens is swapped for another token
event ExactTokensSwapped(
address indexed router, address indexed fromToken, address indexed toToken, uint256 amountIn, uint256 amountOut
);
/// @dev Emitted when tokens are swapped for an exact amount of output tokens
event TokensSwappedForExact(
address indexed router, address indexed fromToken, address indexed toToken, uint256 amountIn, uint256 amountOut
);
/// @dev Emitted when a new Investment Vault is deployed
event InvestmentVaultDeployed(
address indexed vaultAddress, address indexed tokenMI, uint256 initDeposit, uint256 vaultId
);
/// @dev Emitted when exactInputSingle is executed
event ExactInputSingleExecuted(
address indexed router, address indexed tokenIn, address indexed tokenOut, uint256 amountIn, uint256 amountOut
);
/// @dev Emitted when exactInput is executed
event ExactInputExecuted(
address indexed router, address indexed tokenIn, address indexed tokenOut, uint256 amountIn, uint256 amountOut
);
/// @dev Emitted when exactOutputSingle is executed
event ExactOutputSingleExecuted(
address indexed router, address indexed tokenIn, address indexed tokenOut, uint256 amountIn, uint256 amountOut
);
/// @dev Emitted when exactOutput is executed
event ExactOutputExecuted(
address indexed router, address indexed tokenIn, address indexed tokenOut, uint256 amountIn, uint256 amountOut
);
/// @dev Emitted when exactInputSingleDelegate is executed
event ExactInputSingleDelegateExecuted(
address indexed router, address indexed tokenIn, address indexed tokenOut, uint256 amountIn, uint256 amountOut
);
/// @dev Emitted when exactInputDelegate is executed
event ExactInputDelegateExecuted(
address indexed router, address indexed tokenIn, address indexed tokenOut, uint256 amountIn, uint256 amountOut
);
/// @dev Emitted when exactOutputSingleDelegate is executed
event ExactOutputSingleDelegateExecuted(
address indexed router, address indexed tokenIn, address indexed tokenOut, uint256 amountIn, uint256 amountOut
);
/// @dev Emitted when exactOutputDelegate is executed
event ExactOutputDelegateExecuted(
address indexed router, address indexed tokenIn, address indexed tokenOut, uint256 amountIn, uint256 amountOut
);
/// @dev Emitted when tokens are withdrawn from investment vault
event WithdrawnFromInvestmentVault(
address indexed vault, address indexed token, uint256 amount, address indexed receiver
);
/// @dev Emitted when current fixed profit percent is set
event CurrentFixedProfitPercentSet(uint32 oldPercent, uint32 newPercent);
/// @dev Emitted when profit type is set
event ProfitTypeSet(DataTypes.ProfitType profitType);
/// @dev Emitted when proposed fixed profit percent is set by admin
event ProposedFixedProfitPercentByAdminSet(uint32 percent);
/// @dev Emitted when admin proposes a new MeraPriceOracle
event ProposedMeraPriceOracleByAdminSet(address proposedOracle);
/// @dev Emitted when MeraPriceOracle is updated by main investor
event MeraPriceOracleSet(address oldOracle, address newOracle);
/// @dev Initialization struct to prevent stack too deep errors
struct InitParams {
address mainInvestor;
address backupInvestor;
address emergencyInvestor;
address manager;
address admin;
address backupAdmin;
address emergencyAdmin;
address feeWallet;
address profitWallet;
uint256 feePercentage;
address currentImplementationOfInvestmentVault;
address pauserList;
address meraPriceOracle;
uint64 lockPeriod;
}
/// @dev Token availability configuration struct
struct TokenAvailability {
address token;
bool isAvailable;
}
/// @dev Router availability configuration struct
struct RouterAvailability {
address router;
bool isAvailable;
}
/// @dev Lock period availability configuration struct
struct LockPeriodAvailability {
uint256 period;
bool isAvailable;
}
/// @dev Future Main Vault Implementation configuration struct
struct FutureMainVaultImplementation {
address implementation;
uint64 deadline;
}
/// @dev Future Investor Vault Implementation configuration struct
struct FutureInvestorVaultImplementation {
address implementation;
uint64 deadline;
}
/// @dev Get token availability by investor
/// @param token Token address to check
/// @return isAvailable True if token is available for investor
function availableTokensByInvestor(address token) external view returns (bool);
/// @dev Get router availability by investor
/// @param router Router address to check
/// @return isAvailable True if router is available for investor
function availableRouterByInvestor(address router) external view returns (bool);
/// @dev Get token availability by admin
/// @param token Token address to check
/// @return isAvailable True if token is available for admin
function availableTokensByAdmin(address token) external view returns (bool);
/// @dev Get router availability by admin
/// @param router Router address to check
/// @return isAvailable True if router is available for admin
function availableRouterByAdmin(address router) external view returns (bool);
/// @dev Get lock period availability
/// @param period Lock period to check
/// @return isAvailable True if lock period is available
function availableLock(uint256 period) external view returns (bool);
/// @dev Get investment vault address by ID
/// @param id Investment vault ID
/// @return vaultAddress Address of the investment vault
function investmentVaults(uint256 id) external view returns (address);
/// @dev Get total number of investment vaults
/// @return count Total number of investment vaults
function investmentVaultsCount() external view returns (uint256);
/// @dev Get current fee percentage
/// @return percentage Current fee percentage
function feePercentage() external view returns (uint256);
/// @dev Get fee wallet address
/// @return wallet Fee wallet address
function feeWallet() external view returns (address);
/// @dev Get profit wallet address
/// @return wallet Profit wallet address
function profitWallet() external view returns (address);
/// @dev Get timestamp until profit is locked
/// @return timestamp Timestamp until profit is locked
function profitLockedUntil() external view returns (uint64);
/// @dev Get timestamp until withdrawals are locked
/// @return timestamp Timestamp until withdrawals are locked
function withdrawalLockedUntil() external view returns (uint64);
/// @dev Get current implementation of investment vault
/// @return implementation Current implementation address
function currentImplementationOfInvestmentVault() external view returns (address);
/// @dev Get next future implementation of main vault
/// @return implementation Next implementation address
function nextFutureImplementationOfMainVault() external view returns (address);
/// @dev Get deadline for next future implementation of main vault
/// @return deadline Deadline timestamp
function nextFutureImplementationOfMainVaultDeadline() external view returns (uint64);
/// @dev Get next future implementation of investor vault
/// @return implementation Next implementation address
function nextFutureImplementationOfInvestorVault() external view returns (address);
/// @dev Manually triggers the withdrawal lock renewal check
/// @dev Can only be called by admin to force check and potentially renew the withdrawal lock
/// @return renewed True if the lock was renewed, false otherwise
function checkAndRenewWithdrawalLock() external returns (bool renewed);
/// @dev Get deadline for next future implementation of investor vault
/// @return deadline Deadline timestamp
function nextFutureImplementationOfInvestorVaultDeadline() external view returns (uint64);
/// @dev Sets availability status for multiple tokens by investor
/// @param configs Array of token availability configurations
function setTokenAvailabilityByInvestor(TokenAvailability[] calldata configs) external;
/// @dev Sets availability status for multiple routers by investor
/// Always sets availability to true, can't be set to false
/// @param routers Array of router addresses to enable
function setRouterAvailabilityByInvestor(address[] calldata routers) external;
/// @dev Sets availability status for multiple tokens by admin
/// @param configs Array of token availability configurations
function setTokenAvailabilityByAdmin(TokenAvailability[] calldata configs) external;
/// @dev Sets availability status for multiple routers by admin
/// @param configs Array of router availability configurations
function setRouterAvailabilityByAdmin(RouterAvailability[] calldata configs) external;
/// @dev Sets availability status for multiple lock periods
/// Only admin can call this function
/// @param configs Array of lock period availability configurations
function setLockPeriodsAvailability(LockPeriodAvailability[] calldata configs) external;
/// @dev Sets the future implementation of the Main Vault
/// Only admin can call this function, and it requires a valid signature from the main investor
///
/// @param futureImplementation Structure containing the implementation address and deadline
/// @param signature EIP-712 signature from the main investor
function setFutureMainVaultImplementation(
FutureMainVaultImplementation calldata futureImplementation,
bytes calldata signature
) external;
/// @dev Sets the future implementation of the Investor Vault
/// Only admin can call this function, and it requires a valid signature from the main investor
///
/// @param futureImplementation Structure containing the implementation address and deadline
/// @param signature EIP-712 signature from the main investor
function setFutureInvestorVaultImplementation(
FutureInvestorVaultImplementation calldata futureImplementation,
bytes calldata signature
) external;
/// @dev Sets the profit wallet address
/// Only the main investor can call this function
/// Profit withdrawal will be locked for at least 7 days
///
/// @param wallet New profit wallet address
function setProfitWallet(address wallet) external;
/// @dev Sets the current implementation of the Investment Vault
/// Only admin can call this function
/// The new implementation must match the previously set nextFutureImplementationOfInvestorVault
/// and current time must not exceed nextFutureImplementationOfInvestorVaultDeadline
/// After setting, nextFutureImplementationOfInvestorVault and nextFutureImplementationOfInvestorVaultDeadline are reset
///
/// @param implementation New implementation address
function setCurrentImplementationOfInvestmentVault(address implementation) external;
/// @dev Deposits tokens into the vault
/// Can only be called for tokens approved by both investor and admin
///
/// @param token Token to deposit
/// @param amount Amount of tokens to deposit
function deposit(IERC20 token, uint256 amount) external;
/// @dev Withdraws tokens from the vault
/// Tokens are sent to the sender's address
/// Can only be called when withdrawals are not locked
///
/// @param token Token to withdraw
/// @param amount Amount of tokens to withdraw
function withdraw(IERC20 token, uint256 amount) external;
/// @dev Swaps an exact amount of input tokens for as many output tokens as possible using Uniswap
/// Only the main investor can call this function
/// Router must be in the list of available routers
/// First and last tokens in the path must be in the list of available tokens
///
/// @param router The Uniswap router address to use
/// @param amountIn The amount of input tokens to send
/// @param amountOutMin The minimum amount of output tokens to receive
/// @param path An array of token addresses representing the swap path
/// @param deadline Unix timestamp after which the transaction will revert
/// @return amounts The input token amount and all subsequent output token amounts
function swapExactTokensForTokens(
address router,
uint256 amountIn,
uint256 amountOutMin,
address[] calldata path,
uint256 deadline
) external returns (uint256[] memory amounts);
/// @dev Swaps tokens for an exact amount of output tokens using Uniswap
/// Only the main investor can call this function
/// Router must be in the list of available routers
/// First and last tokens in the path must be in the list of available tokens
///
/// @param router The Uniswap router address to use
/// @param amountOut The exact amount of output tokens to receive
/// @param amountInMax The maximum amount of input tokens to send
/// @param path An array of token addresses representing the swap path
/// @param deadline Unix timestamp after which the transaction will revert
/// @return amounts The input token amount and all subsequent output token amounts
function swapTokensForExactTokens(
address router,
uint256 amountOut,
uint256 amountInMax,
address[] calldata path,
uint256 deadline
) external returns (uint256[] memory amounts);
/// @dev Deploys a new Investment Vault using the current implementation
/// Only admin can call this function
/// Uses the current implementation to deploy a proxy
/// Transfers tokenMI in the amount of initDeposit to the new vault
/// Initializes the vault with the provided data
///
/// @param initData Initialization data for the new Investment Vault
/// @return vaultAddress The address of the deployed Investment Vault
/// @return vaultId The ID of the deployed Investment Vault
function deployInvestmentVault(DataTypes.InvestmentVaultInitData calldata initData)
external
returns (address vaultAddress, uint256 vaultId);
/// @dev Data structure for withdrawing tokens from investment vaults
struct WithdrawFromVaultData {
uint256 vaultIndex;
IERC20 token;
uint256 amount;
}
/// @dev Withdraws tokens from multiple investment vaults
/// Only the main investor can call this function
///
/// @param withdrawals Array of withdrawal requests containing vault index, token, and amount
function withdrawFromInvestmentVaults(WithdrawFromVaultData[] calldata withdrawals) external;
/// @dev Swaps an exact amount of `tokenIn` for as much as possible of `tokenOut`, receiving tokens to this contract
/// @param params The simplified parameters necessary for the swap
/// @return amountOut The amount of the received token
function exactInputSingle(DataTypes.DelegateExactInputSingleParams calldata params)
external
returns (uint256 amountOut);
/// @dev Swaps an exact amount of tokens for as many as possible along the specified path, receiving tokens to this contract
/// @param params The simplified parameters necessary for the multi-hop swap
/// @return amountOut The amount of the received token
function exactInput(DataTypes.DelegateExactInputParams calldata params) external returns (uint256 amountOut);
/// @dev Swaps as little as possible of one token for an exact amount of another token, receiving tokens to this contract
/// @param params The simplified parameters necessary for the swap
/// @return amountIn The amount of the input token
function exactOutputSingle(DataTypes.DelegateExactOutputSingleParams calldata params)
external
returns (uint256 amountIn);
/// @dev Swaps as little as possible of one token for an exact amount along the specified path, receiving tokens to this contract
/// @param params The simplified parameters necessary for the multi-hop swap
/// @return amountIn The amount of the input token
function exactOutput(DataTypes.DelegateExactOutputParams calldata params) external returns (uint256 amountIn);
/// @dev Get if auto-renewal of withdrawal lock is enabled
/// @return enabled True if auto-renewal is enabled
function autoRenewWithdrawalLock() external view returns (bool);
/// @dev Sets a withdrawal lock for a specified period
/// Only the main investor can call this function
/// The period must be in the list of available lock periods
///
/// @param period Lock period in seconds
function setWithdrawalLock(uint256 period) external;
/// @dev Sets whether withdrawal lock should automatically renew
/// When enabled, the lock will be renewed for 365 days when it's within 7 days of expiry
/// Only the main investor can call this function
///
/// @param enabled Whether auto-renewal should be enabled
function setAutoRenewWithdrawalLock(bool enabled) external;
/// @dev Sets a withdrawal lock for a specified period and configures auto-renewal
/// Combines the functionality of setWithdrawalLock and setAutoRenewWithdrawalLock
/// Only the main investor can call this function
/// The period must be in the list of available lock periods
///
/// @param period Lock period in seconds
/// @param enabled Whether auto-renewal should be enabled
function setWithdrawalLockWithAutoRenew(uint256 period, bool enabled) external;
/// @dev Commits to withdraw from investment vaults after a delay
/// Only the main investor can call this function
/// The timestamp will be set to block.timestamp + WITHDRAW_COMMIT_MIN_DELAY
function commitWithdrawFromInvestmentVault() external;
/// @dev Get PauserList contract address
/// @return PauserList contract address
function pauserList() external view returns (IPauserList);
/// @dev Get MeraPriceOracle contract address
/// @return MeraPriceOracle contract address
function meraPriceOracle() external view returns (IMeraPriceOracle);
/// @dev Get if investor is canceled oracle check
/// @return isCanceled True if investor is canceled oracle check
function investorIsCanceledOracleCheck() external view returns (bool);
/// @dev Get if admin is canceled oracle check
/// @return isCanceled True if admin is canceled oracle check
function adminIsCanceledOracleCheck() external view returns (bool);
/// @dev Get if oracle check is canceled
/// @return isCanceled True if oracle check is canceled
function isCanceledOracleCheck() external view returns (bool);
/// @dev Set if investor is canceled oracle check
/// @param value True if investor is canceled oracle check
function setInvestorIsCanceledOracleCheck(bool value) external;
/// @dev Set if admin is canceled oracle check
/// @param value True if admin is canceled oracle check
function setAdminIsCanceledOracleCheck(bool value) external;
/// @dev Sets the current fixed profit percent if proposed values from admin and main investor match
/// @dev Can be called by either admin or main investor
function setCurrentFixedProfitPercent() external;
/// @dev Sets the profit type
/// @param _profitType The new profit type to set
function setProfitType(DataTypes.ProfitType _profitType) external;
/// @dev Sets the proposed fixed profit percent by admin
/// @param _proposedFixedProfitPercent The proposed fixed profit percent
function setProposedFixedProfitPercentByAdmin(uint32 _proposedFixedProfitPercent) external;
/// @dev Sets the proposed MeraPriceOracle by admin
/// @param _proposedOracle The proposed MeraPriceOracle address
function setProposedMeraPriceOracleByAdmin(address _proposedOracle) external;
/// @dev Can be called by main investor to confirm proposed MeraPriceOracle
function setCurrentMeraPriceOracle() external;
/// @dev Get current fixed profit percent
/// @return percent Current fixed profit percent
function currentFixedProfitPercent() external view returns (uint32);
/// @dev Get profit type
/// @return profitType Profit type
function profitType() external view returns (DataTypes.ProfitType);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity 0.8.29;
import {Initializable} from "@openzeppelin/contracts-upgradeable/proxy/utils/Initializable.sol";
import {UUPSUpgradeable} from "@openzeppelin/contracts-upgradeable/proxy/utils/UUPSUpgradeable.sol";
import {MultiAdminSingleHolderAccessControlUppgradable} from
"./utils/MultiAdminSingleHolderAccessControlUppgradable.sol";
import {IAgentDistributionProfit} from "./interfaces/IAgentDistributionProfit.sol";
import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";
import {SafeERC20} from "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol";
contract AgentDistributionProfit is
IAgentDistributionProfit,
Initializable,
UUPSUpgradeable,
MultiAdminSingleHolderAccessControlUppgradable
{
using SafeERC20 for IERC20;
// Constants
uint256 public constant UPGRADE_TIME_LIMIT = 1 days; // Time limit for upgrade approval
uint256 public constant MIN_AGENT_PERCENTAGE = 2000; // 20%
uint256 public constant MAX_AGENT_PERCENTAGE = 3000; // 30%
uint256 public constant MAX_PERCENTAGE = 10000; // 100%
uint256 public constant MERA_CAPITAL_PERCENTAGE = 5000; // 50%
// Role definitions
bytes32 public constant MAIN_AGENT_ROLE = keccak256("MAIN_AGENT_ROLE");
bytes32 public constant BACKUP_AGENT_ROLE = keccak256("BACKUP_AGENT_ROLE");
bytes32 public constant EMERGENCY_AGENT_ROLE = keccak256("EMERGENCY_AGENT_ROLE");
bytes32 public constant ADMIN_ROLE = keccak256("ADMIN_ROLE");
bytes32 public constant BACKUP_ADMIN_ROLE = keccak256("BACKUP_ADMIN_ROLE");
bytes32 public constant EMERGENCY_ADMIN_ROLE = keccak256("EMERGENCY_ADMIN_ROLE");
// State variables
address public fundWallet;
address public meraCapitalWallet;
uint256 public agentPercentage;
uint256 public fundProfit;
uint256 public meraCapitalProfit;
address public adminApproved;
address public agentApproved;
uint256 public adminApprovedTimestamp;
uint256 public agentApprovedTimestamp;
modifier onlyAdminOrAgent() {
require(hasRole(ADMIN_ROLE, msg.sender) || hasRole(MAIN_AGENT_ROLE, msg.sender), AccessDenied());
_;
}
/// @custom:oz-upgrades-unsafe-allow constructor
constructor() {
_disableInitializers();
}
function initialize(
address _fundWallet,
address _agentWallet,
address _adminWallet,
address _emergencyAdminWallet,
address _reserveAdminWallet,
address _emergencyAgentWallet,
address _reserveAgentWallet,
address _meraCapitalWallet
) external virtual initializer {
require(_fundWallet != address(0), ZeroAddress());
require(_agentWallet != address(0), ZeroAddress());
require(_adminWallet != address(0), ZeroAddress());
require(_emergencyAdminWallet != address(0), ZeroAddress());
require(_reserveAdminWallet != address(0), ZeroAddress());
require(_emergencyAgentWallet != address(0), ZeroAddress());
require(_reserveAgentWallet != address(0), ZeroAddress());
require(_meraCapitalWallet != address(0), ZeroAddress());
__UUPSUpgradeable_init();
__AccessControl_init();
fundWallet = _fundWallet;
meraCapitalWallet = _meraCapitalWallet;
agentPercentage = MIN_AGENT_PERCENTAGE;
// Setup roles
_grantRole(MAIN_AGENT_ROLE, _agentWallet);
_grantRole(BACKUP_AGENT_ROLE, _reserveAgentWallet);
_grantRole(EMERGENCY_AGENT_ROLE, _emergencyAgentWallet);
_grantRole(ADMIN_ROLE, _adminWallet);
_grantRole(BACKUP_ADMIN_ROLE, _reserveAdminWallet);
_grantRole(EMERGENCY_ADMIN_ROLE, _emergencyAdminWallet);
// Setup role hierarchy
_setRoleAdmin(MAIN_AGENT_ROLE, MAIN_AGENT_ROLE);
_setRoleAdmin(BACKUP_AGENT_ROLE, BACKUP_AGENT_ROLE);
_setRoleAdmin(EMERGENCY_AGENT_ROLE, EMERGENCY_AGENT_ROLE);
_setRoleAdmin(ADMIN_ROLE, ADMIN_ROLE);
_setRoleAdmin(BACKUP_ADMIN_ROLE, BACKUP_ADMIN_ROLE);
_setRoleAdmin(EMERGENCY_ADMIN_ROLE, EMERGENCY_ADMIN_ROLE);
// Emergency agent can manage main and backup agents
_setRoleAdmin(MAIN_AGENT_ROLE, EMERGENCY_AGENT_ROLE);
_setRoleAdmin(BACKUP_AGENT_ROLE, EMERGENCY_AGENT_ROLE);
// Emergency admin can manage all admin roles
_setRoleAdmin(ADMIN_ROLE, EMERGENCY_ADMIN_ROLE);
_setRoleAdmin(BACKUP_ADMIN_ROLE, EMERGENCY_ADMIN_ROLE);
}
///@inheritdoc IAgentDistributionProfit
function approveUpgrade(address newImplementation) external onlyAdminOrAgent {
require(newImplementation != address(0), InvalidUpgradeAddress());
if (hasRole(ADMIN_ROLE, msg.sender)) {
adminApproved = newImplementation;
adminApprovedTimestamp = block.timestamp;
emit UpgradeApproved(newImplementation, msg.sender);
} else {
agentApproved = newImplementation;
agentApprovedTimestamp = block.timestamp;
emit UpgradeApproved(newImplementation, msg.sender);
}
}
///@inheritdoc IAgentDistributionProfit
function distributeProfit(address[] calldata tokens) external onlyAdminOrAgent {
for (uint256 i = 0; i < tokens.length; i++) {
address token = tokens[i];
uint256 balance = IERC20(token).balanceOf(address(this));
uint256 agentAmount = balance * agentPercentage / MAX_PERCENTAGE;
uint256 meraCapitalAmount = balance * MERA_CAPITAL_PERCENTAGE / MAX_PERCENTAGE;
uint256 fundAmount = balance - agentAmount - meraCapitalAmount;
if (fundAmount > 0) {
if (hasRole(ADMIN_ROLE, msg.sender)) {
IERC20(token).safeTransfer(fundWallet, fundAmount);
} else {
fundProfit += fundAmount;
}
}
if (meraCapitalAmount > 0) {
if (hasRole(ADMIN_ROLE, msg.sender)) {
IERC20(token).safeTransfer(meraCapitalWallet, meraCapitalAmount);
} else {
meraCapitalProfit += meraCapitalAmount;
}
}
if (agentAmount > 0) {
IERC20(token).safeTransfer(getRoleHolder(MAIN_AGENT_ROLE), agentAmount);
}
}
}
///@inheritdoc IAgentDistributionProfit
function increaseAgentPercentage(uint256 _agentPercentage) external onlyRole(ADMIN_ROLE) {
require(
_agentPercentage >= MIN_AGENT_PERCENTAGE && _agentPercentage <= MAX_AGENT_PERCENTAGE,
AgentPercentageOutOfRange()
);
require(_agentPercentage > agentPercentage, AgentPercentageCanOnlyIncrease());
agentPercentage = _agentPercentage;
}
///@inheritdoc IAgentDistributionProfit
function setFundWallet(address _fundWallet) external onlyRole(ADMIN_ROLE) {
require(_fundWallet != address(0), ZeroAddress());
fundWallet = _fundWallet;
emit FundWalletSet(msg.sender, _fundWallet);
}
///@inheritdoc IAgentDistributionProfit
function setMeraCapitalWallet(address _meraCapitalWallet) external onlyRole(ADMIN_ROLE) {
require(_meraCapitalWallet != address(0), ZeroAddress());
meraCapitalWallet = _meraCapitalWallet;
emit MeraCapitalWalletSet(msg.sender, _meraCapitalWallet);
}
function _authorizeUpgrade(address newImplementation) internal view override onlyAdminOrAgent {
require(newImplementation != address(0), InvalidUpgradeAddress());
require(newImplementation == adminApproved, ImplementationNotApprovedByAdmin());
require(newImplementation == agentApproved, ImplementationNotApprovedByAgent());
require(block.timestamp - adminApprovedTimestamp < UPGRADE_TIME_LIMIT, UpgradeDeadlineExpired());
require(block.timestamp - agentApprovedTimestamp < UPGRADE_TIME_LIMIT, UpgradeDeadlineExpired());
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity 0.8.29;
import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";
interface IAgentDistributionProfit {
// Errors
error ZeroAddress();
error AccessDenied();
error InvalidUpgradeAddress();
error ImplementationNotApprovedByFund();
error ImplementationNotApprovedByAgent();
error UpgradeDeadlineExpired();
error AgentPercentageCanOnlyIncrease();
error ImplementationNotApprovedByAdmin();
error AgentPercentageOutOfRange();
// Events
event UpgradeApproved(address implementation, address approver);
event FundWalletSet(address sender, address newFundWallet);
event MeraCapitalWalletSet(address sender, address newMeraCapitalWallet);
// Structs
struct FutureMainVaultImplementation {
address implementation;
uint64 deadline;
}
struct FutureInvestorVaultImplementation {
address implementation;
uint64 deadline;
}
// Approves an upgrade to a new implementation.
// Requirements:
// - `newImplementation` cannot be the zero address.
function approveUpgrade(address newImplementation) external;
// Distributes profit among the specified tokens.
// Requirements:
// - Caller must have the appropriate role.
function distributeProfit(address[] calldata tokens) external;
// Increases the agent's profit percentage.
// Requirements:
// - `_agentPercentage` must be within the allowed range.
// - `_agentPercentage` must be greater than the current percentage.
function increaseAgentPercentage(uint256 _agentPercentage) external;
// Sets the fund wallet address.
// Requirements:
// - `_fundWallet` cannot be the zero address.
function setFundWallet(address _fundWallet) external;
// Sets the Mera Capital wallet address.
// Requirements:
// - `_meraCapitalWallet` cannot be the zero address.
function setMeraCapitalWallet(address _meraCapitalWallet) external;
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.2.0) (proxy/ERC1967/ERC1967Proxy.sol)
pragma solidity ^0.8.22;
import {Proxy} from "../Proxy.sol";
import {ERC1967Utils} from "./ERC1967Utils.sol";
/**
* @dev This contract implements an upgradeable proxy. It is upgradeable because calls are delegated to an
* implementation address that can be changed. This address is stored in storage in the location specified by
* https://eips.ethereum.org/EIPS/eip-1967[ERC-1967], so that it doesn't conflict with the storage layout of the
* implementation behind the proxy.
*/
contract ERC1967Proxy is Proxy {
/**
* @dev Initializes the upgradeable proxy with an initial implementation specified by `implementation`.
*
* If `_data` is nonempty, it's used as data in a delegate call to `implementation`. This will typically be an
* encoded function call, and allows initializing the storage of the proxy like a Solidity constructor.
*
* Requirements:
*
* - If `data` is empty, `msg.value` must be zero.
*/
constructor(address implementation, bytes memory _data) payable {
ERC1967Utils.upgradeToAndCall(implementation, _data);
}
/**
* @dev Returns the current implementation address.
*
* TIP: To get this value clients can read directly from the storage slot shown below (specified by ERC-1967) using
* the https://eth.wiki/json-rpc/API#eth_getstorageat[`eth_getStorageAt`] RPC call.
* `0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc`
*/
function _implementation() internal view virtual override returns (address) {
return ERC1967Utils.getImplementation();
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (access/Ownable.sol)
pragma solidity ^0.8.20;
import {Context} from "../utils/Context.sol";
/**
* @dev Contract module which provides a basic access control mechanism, where
* there is an account (an owner) that can be granted exclusive access to
* specific functions.
*
* The initial owner is set to the address provided by the deployer. This can
* later be changed with {transferOwnership}.
*
* This module is used through inheritance. It will make available the modifier
* `onlyOwner`, which can be applied to your functions to restrict their use to
* the owner.
*/
abstract contract Ownable is Context {
address private _owner;
/**
* @dev The caller account is not authorized to perform an operation.
*/
error OwnableUnauthorizedAccount(address account);
/**
* @dev The owner is not a valid owner account. (eg. `address(0)`)
*/
error OwnableInvalidOwner(address owner);
event OwnershipTransferred(address indexed previousOwner, address indexed newOwner);
/**
* @dev Initializes the contract setting the address provided by the deployer as the initial owner.
*/
constructor(address initialOwner) {
if (initialOwner == address(0)) {
revert OwnableInvalidOwner(address(0));
}
_transferOwnership(initialOwner);
}
/**
* @dev Throws if called by any account other than the owner.
*/
modifier onlyOwner() {
_checkOwner();
_;
}
/**
* @dev Returns the address of the current owner.
*/
function owner() public view virtual returns (address) {
return _owner;
}
/**
* @dev Throws if the sender is not the owner.
*/
function _checkOwner() internal view virtual {
if (owner() != _msgSender()) {
revert OwnableUnauthorizedAccount(_msgSender());
}
}
/**
* @dev Leaves the contract without owner. It will not be possible to call
* `onlyOwner` functions. Can only be called by the current owner.
*
* NOTE: Renouncing ownership will leave the contract without an owner,
* thereby disabling any functionality that is only available to the owner.
*/
function renounceOwnership() public virtual onlyOwner {
_transferOwnership(address(0));
}
/**
* @dev Transfers ownership of the contract to a new account (`newOwner`).
* Can only be called by the current owner.
*/
function transferOwnership(address newOwner) public virtual onlyOwner {
if (newOwner == address(0)) {
revert OwnableInvalidOwner(address(0));
}
_transferOwnership(newOwner);
}
/**
* @dev Transfers ownership of the contract to a new account (`newOwner`).
* Internal function without access restriction.
*/
function _transferOwnership(address newOwner) internal virtual {
address oldOwner = _owner;
_owner = newOwner;
emit OwnershipTransferred(oldOwner, newOwner);
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity ^0.8.29;
/// @title IFactory
/// @dev Interface for the Factory contract
interface IFactory {
error CallerIsNotDeployer();
error InvalidReferralCode();
error ZeroAddress();
error ReferralCodeAlreadyUsed();
// Structure to hold constructor parameters to avoid stack too deep
struct ConstructorParams {
// MainVault parameters
address mainVaultImplementation;
address investmentVaultImplementation;
address manager;
address admin;
address backupAdmin;
address emergencyAdmin;
uint256 feePercentage;
address pauserList;
// AgentDistribution parameters
address agentDistributionImplementation;
address fundWallet;
address defaultAgentWallet;
address meraCapitalWallet;
address meraPriceOracle;
}
event MainVaultCreated(
address indexed mainVaultProxy,
address indexed mainInvestor,
address indexed creator,
address backupInvestor,
address emergencyInvestor,
address profitWallet,
string referralCode
);
event DistributionContractCreated(address indexed proxyAddress, string referralCode, address agentWallet);
event ReferralCodeRegistered(string indexed referralCode, address indexed agentDistribution);
event DefaultAgentDistributionCreated(address indexed proxyAddress, address agentWallet);
event FounderWalletUpdated(address indexed oldFundWallet, address indexed newFundWallet);
event MeraCapitalWalletUpdated(address indexed oldMeraCapitalWallet, address indexed newMeraCapitalWallet);
event DeployerUpdated(address indexed oldDeployer, address indexed newDeployer);
event MeraPriceOracleUpdated(address indexed oldMeraPriceOracle, address indexed newMeraPriceOracle);
/// @notice Creates a new MainVault instance
/// @param mainInvestor The address of the main investor
/// @param backupInvestor The address of the backup investor
/// @param emergencyInvestor The address of the emergency investor
/// @param profitWallet The address of the profit wallet
/// @param referralCode The referral code to be used
/// @return mainVaultProxy The address of the created MainVault proxy
function createMainVault(
address mainInvestor,
address backupInvestor,
address emergencyInvestor,
address profitWallet,
string calldata referralCode
) external returns (address mainVaultProxy);
/// @notice Sets the deployer address
/// @param _deployer The new deployer address
function setDeployer(address _deployer) external;
/// @notice Creates a new AgentDistributionProfit instance
/// @param referralCode The referral code to be used
/// @param agentWallet The address of the agent wallet
/// @param reserveAgentWallet The address of the reserve agent wallet
/// @param emergencyAgentWallet The address of the emergency agent wallet
/// @return The address of the created AgentDistributionProfit proxy
function createAgentDistribution(
string calldata referralCode,
address agentWallet,
address reserveAgentWallet,
address emergencyAgentWallet
) external returns (address);
/// @notice Updates the implementation addresses
/// @param newMainVaultImpl The new MainVault implementation address
/// @param newInvestmentVaultImpl The new InvestmentVault implementation address
/// @param newAgentDistributionImpl The new AgentDistribution implementation address
function updateImplementations(
address newMainVaultImpl,
address newInvestmentVaultImpl,
address newAgentDistributionImpl
) external;
/// @notice Updates the fixed parameters for MainVault creation
/// @param _manager The new manager address
/// @param _admin The new admin address
/// @param _backupAdmin The new backup admin address
/// @param _emergencyAdmin The new emergency admin address
/// @param _feePercentage The new fee percentage
/// @param _pauserList The new pauser list address
function updateMainVaultParameters(
address _manager,
address _admin,
address _backupAdmin,
address _emergencyAdmin,
uint256 _feePercentage,
address _pauserList
) external;
/// @notice Updates fund wallet for all future AgentDistribution contracts
/// @param _fundWallet The new fund wallet address
/// @param _meraCapitalWallet The new Mera Capital wallet address
function updateFundWallets(address _fundWallet, address _meraCapitalWallet) external;
/// @notice Gets the AgentDistribution contract address for a referral code
/// @param referralCode The referral code to query
/// @return The address of the AgentDistribution contract
function getAgentDistribution(string calldata referralCode) external view returns (address);
/// @notice Gets the referral code for an AgentDistribution contract
/// @param agentDistribution The address of the AgentDistribution contract
/// @return The referral code associated with the contract
function getReferralCode(address agentDistribution) external view returns (string memory);
/// @notice Sets the Mera Price Oracle
/// @param _meraPriceOracle The new Mera Price Oracle address
function setMeraPriceOracle(address _meraPriceOracle) external;
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.3.0) (proxy/utils/UUPSUpgradeable.sol)
pragma solidity ^0.8.22;
import {IERC1822Proxiable} from "@openzeppelin/contracts/interfaces/draft-IERC1822.sol";
import {ERC1967Utils} from "@openzeppelin/contracts/proxy/ERC1967/ERC1967Utils.sol";
import {Initializable} from "./Initializable.sol";
/**
* @dev An upgradeability mechanism designed for UUPS proxies. The functions included here can perform an upgrade of an
* {ERC1967Proxy}, when this contract is set as the implementation behind such a proxy.
*
* A security mechanism ensures that an upgrade does not turn off upgradeability accidentally, although this risk is
* reinstated if the upgrade retains upgradeability but removes the security mechanism, e.g. by replacing
* `UUPSUpgradeable` with a custom implementation of upgrades.
*
* The {_authorizeUpgrade} function must be overridden to include access restriction to the upgrade mechanism.
*/
abstract contract UUPSUpgradeable is Initializable, IERC1822Proxiable {
/// @custom:oz-upgrades-unsafe-allow state-variable-immutable
address private immutable __self = address(this);
/**
* @dev The version of the upgrade interface of the contract. If this getter is missing, both `upgradeTo(address)`
* and `upgradeToAndCall(address,bytes)` are present, and `upgradeTo` must be used if no function should be called,
* while `upgradeToAndCall` will invoke the `receive` function if the second argument is the empty byte string.
* If the getter returns `"5.0.0"`, only `upgradeToAndCall(address,bytes)` is present, and the second argument must
* be the empty byte string if no function should be called, making it impossible to invoke the `receive` function
* during an upgrade.
*/
string public constant UPGRADE_INTERFACE_VERSION = "5.0.0";
/**
* @dev The call is from an unauthorized context.
*/
error UUPSUnauthorizedCallContext();
/**
* @dev The storage `slot` is unsupported as a UUID.
*/
error UUPSUnsupportedProxiableUUID(bytes32 slot);
/**
* @dev Check that the execution is being performed through a delegatecall call and that the execution context is
* a proxy contract with an implementation (as defined in ERC-1967) pointing to self. This should only be the case
* for UUPS and transparent proxies that are using the current contract as their implementation. Execution of a
* function through ERC-1167 minimal proxies (clones) would not normally pass this test, but is not guaranteed to
* fail.
*/
modifier onlyProxy() {
_checkProxy();
_;
}
/**
* @dev Check that the execution is not being performed through a delegate call. This allows a function to be
* callable on the implementing contract but not through proxies.
*/
modifier notDelegated() {
_checkNotDelegated();
_;
}
function __UUPSUpgradeable_init() internal onlyInitializing {
}
function __UUPSUpgradeable_init_unchained() internal onlyInitializing {
}
/**
* @dev Implementation of the ERC-1822 {proxiableUUID} function. This returns the storage slot used by the
* implementation. It is used to validate the implementation's compatibility when performing an upgrade.
*
* IMPORTANT: A proxy pointing at a proxiable contract should not be considered proxiable itself, because this risks
* bricking a proxy that upgrades to it, by delegating to itself until out of gas. Thus it is critical that this
* function revert if invoked through a proxy. This is guaranteed by the `notDelegated` modifier.
*/
function proxiableUUID() external view virtual notDelegated returns (bytes32) {
return ERC1967Utils.IMPLEMENTATION_SLOT;
}
/**
* @dev Upgrade the implementation of the proxy to `newImplementation`, and subsequently execute the function call
* encoded in `data`.
*
* Calls {_authorizeUpgrade}.
*
* Emits an {Upgraded} event.
*
* @custom:oz-upgrades-unsafe-allow-reachable delegatecall
*/
function upgradeToAndCall(address newImplementation, bytes memory data) public payable virtual onlyProxy {
_authorizeUpgrade(newImplementation);
_upgradeToAndCallUUPS(newImplementation, data);
}
/**
* @dev Reverts if the execution is not performed via delegatecall or the execution
* context is not of a proxy with an ERC-1967 compliant implementation pointing to self.
*/
function _checkProxy() internal view virtual {
if (
address(this) == __self || // Must be called through delegatecall
ERC1967Utils.getImplementation() != __self // Must be called through an active proxy
) {
revert UUPSUnauthorizedCallContext();
}
}
/**
* @dev Reverts if the execution is performed via delegatecall.
* See {notDelegated}.
*/
function _checkNotDelegated() internal view virtual {
if (address(this) != __self) {
// Must not be called through delegatecall
revert UUPSUnauthorizedCallContext();
}
}
/**
* @dev Function that should revert when `msg.sender` is not authorized to upgrade the contract. Called by
* {upgradeToAndCall}.
*
* Normally, this function will use an xref:access.adoc[access control] modifier such as {Ownable-onlyOwner}.
*
* ```solidity
* function _authorizeUpgrade(address) internal onlyOwner {}
* ```
*/
function _authorizeUpgrade(address newImplementation) internal virtual;
/**
* @dev Performs an implementation upgrade with a security check for UUPS proxies, and additional setup call.
*
* As a security check, {proxiableUUID} is invoked in the new implementation, and the return value
* is expected to be the implementation slot in ERC-1967.
*
* Emits an {IERC1967-Upgraded} event.
*/
function _upgradeToAndCallUUPS(address newImplementation, bytes memory data) private {
try IERC1822Proxiable(newImplementation).proxiableUUID() returns (bytes32 slot) {
if (slot != ERC1967Utils.IMPLEMENTATION_SLOT) {
revert UUPSUnsupportedProxiableUUID(slot);
}
ERC1967Utils.upgradeToAndCall(newImplementation, data);
} catch {
// The implementation is not UUPS
revert ERC1967Utils.ERC1967InvalidImplementation(newImplementation);
}
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity 0.8.29;
import {IMultiAdminSingleHolderAccessControl} from "../interfaces/IMultiAdminSingleHolderAccessControl.sol";
import {Initializable} from "@openzeppelin/contracts-upgradeable/proxy/utils/Initializable.sol";
import {ContextUpgradeable} from "@openzeppelin/contracts-upgradeable/utils/ContextUpgradeable.sol";
import {ERC165Upgradeable} from "@openzeppelin/contracts-upgradeable/utils/introspection/ERC165Upgradeable.sol";
abstract contract MultiAdminSingleHolderAccessControlUppgradable is
Initializable,
ContextUpgradeable,
IMultiAdminSingleHolderAccessControl,
ERC165Upgradeable
{
struct RoleData {
address roleHolder; // Single holder - only one address can hold the role
mapping(bytes32 => bool) adminRole; // Multiple admin roles can control this role
}
/// @custom:storage-location erc7201:openzeppelin.storage.AccessControl
struct AccessControlStorage {
mapping(bytes32 role => RoleData) _roles;
mapping(address account => bytes32[] roles) _accountRoles;
}
bytes32 private constant AccessControlStorageLocation =
0xdbadc8f809858f78abc0d8ad2d539141b11227e3823afc1897c7978d63569f00; //keccak256(abi.encode(uint256(keccak256("merafund.storage.MultiAdminSingleHolderAccessControlUppgradable")) - 1)) & ~bytes32(uint256(0xff));
function _getAccessControlStorage() private pure returns (AccessControlStorage storage $) {
assembly {
$.slot := AccessControlStorageLocation
}
}
/**
* @dev Modifier that checks that an account has a specific role. Reverts
* with an {AccessControlUnauthorizedAccount} error including the required role.
*/
modifier onlyRole(bytes32 role) {
_checkRole(role);
_;
}
function __AccessControl_init() internal onlyInitializing {}
function __AccessControl_init_unchained() internal onlyInitializing {}
/**
* @dev See {IERC165-supportsInterface}.
*/
function supportsInterface(bytes4 interfaceId) public view virtual override returns (bool) {
return interfaceId == type(IMultiAdminSingleHolderAccessControl).interfaceId
|| super.supportsInterface(interfaceId);
}
/**
* @dev Returns `true` if `account` has been granted `role`.
*/
function hasRole(bytes32 role, address account) public view virtual returns (bool) {
AccessControlStorage storage $ = _getAccessControlStorage();
return $._roles[role].roleHolder == account;
}
/**
* @dev Returns the address that currently holds the specified role.
* Returns address(0) if no one holds the role.
*/
function getRoleHolder(bytes32 role) public view virtual returns (address) {
AccessControlStorage storage $ = _getAccessControlStorage();
return $._roles[role].roleHolder;
}
/**
* @dev Reverts with an {AccessControlUnauthorizedAccount} error if `_msgSender()`
* is missing `role`. Overriding this function changes the behavior of the {onlyRole} modifier.
*/
function _checkRole(bytes32 role) internal view virtual {
_checkRole(role, _msgSender());
}
/**
* @dev Reverts with an {AccessControlUnauthorizedAccount} error if `account`
* is missing `role`.
*/
function _checkRole(bytes32 role, address account) internal view virtual {
if (!hasRole(role, account)) {
revert AccessControlUnauthorizedAccount(account, role);
}
}
/**
* @dev Returns true if adminRole can control role
*/
function isRoleAdmin(bytes32 role, bytes32 adminRole) public view virtual returns (bool) {
AccessControlStorage storage $ = _getAccessControlStorage();
return $._roles[role].adminRole[adminRole];
}
/**
* @dev Grants `role` to `account`.
*
* If another account already has the role, it will be revoked from them first.
* If `account` had not been already granted `role`, emits a {RoleGranted}
* event.
*
* Requirements:
*
* - the caller must have an admin role that can control ``role``.
*
* May emit {RoleRevoked} and {RoleGranted} events.
*/
function grantRole(bytes32 role, address account) public virtual {
_checkRoleAdmin(role);
_grantRole(role, account);
}
/**
* @dev Internal function to check if caller has admin rights for the role
*/
function _checkRoleAdmin(bytes32 role) internal view virtual {
AccessControlStorage storage $ = _getAccessControlStorage();
bytes32[] memory userRoles = $._accountRoles[_msgSender()];
// Check if caller has DEFAULT_ADMIN_ROLE and it's set as admin for this role
for (uint256 i = 0; i < userRoles.length; i++) {
if ($._roles[role].adminRole[userRoles[i]]) {
return;
}
}
// Check all possible admin roles
// Note: In practice, you'd need to track which roles exist to iterate them
// For now, we assume DEFAULT_ADMIN_ROLE is the primary admin mechanism
revert AccessControlUnauthorizedAccount(_msgSender(), 0x00);
}
/**
* @dev Sets `adminRole` as one of ``role``'s admin roles.
*
* Emits a {RoleAdminAdded} event.
*/
function _setRoleAdmin(bytes32 role, bytes32 adminRole) internal virtual {
AccessControlStorage storage $ = _getAccessControlStorage();
$._roles[role].adminRole[adminRole] = true;
emit RoleAdminAdded(role, adminRole);
}
/**
* @dev Removes `adminRole` from ``role``'s admin roles.
*
* Emits a {RoleAdminRemoved} event.
*/
function _removeRoleAdmin(bytes32 role, bytes32 adminRole) internal virtual {
AccessControlStorage storage $ = _getAccessControlStorage();
$._roles[role].adminRole[adminRole] = false;
emit RoleAdminRemoved(role, adminRole);
}
/**
* @dev Attempts to grant `role` to `account` and returns a boolean indicating if `role` was granted.
*
* Internal function without access restriction.
* If another account holds the role, it will be revoked first.
*
* May emit {RoleRevoked} and {RoleGranted} events.
*/
function _grantRole(bytes32 role, address account) internal virtual returns (bool) {
AccessControlStorage storage $ = _getAccessControlStorage();
address currentHolder = $._roles[role].roleHolder;
// If role is already held by the same account, do nothing
if (currentHolder == account) {
return false;
}
// Revoke from current holder if exists
if (currentHolder != address(0)) {
$._roles[role].roleHolder = address(0);
for (uint256 i = 0; i < $._accountRoles[currentHolder].length; i++) {
if ($._accountRoles[currentHolder][i] == role) {
$._accountRoles[currentHolder][i] =
$._accountRoles[currentHolder][$._accountRoles[currentHolder].length - 1];
$._accountRoles[currentHolder].pop();
break;
}
}
emit RoleRevoked(role, currentHolder, _msgSender());
}
// Grant to new account
$._roles[role].roleHolder = account;
$._accountRoles[account].push(role);
emit RoleGranted(role, account, _msgSender());
return true;
}
/**
* @dev Attempts to revoke `role` from `account` and returns a boolean indicating if `role` was revoked.
*
* Internal function without access restriction.
*
* May emit a {RoleRevoked} event.
*/
function _revokeRole(bytes32 role, address account) internal virtual returns (bool) {
AccessControlStorage storage $ = _getAccessControlStorage();
if ($._roles[role].roleHolder == account) {
$._roles[role].roleHolder = address(0);
for (uint256 i = 0; i < $._accountRoles[account].length; i++) {
if ($._accountRoles[account][i] == role) {
$._accountRoles[account][i] = $._accountRoles[account][$._accountRoles[account].length - 1];
$._accountRoles[account].pop();
break;
}
}
emit RoleRevoked(role, account, _msgSender());
return true;
} else {
return false;
}
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (token/ERC20/IERC20.sol)
pragma solidity ^0.8.20;
/**
* @dev Interface of the ERC-20 standard as defined in the ERC.
*/
interface IERC20 {
/**
* @dev Emitted when `value` tokens are moved from one account (`from`) to
* another (`to`).
*
* Note that `value` may be zero.
*/
event Transfer(address indexed from, address indexed to, uint256 value);
/**
* @dev Emitted when the allowance of a `spender` for an `owner` is set by
* a call to {approve}. `value` is the new allowance.
*/
event Approval(address indexed owner, address indexed spender, uint256 value);
/**
* @dev Returns the value of tokens in existence.
*/
function totalSupply() external view returns (uint256);
/**
* @dev Returns the value of tokens owned by `account`.
*/
function balanceOf(address account) external view returns (uint256);
/**
* @dev Moves a `value` amount of tokens from the caller's account to `to`.
*
* Returns a boolean value indicating whether the operation succeeded.
*
* Emits a {Transfer} event.
*/
function transfer(address to, uint256 value) external returns (bool);
/**
* @dev Returns the remaining number of tokens that `spender` will be
* allowed to spend on behalf of `owner` through {transferFrom}. This is
* zero by default.
*
* This value changes when {approve} or {transferFrom} are called.
*/
function allowance(address owner, address spender) external view returns (uint256);
/**
* @dev Sets a `value` amount of tokens as the allowance of `spender` over the
* caller's tokens.
*
* Returns a boolean value indicating whether the operation succeeded.
*
* IMPORTANT: Beware that changing an allowance with this method brings the risk
* that someone may use both the old and the new allowance by unfortunate
* transaction ordering. One possible solution to mitigate this race
* condition is to first reduce the spender's allowance to 0 and set the
* desired value afterwards:
* https://github.com/ethereum/EIPs/issues/20#issuecomment-263524729
*
* Emits an {Approval} event.
*/
function approve(address spender, uint256 value) external returns (bool);
/**
* @dev Moves a `value` amount of tokens from `from` to `to` using the
* allowance mechanism. `value` is then deducted from the caller's
* allowance.
*
* Returns a boolean value indicating whether the operation succeeded.
*
* Emits a {Transfer} event.
*/
function transferFrom(address from, address to, uint256 value) external returns (bool);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.3.0) (token/ERC20/utils/SafeERC20.sol)
pragma solidity ^0.8.20;
import {IERC20} from "../IERC20.sol";
import {IERC1363} from "../../../interfaces/IERC1363.sol";
/**
* @title SafeERC20
* @dev Wrappers around ERC-20 operations that throw on failure (when the token
* contract returns false). Tokens that return no value (and instead revert or
* throw on failure) are also supported, non-reverting calls are assumed to be
* successful.
* To use this library you can add a `using SafeERC20 for IERC20;` statement to your contract,
* which allows you to call the safe operations as `token.safeTransfer(...)`, etc.
*/
library SafeERC20 {
/**
* @dev An operation with an ERC-20 token failed.
*/
error SafeERC20FailedOperation(address token);
/**
* @dev Indicates a failed `decreaseAllowance` request.
*/
error SafeERC20FailedDecreaseAllowance(address spender, uint256 currentAllowance, uint256 requestedDecrease);
/**
* @dev Transfer `value` amount of `token` from the calling contract to `to`. If `token` returns no value,
* non-reverting calls are assumed to be successful.
*/
function safeTransfer(IERC20 token, address to, uint256 value) internal {
_callOptionalReturn(token, abi.encodeCall(token.transfer, (to, value)));
}
/**
* @dev Transfer `value` amount of `token` from `from` to `to`, spending the approval given by `from` to the
* calling contract. If `token` returns no value, non-reverting calls are assumed to be successful.
*/
function safeTransferFrom(IERC20 token, address from, address to, uint256 value) internal {
_callOptionalReturn(token, abi.encodeCall(token.transferFrom, (from, to, value)));
}
/**
* @dev Variant of {safeTransfer} that returns a bool instead of reverting if the operation is not successful.
*/
function trySafeTransfer(IERC20 token, address to, uint256 value) internal returns (bool) {
return _callOptionalReturnBool(token, abi.encodeCall(token.transfer, (to, value)));
}
/**
* @dev Variant of {safeTransferFrom} that returns a bool instead of reverting if the operation is not successful.
*/
function trySafeTransferFrom(IERC20 token, address from, address to, uint256 value) internal returns (bool) {
return _callOptionalReturnBool(token, abi.encodeCall(token.transferFrom, (from, to, value)));
}
/**
* @dev Increase the calling contract's allowance toward `spender` by `value`. If `token` returns no value,
* non-reverting calls are assumed to be successful.
*
* IMPORTANT: If the token implements ERC-7674 (ERC-20 with temporary allowance), and if the "client"
* smart contract uses ERC-7674 to set temporary allowances, then the "client" smart contract should avoid using
* this function. Performing a {safeIncreaseAllowance} or {safeDecreaseAllowance} operation on a token contract
* that has a non-zero temporary allowance (for that particular owner-spender) will result in unexpected behavior.
*/
function safeIncreaseAllowance(IERC20 token, address spender, uint256 value) internal {
uint256 oldAllowance = token.allowance(address(this), spender);
forceApprove(token, spender, oldAllowance + value);
}
/**
* @dev Decrease the calling contract's allowance toward `spender` by `requestedDecrease`. If `token` returns no
* value, non-reverting calls are assumed to be successful.
*
* IMPORTANT: If the token implements ERC-7674 (ERC-20 with temporary allowance), and if the "client"
* smart contract uses ERC-7674 to set temporary allowances, then the "client" smart contract should avoid using
* this function. Performing a {safeIncreaseAllowance} or {safeDecreaseAllowance} operation on a token contract
* that has a non-zero temporary allowance (for that particular owner-spender) will result in unexpected behavior.
*/
function safeDecreaseAllowance(IERC20 token, address spender, uint256 requestedDecrease) internal {
unchecked {
uint256 currentAllowance = token.allowance(address(this), spender);
if (currentAllowance < requestedDecrease) {
revert SafeERC20FailedDecreaseAllowance(spender, currentAllowance, requestedDecrease);
}
forceApprove(token, spender, currentAllowance - requestedDecrease);
}
}
/**
* @dev Set the calling contract's allowance toward `spender` to `value`. If `token` returns no value,
* non-reverting calls are assumed to be successful. Meant to be used with tokens that require the approval
* to be set to zero before setting it to a non-zero value, such as USDT.
*
* NOTE: If the token implements ERC-7674, this function will not modify any temporary allowance. This function
* only sets the "standard" allowance. Any temporary allowance will remain active, in addition to the value being
* set here.
*/
function forceApprove(IERC20 token, address spender, uint256 value) internal {
bytes memory approvalCall = abi.encodeCall(token.approve, (spender, value));
if (!_callOptionalReturnBool(token, approvalCall)) {
_callOptionalReturn(token, abi.encodeCall(token.approve, (spender, 0)));
_callOptionalReturn(token, approvalCall);
}
}
/**
* @dev Performs an {ERC1363} transferAndCall, with a fallback to the simple {ERC20} transfer if the target has no
* code. This can be used to implement an {ERC721}-like safe transfer that rely on {ERC1363} checks when
* targeting contracts.
*
* Reverts if the returned value is other than `true`.
*/
function transferAndCallRelaxed(IERC1363 token, address to, uint256 value, bytes memory data) internal {
if (to.code.length == 0) {
safeTransfer(token, to, value);
} else if (!token.transferAndCall(to, value, data)) {
revert SafeERC20FailedOperation(address(token));
}
}
/**
* @dev Performs an {ERC1363} transferFromAndCall, with a fallback to the simple {ERC20} transferFrom if the target
* has no code. This can be used to implement an {ERC721}-like safe transfer that rely on {ERC1363} checks when
* targeting contracts.
*
* Reverts if the returned value is other than `true`.
*/
function transferFromAndCallRelaxed(
IERC1363 token,
address from,
address to,
uint256 value,
bytes memory data
) internal {
if (to.code.length == 0) {
safeTransferFrom(token, from, to, value);
} else if (!token.transferFromAndCall(from, to, value, data)) {
revert SafeERC20FailedOperation(address(token));
}
}
/**
* @dev Performs an {ERC1363} approveAndCall, with a fallback to the simple {ERC20} approve if the target has no
* code. This can be used to implement an {ERC721}-like safe transfer that rely on {ERC1363} checks when
* targeting contracts.
*
* NOTE: When the recipient address (`to`) has no code (i.e. is an EOA), this function behaves as {forceApprove}.
* Opposedly, when the recipient address (`to`) has code, this function only attempts to call {ERC1363-approveAndCall}
* once without retrying, and relies on the returned value to be true.
*
* Reverts if the returned value is other than `true`.
*/
function approveAndCallRelaxed(IERC1363 token, address to, uint256 value, bytes memory data) internal {
if (to.code.length == 0) {
forceApprove(token, to, value);
} else if (!token.approveAndCall(to, value, data)) {
revert SafeERC20FailedOperation(address(token));
}
}
/**
* @dev Imitates a Solidity high-level call (i.e. a regular function call to a contract), relaxing the requirement
* on the return value: the return value is optional (but if data is returned, it must not be false).
* @param token The token targeted by the call.
* @param data The call data (encoded using abi.encode or one of its variants).
*
* This is a variant of {_callOptionalReturnBool} that reverts if call fails to meet the requirements.
*/
function _callOptionalReturn(IERC20 token, bytes memory data) private {
uint256 returnSize;
uint256 returnValue;
assembly ("memory-safe") {
let success := call(gas(), token, 0, add(data, 0x20), mload(data), 0, 0x20)
// bubble errors
if iszero(success) {
let ptr := mload(0x40)
returndatacopy(ptr, 0, returndatasize())
revert(ptr, returndatasize())
}
returnSize := returndatasize()
returnValue := mload(0)
}
if (returnSize == 0 ? address(token).code.length == 0 : returnValue != 1) {
revert SafeERC20FailedOperation(address(token));
}
}
/**
* @dev Imitates a Solidity high-level call (i.e. a regular function call to a contract), relaxing the requirement
* on the return value: the return value is optional (but if data is returned, it must not be false).
* @param token The token targeted by the call.
* @param data The call data (encoded using abi.encode or one of its variants).
*
* This is a variant of {_callOptionalReturn} that silently catches all reverts and returns a bool instead.
*/
function _callOptionalReturnBool(IERC20 token, bytes memory data) private returns (bool) {
bool success;
uint256 returnSize;
uint256 returnValue;
assembly ("memory-safe") {
success := call(gas(), token, 0, add(data, 0x20), mload(data), 0, 0x20)
returnSize := returndatasize()
returnValue := mload(0)
}
return success && (returnSize == 0 ? address(token).code.length > 0 : returnValue == 1);
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.3.0) (proxy/utils/Initializable.sol)
pragma solidity ^0.8.20;
/**
* @dev This is a base contract to aid in writing upgradeable contracts, or any kind of contract that will be deployed
* behind a proxy. Since proxied contracts do not make use of a constructor, it's common to move constructor logic to an
* external initializer function, usually called `initialize`. It then becomes necessary to protect this initializer
* function so it can only be called once. The {initializer} modifier provided by this contract will have this effect.
*
* The initialization functions use a version number. Once a version number is used, it is consumed and cannot be
* reused. This mechanism prevents re-execution of each "step" but allows the creation of new initialization steps in
* case an upgrade adds a module that needs to be initialized.
*
* For example:
*
* [.hljs-theme-light.nopadding]
* ```solidity
* contract MyToken is ERC20Upgradeable {
* function initialize() initializer public {
* __ERC20_init("MyToken", "MTK");
* }
* }
*
* contract MyTokenV2 is MyToken, ERC20PermitUpgradeable {
* function initializeV2() reinitializer(2) public {
* __ERC20Permit_init("MyToken");
* }
* }
* ```
*
* TIP: To avoid leaving the proxy in an uninitialized state, the initializer function should be called as early as
* possible by providing the encoded function call as the `_data` argument to {ERC1967Proxy-constructor}.
*
* CAUTION: When used with inheritance, manual care must be taken to not invoke a parent initializer twice, or to ensure
* that all initializers are idempotent. This is not verified automatically as constructors are by Solidity.
*
* [CAUTION]
* ====
* Avoid leaving a contract uninitialized.
*
* An uninitialized contract can be taken over by an attacker. This applies to both a proxy and its implementation
* contract, which may impact the proxy. To prevent the implementation contract from being used, you should invoke
* the {_disableInitializers} function in the constructor to automatically lock it when it is deployed:
*
* [.hljs-theme-light.nopadding]
* ```
* /// @custom:oz-upgrades-unsafe-allow constructor
* constructor() {
* _disableInitializers();
* }
* ```
* ====
*/
abstract contract Initializable {
/**
* @dev Storage of the initializable contract.
*
* It's implemented on a custom ERC-7201 namespace to reduce the risk of storage collisions
* when using with upgradeable contracts.
*
* @custom:storage-location erc7201:openzeppelin.storage.Initializable
*/
struct InitializableStorage {
/**
* @dev Indicates that the contract has been initialized.
*/
uint64 _initialized;
/**
* @dev Indicates that the contract is in the process of being initialized.
*/
bool _initializing;
}
// keccak256(abi.encode(uint256(keccak256("openzeppelin.storage.Initializable")) - 1)) & ~bytes32(uint256(0xff))
bytes32 private constant INITIALIZABLE_STORAGE = 0xf0c57e16840df040f15088dc2f81fe391c3923bec73e23a9662efc9c229c6a00;
/**
* @dev The contract is already initialized.
*/
error InvalidInitialization();
/**
* @dev The contract is not initializing.
*/
error NotInitializing();
/**
* @dev Triggered when the contract has been initialized or reinitialized.
*/
event Initialized(uint64 version);
/**
* @dev A modifier that defines a protected initializer function that can be invoked at most once. In its scope,
* `onlyInitializing` functions can be used to initialize parent contracts.
*
* Similar to `reinitializer(1)`, except that in the context of a constructor an `initializer` may be invoked any
* number of times. This behavior in the constructor can be useful during testing and is not expected to be used in
* production.
*
* Emits an {Initialized} event.
*/
modifier initializer() {
// solhint-disable-next-line var-name-mixedcase
InitializableStorage storage $ = _getInitializableStorage();
// Cache values to avoid duplicated sloads
bool isTopLevelCall = !$._initializing;
uint64 initialized = $._initialized;
// Allowed calls:
// - initialSetup: the contract is not in the initializing state and no previous version was
// initialized
// - construction: the contract is initialized at version 1 (no reinitialization) and the
// current contract is just being deployed
bool initialSetup = initialized == 0 && isTopLevelCall;
bool construction = initialized == 1 && address(this).code.length == 0;
if (!initialSetup && !construction) {
revert InvalidInitialization();
}
$._initialized = 1;
if (isTopLevelCall) {
$._initializing = true;
}
_;
if (isTopLevelCall) {
$._initializing = false;
emit Initialized(1);
}
}
/**
* @dev A modifier that defines a protected reinitializer function that can be invoked at most once, and only if the
* contract hasn't been initialized to a greater version before. In its scope, `onlyInitializing` functions can be
* used to initialize parent contracts.
*
* A reinitializer may be used after the original initialization step. This is essential to configure modules that
* are added through upgrades and that require initialization.
*
* When `version` is 1, this modifier is similar to `initializer`, except that functions marked with `reinitializer`
* cannot be nested. If one is invoked in the context of another, execution will revert.
*
* Note that versions can jump in increments greater than 1; this implies that if multiple reinitializers coexist in
* a contract, executing them in the right order is up to the developer or operator.
*
* WARNING: Setting the version to 2**64 - 1 will prevent any future reinitialization.
*
* Emits an {Initialized} event.
*/
modifier reinitializer(uint64 version) {
// solhint-disable-next-line var-name-mixedcase
InitializableStorage storage $ = _getInitializableStorage();
if ($._initializing || $._initialized >= version) {
revert InvalidInitialization();
}
$._initialized = version;
$._initializing = true;
_;
$._initializing = false;
emit Initialized(version);
}
/**
* @dev Modifier to protect an initialization function so that it can only be invoked by functions with the
* {initializer} and {reinitializer} modifiers, directly or indirectly.
*/
modifier onlyInitializing() {
_checkInitializing();
_;
}
/**
* @dev Reverts if the contract is not in an initializing state. See {onlyInitializing}.
*/
function _checkInitializing() internal view virtual {
if (!_isInitializing()) {
revert NotInitializing();
}
}
/**
* @dev Locks the contract, preventing any future reinitialization. This cannot be part of an initializer call.
* Calling this in the constructor of a contract will prevent that contract from being initialized or reinitialized
* to any version. It is recommended to use this to lock implementation contracts that are designed to be called
* through proxies.
*
* Emits an {Initialized} event the first time it is successfully executed.
*/
function _disableInitializers() internal virtual {
// solhint-disable-next-line var-name-mixedcase
InitializableStorage storage $ = _getInitializableStorage();
if ($._initializing) {
revert InvalidInitialization();
}
if ($._initialized != type(uint64).max) {
$._initialized = type(uint64).max;
emit Initialized(type(uint64).max);
}
}
/**
* @dev Returns the highest version that has been initialized. See {reinitializer}.
*/
function _getInitializedVersion() internal view returns (uint64) {
return _getInitializableStorage()._initialized;
}
/**
* @dev Returns `true` if the contract is currently initializing. See {onlyInitializing}.
*/
function _isInitializing() internal view returns (bool) {
return _getInitializableStorage()._initializing;
}
/**
* @dev Pointer to storage slot. Allows integrators to override it with a custom storage location.
*
* NOTE: Consider following the ERC-7201 formula to derive storage locations.
*/
function _initializableStorageSlot() internal pure virtual returns (bytes32) {
return INITIALIZABLE_STORAGE;
}
/**
* @dev Returns a pointer to the storage namespace.
*/
// solhint-disable-next-line var-name-mixedcase
function _getInitializableStorage() private pure returns (InitializableStorage storage $) {
bytes32 slot = _initializableStorageSlot();
assembly {
$.slot := slot
}
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (utils/cryptography/ECDSA.sol)
pragma solidity ^0.8.20;
/**
* @dev Elliptic Curve Digital Signature Algorithm (ECDSA) operations.
*
* These functions can be used to verify that a message was signed by the holder
* of the private keys of a given address.
*/
library ECDSA {
enum RecoverError {
NoError,
InvalidSignature,
InvalidSignatureLength,
InvalidSignatureS
}
/**
* @dev The signature derives the `address(0)`.
*/
error ECDSAInvalidSignature();
/**
* @dev The signature has an invalid length.
*/
error ECDSAInvalidSignatureLength(uint256 length);
/**
* @dev The signature has an S value that is in the upper half order.
*/
error ECDSAInvalidSignatureS(bytes32 s);
/**
* @dev Returns the address that signed a hashed message (`hash`) with `signature` or an error. This will not
* return address(0) without also returning an error description. Errors are documented using an enum (error type)
* and a bytes32 providing additional information about the error.
*
* If no error is returned, then the address can be used for verification purposes.
*
* The `ecrecover` EVM precompile allows for malleable (non-unique) signatures:
* this function rejects them by requiring the `s` value to be in the lower
* half order, and the `v` value to be either 27 or 28.
*
* IMPORTANT: `hash` _must_ be the result of a hash operation for the
* verification to be secure: it is possible to craft signatures that
* recover to arbitrary addresses for non-hashed data. A safe way to ensure
* this is by receiving a hash of the original message (which may otherwise
* be too long), and then calling {MessageHashUtils-toEthSignedMessageHash} on it.
*
* Documentation for signature generation:
* - with https://web3js.readthedocs.io/en/v1.3.4/web3-eth-accounts.html#sign[Web3.js]
* - with https://docs.ethers.io/v5/api/signer/#Signer-signMessage[ethers]
*/
function tryRecover(
bytes32 hash,
bytes memory signature
) internal pure returns (address recovered, RecoverError err, bytes32 errArg) {
if (signature.length == 65) {
bytes32 r;
bytes32 s;
uint8 v;
// ecrecover takes the signature parameters, and the only way to get them
// currently is to use assembly.
assembly ("memory-safe") {
r := mload(add(signature, 0x20))
s := mload(add(signature, 0x40))
v := byte(0, mload(add(signature, 0x60)))
}
return tryRecover(hash, v, r, s);
} else {
return (address(0), RecoverError.InvalidSignatureLength, bytes32(signature.length));
}
}
/**
* @dev Returns the address that signed a hashed message (`hash`) with
* `signature`. This address can then be used for verification purposes.
*
* The `ecrecover` EVM precompile allows for malleable (non-unique) signatures:
* this function rejects them by requiring the `s` value to be in the lower
* half order, and the `v` value to be either 27 or 28.
*
* IMPORTANT: `hash` _must_ be the result of a hash operation for the
* verification to be secure: it is possible to craft signatures that
* recover to arbitrary addresses for non-hashed data. A safe way to ensure
* this is by receiving a hash of the original message (which may otherwise
* be too long), and then calling {MessageHashUtils-toEthSignedMessageHash} on it.
*/
function recover(bytes32 hash, bytes memory signature) internal pure returns (address) {
(address recovered, RecoverError error, bytes32 errorArg) = tryRecover(hash, signature);
_throwError(error, errorArg);
return recovered;
}
/**
* @dev Overload of {ECDSA-tryRecover} that receives the `r` and `vs` short-signature fields separately.
*
* See https://eips.ethereum.org/EIPS/eip-2098[ERC-2098 short signatures]
*/
function tryRecover(
bytes32 hash,
bytes32 r,
bytes32 vs
) internal pure returns (address recovered, RecoverError err, bytes32 errArg) {
unchecked {
bytes32 s = vs & bytes32(0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff);
// We do not check for an overflow here since the shift operation results in 0 or 1.
uint8 v = uint8((uint256(vs) >> 255) + 27);
return tryRecover(hash, v, r, s);
}
}
/**
* @dev Overload of {ECDSA-recover} that receives the `r and `vs` short-signature fields separately.
*/
function recover(bytes32 hash, bytes32 r, bytes32 vs) internal pure returns (address) {
(address recovered, RecoverError error, bytes32 errorArg) = tryRecover(hash, r, vs);
_throwError(error, errorArg);
return recovered;
}
/**
* @dev Overload of {ECDSA-tryRecover} that receives the `v`,
* `r` and `s` signature fields separately.
*/
function tryRecover(
bytes32 hash,
uint8 v,
bytes32 r,
bytes32 s
) internal pure returns (address recovered, RecoverError err, bytes32 errArg) {
// EIP-2 still allows signature malleability for ecrecover(). Remove this possibility and make the signature
// unique. Appendix F in the Ethereum Yellow paper (https://ethereum.github.io/yellowpaper/paper.pdf), defines
// the valid range for s in (301): 0 < s < secp256k1n ÷ 2 + 1, and for v in (302): v ∈ {27, 28}. Most
// signatures from current libraries generate a unique signature with an s-value in the lower half order.
//
// If your library generates malleable signatures, such as s-values in the upper range, calculate a new s-value
// with 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141 - s1 and flip v from 27 to 28 or
// vice versa. If your library also generates signatures with 0/1 for v instead 27/28, add 27 to v to accept
// these malleable signatures as well.
if (uint256(s) > 0x7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF5D576E7357A4501DDFE92F46681B20A0) {
return (address(0), RecoverError.InvalidSignatureS, s);
}
// If the signature is valid (and not malleable), return the signer address
address signer = ecrecover(hash, v, r, s);
if (signer == address(0)) {
return (address(0), RecoverError.InvalidSignature, bytes32(0));
}
return (signer, RecoverError.NoError, bytes32(0));
}
/**
* @dev Overload of {ECDSA-recover} that receives the `v`,
* `r` and `s` signature fields separately.
*/
function recover(bytes32 hash, uint8 v, bytes32 r, bytes32 s) internal pure returns (address) {
(address recovered, RecoverError error, bytes32 errorArg) = tryRecover(hash, v, r, s);
_throwError(error, errorArg);
return recovered;
}
/**
* @dev Optionally reverts with the corresponding custom error according to the `error` argument provided.
*/
function _throwError(RecoverError error, bytes32 errorArg) private pure {
if (error == RecoverError.NoError) {
return; // no error: do nothing
} else if (error == RecoverError.InvalidSignature) {
revert ECDSAInvalidSignature();
} else if (error == RecoverError.InvalidSignatureLength) {
revert ECDSAInvalidSignatureLength(uint256(errorArg));
} else if (error == RecoverError.InvalidSignatureS) {
revert ECDSAInvalidSignatureS(errorArg);
}
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.3.0) (utils/cryptography/EIP712.sol)
pragma solidity ^0.8.20;
import {MessageHashUtils} from "@openzeppelin/contracts/utils/cryptography/MessageHashUtils.sol";
import {IERC5267} from "@openzeppelin/contracts/interfaces/IERC5267.sol";
import {Initializable} from "../../proxy/utils/Initializable.sol";
/**
* @dev https://eips.ethereum.org/EIPS/eip-712[EIP-712] is a standard for hashing and signing of typed structured data.
*
* The encoding scheme specified in the EIP requires a domain separator and a hash of the typed structured data, whose
* encoding is very generic and therefore its implementation in Solidity is not feasible, thus this contract
* does not implement the encoding itself. Protocols need to implement the type-specific encoding they need in order to
* produce the hash of their typed data using a combination of `abi.encode` and `keccak256`.
*
* This contract implements the EIP-712 domain separator ({_domainSeparatorV4}) that is used as part of the encoding
* scheme, and the final step of the encoding to obtain the message digest that is then signed via ECDSA
* ({_hashTypedDataV4}).
*
* The implementation of the domain separator was designed to be as efficient as possible while still properly updating
* the chain id to protect against replay attacks on an eventual fork of the chain.
*
* NOTE: This contract implements the version of the encoding known as "v4", as implemented by the JSON RPC method
* https://docs.metamask.io/guide/signing-data.html[`eth_signTypedDataV4` in MetaMask].
*
* NOTE: In the upgradeable version of this contract, the cached values will correspond to the address, and the domain
* separator of the implementation contract. This will cause the {_domainSeparatorV4} function to always rebuild the
* separator from the immutable values, which is cheaper than accessing a cached version in cold storage.
*/
abstract contract EIP712Upgradeable is Initializable, IERC5267 {
bytes32 private constant TYPE_HASH =
keccak256("EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)");
/// @custom:storage-location erc7201:openzeppelin.storage.EIP712
struct EIP712Storage {
/// @custom:oz-renamed-from _HASHED_NAME
bytes32 _hashedName;
/// @custom:oz-renamed-from _HASHED_VERSION
bytes32 _hashedVersion;
string _name;
string _version;
}
// keccak256(abi.encode(uint256(keccak256("openzeppelin.storage.EIP712")) - 1)) & ~bytes32(uint256(0xff))
bytes32 private constant EIP712StorageLocation = 0xa16a46d94261c7517cc8ff89f61c0ce93598e3c849801011dee649a6a557d100;
function _getEIP712Storage() private pure returns (EIP712Storage storage $) {
assembly {
$.slot := EIP712StorageLocation
}
}
/**
* @dev Initializes the domain separator and parameter caches.
*
* The meaning of `name` and `version` is specified in
* https://eips.ethereum.org/EIPS/eip-712#definition-of-domainseparator[EIP-712]:
*
* - `name`: the user readable name of the signing domain, i.e. the name of the DApp or the protocol.
* - `version`: the current major version of the signing domain.
*
* NOTE: These parameters cannot be changed except through a xref:learn::upgrading-smart-contracts.adoc[smart
* contract upgrade].
*/
function __EIP712_init(string memory name, string memory version) internal onlyInitializing {
__EIP712_init_unchained(name, version);
}
function __EIP712_init_unchained(string memory name, string memory version) internal onlyInitializing {
EIP712Storage storage $ = _getEIP712Storage();
$._name = name;
$._version = version;
// Reset prior values in storage if upgrading
$._hashedName = 0;
$._hashedVersion = 0;
}
/**
* @dev Returns the domain separator for the current chain.
*/
function _domainSeparatorV4() internal view returns (bytes32) {
return _buildDomainSeparator();
}
function _buildDomainSeparator() private view returns (bytes32) {
return keccak256(abi.encode(TYPE_HASH, _EIP712NameHash(), _EIP712VersionHash(), block.chainid, address(this)));
}
/**
* @dev Given an already https://eips.ethereum.org/EIPS/eip-712#definition-of-hashstruct[hashed struct], this
* function returns the hash of the fully encoded EIP712 message for this domain.
*
* This hash can be used together with {ECDSA-recover} to obtain the signer of a message. For example:
*
* ```solidity
* bytes32 digest = _hashTypedDataV4(keccak256(abi.encode(
* keccak256("Mail(address to,string contents)"),
* mailTo,
* keccak256(bytes(mailContents))
* )));
* address signer = ECDSA.recover(digest, signature);
* ```
*/
function _hashTypedDataV4(bytes32 structHash) internal view virtual returns (bytes32) {
return MessageHashUtils.toTypedDataHash(_domainSeparatorV4(), structHash);
}
/**
* @inheritdoc IERC5267
*/
function eip712Domain()
public
view
virtual
returns (
bytes1 fields,
string memory name,
string memory version,
uint256 chainId,
address verifyingContract,
bytes32 salt,
uint256[] memory extensions
)
{
EIP712Storage storage $ = _getEIP712Storage();
// If the hashed name and version in storage are non-zero, the contract hasn't been properly initialized
// and the EIP712 domain is not reliable, as it will be missing name and version.
require($._hashedName == 0 && $._hashedVersion == 0, "EIP712: Uninitialized");
return (
hex"0f", // 01111
_EIP712Name(),
_EIP712Version(),
block.chainid,
address(this),
bytes32(0),
new uint256[](0)
);
}
/**
* @dev The name parameter for the EIP712 domain.
*
* NOTE: This function reads from storage by default, but can be redefined to return a constant value if gas costs
* are a concern.
*/
function _EIP712Name() internal view virtual returns (string memory) {
EIP712Storage storage $ = _getEIP712Storage();
return $._name;
}
/**
* @dev The version parameter for the EIP712 domain.
*
* NOTE: This function reads from storage by default, but can be redefined to return a constant value if gas costs
* are a concern.
*/
function _EIP712Version() internal view virtual returns (string memory) {
EIP712Storage storage $ = _getEIP712Storage();
return $._version;
}
/**
* @dev The hash of the name parameter for the EIP712 domain.
*
* NOTE: In previous versions this function was virtual. In this version you should override `_EIP712Name` instead.
*/
function _EIP712NameHash() internal view returns (bytes32) {
EIP712Storage storage $ = _getEIP712Storage();
string memory name = _EIP712Name();
if (bytes(name).length > 0) {
return keccak256(bytes(name));
} else {
// If the name is empty, the contract may have been upgraded without initializing the new storage.
// We return the name hash in storage if non-zero, otherwise we assume the name is empty by design.
bytes32 hashedName = $._hashedName;
if (hashedName != 0) {
return hashedName;
} else {
return keccak256("");
}
}
}
/**
* @dev The hash of the version parameter for the EIP712 domain.
*
* NOTE: In previous versions this function was virtual. In this version you should override `_EIP712Version` instead.
*/
function _EIP712VersionHash() internal view returns (bytes32) {
EIP712Storage storage $ = _getEIP712Storage();
string memory version = _EIP712Version();
if (bytes(version).length > 0) {
return keccak256(bytes(version));
} else {
// If the version is empty, the contract may have been upgraded without initializing the new storage.
// We return the version hash in storage if non-zero, otherwise we assume the version is empty by design.
bytes32 hashedVersion = $._hashedVersion;
if (hashedVersion != 0) {
return hashedVersion;
} else {
return keccak256("");
}
}
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.3.0) (utils/math/Math.sol)
pragma solidity ^0.8.20;
import {Panic} from "../Panic.sol";
import {SafeCast} from "./SafeCast.sol";
/**
* @dev Standard math utilities missing in the Solidity language.
*/
library Math {
enum Rounding {
Floor, // Toward negative infinity
Ceil, // Toward positive infinity
Trunc, // Toward zero
Expand // Away from zero
}
/**
* @dev Return the 512-bit addition of two uint256.
*
* The result is stored in two 256 variables such that sum = high * 2²⁵⁶ + low.
*/
function add512(uint256 a, uint256 b) internal pure returns (uint256 high, uint256 low) {
assembly ("memory-safe") {
low := add(a, b)
high := lt(low, a)
}
}
/**
* @dev Return the 512-bit multiplication of two uint256.
*
* The result is stored in two 256 variables such that product = high * 2²⁵⁶ + low.
*/
function mul512(uint256 a, uint256 b) internal pure returns (uint256 high, uint256 low) {
// 512-bit multiply [high low] = x * y. Compute the product mod 2²⁵⁶ and mod 2²⁵⁶ - 1, then use
// the Chinese Remainder Theorem to reconstruct the 512 bit result. The result is stored in two 256
// variables such that product = high * 2²⁵⁶ + low.
assembly ("memory-safe") {
let mm := mulmod(a, b, not(0))
low := mul(a, b)
high := sub(sub(mm, low), lt(mm, low))
}
}
/**
* @dev Returns the addition of two unsigned integers, with a success flag (no overflow).
*/
function tryAdd(uint256 a, uint256 b) internal pure returns (bool success, uint256 result) {
unchecked {
uint256 c = a + b;
success = c >= a;
result = c * SafeCast.toUint(success);
}
}
/**
* @dev Returns the subtraction of two unsigned integers, with a success flag (no overflow).
*/
function trySub(uint256 a, uint256 b) internal pure returns (bool success, uint256 result) {
unchecked {
uint256 c = a - b;
success = c <= a;
result = c * SafeCast.toUint(success);
}
}
/**
* @dev Returns the multiplication of two unsigned integers, with a success flag (no overflow).
*/
function tryMul(uint256 a, uint256 b) internal pure returns (bool success, uint256 result) {
unchecked {
uint256 c = a * b;
assembly ("memory-safe") {
// Only true when the multiplication doesn't overflow
// (c / a == b) || (a == 0)
success := or(eq(div(c, a), b), iszero(a))
}
// equivalent to: success ? c : 0
result = c * SafeCast.toUint(success);
}
}
/**
* @dev Returns the division of two unsigned integers, with a success flag (no division by zero).
*/
function tryDiv(uint256 a, uint256 b) internal pure returns (bool success, uint256 result) {
unchecked {
success = b > 0;
assembly ("memory-safe") {
// The `DIV` opcode returns zero when the denominator is 0.
result := div(a, b)
}
}
}
/**
* @dev Returns the remainder of dividing two unsigned integers, with a success flag (no division by zero).
*/
function tryMod(uint256 a, uint256 b) internal pure returns (bool success, uint256 result) {
unchecked {
success = b > 0;
assembly ("memory-safe") {
// The `MOD` opcode returns zero when the denominator is 0.
result := mod(a, b)
}
}
}
/**
* @dev Unsigned saturating addition, bounds to `2²⁵⁶ - 1` instead of overflowing.
*/
function saturatingAdd(uint256 a, uint256 b) internal pure returns (uint256) {
(bool success, uint256 result) = tryAdd(a, b);
return ternary(success, result, type(uint256).max);
}
/**
* @dev Unsigned saturating subtraction, bounds to zero instead of overflowing.
*/
function saturatingSub(uint256 a, uint256 b) internal pure returns (uint256) {
(, uint256 result) = trySub(a, b);
return result;
}
/**
* @dev Unsigned saturating multiplication, bounds to `2²⁵⁶ - 1` instead of overflowing.
*/
function saturatingMul(uint256 a, uint256 b) internal pure returns (uint256) {
(bool success, uint256 result) = tryMul(a, b);
return ternary(success, result, type(uint256).max);
}
/**
* @dev Branchless ternary evaluation for `a ? b : c`. Gas costs are constant.
*
* IMPORTANT: This function may reduce bytecode size and consume less gas when used standalone.
* However, the compiler may optimize Solidity ternary operations (i.e. `a ? b : c`) to only compute
* one branch when needed, making this function more expensive.
*/
function ternary(bool condition, uint256 a, uint256 b) internal pure returns (uint256) {
unchecked {
// branchless ternary works because:
// b ^ (a ^ b) == a
// b ^ 0 == b
return b ^ ((a ^ b) * SafeCast.toUint(condition));
}
}
/**
* @dev Returns the largest of two numbers.
*/
function max(uint256 a, uint256 b) internal pure returns (uint256) {
return ternary(a > b, a, b);
}
/**
* @dev Returns the smallest of two numbers.
*/
function min(uint256 a, uint256 b) internal pure returns (uint256) {
return ternary(a < b, a, b);
}
/**
* @dev Returns the average of two numbers. The result is rounded towards
* zero.
*/
function average(uint256 a, uint256 b) internal pure returns (uint256) {
// (a + b) / 2 can overflow.
return (a & b) + (a ^ b) / 2;
}
/**
* @dev Returns the ceiling of the division of two numbers.
*
* This differs from standard division with `/` in that it rounds towards infinity instead
* of rounding towards zero.
*/
function ceilDiv(uint256 a, uint256 b) internal pure returns (uint256) {
if (b == 0) {
// Guarantee the same behavior as in a regular Solidity division.
Panic.panic(Panic.DIVISION_BY_ZERO);
}
// The following calculation ensures accurate ceiling division without overflow.
// Since a is non-zero, (a - 1) / b will not overflow.
// The largest possible result occurs when (a - 1) / b is type(uint256).max,
// but the largest value we can obtain is type(uint256).max - 1, which happens
// when a = type(uint256).max and b = 1.
unchecked {
return SafeCast.toUint(a > 0) * ((a - 1) / b + 1);
}
}
/**
* @dev Calculates floor(x * y / denominator) with full precision. Throws if result overflows a uint256 or
* denominator == 0.
*
* Original credit to Remco Bloemen under MIT license (https://xn--2-umb.com/21/muldiv) with further edits by
* Uniswap Labs also under MIT license.
*/
function mulDiv(uint256 x, uint256 y, uint256 denominator) internal pure returns (uint256 result) {
unchecked {
(uint256 high, uint256 low) = mul512(x, y);
// Handle non-overflow cases, 256 by 256 division.
if (high == 0) {
// Solidity will revert if denominator == 0, unlike the div opcode on its own.
// The surrounding unchecked block does not change this fact.
// See https://docs.soliditylang.org/en/latest/control-structures.html#checked-or-unchecked-arithmetic.
return low / denominator;
}
// Make sure the result is less than 2²⁵⁶. Also prevents denominator == 0.
if (denominator <= high) {
Panic.panic(ternary(denominator == 0, Panic.DIVISION_BY_ZERO, Panic.UNDER_OVERFLOW));
}
///////////////////////////////////////////////
// 512 by 256 division.
///////////////////////////////////////////////
// Make division exact by subtracting the remainder from [high low].
uint256 remainder;
assembly ("memory-safe") {
// Compute remainder using mulmod.
remainder := mulmod(x, y, denominator)
// Subtract 256 bit number from 512 bit number.
high := sub(high, gt(remainder, low))
low := sub(low, remainder)
}
// Factor powers of two out of denominator and compute largest power of two divisor of denominator.
// Always >= 1. See https://cs.stackexchange.com/q/138556/92363.
uint256 twos = denominator & (0 - denominator);
assembly ("memory-safe") {
// Divide denominator by twos.
denominator := div(denominator, twos)
// Divide [high low] by twos.
low := div(low, twos)
// Flip twos such that it is 2²⁵⁶ / twos. If twos is zero, then it becomes one.
twos := add(div(sub(0, twos), twos), 1)
}
// Shift in bits from high into low.
low |= high * twos;
// Invert denominator mod 2²⁵⁶. Now that denominator is an odd number, it has an inverse modulo 2²⁵⁶ such
// that denominator * inv ≡ 1 mod 2²⁵⁶. Compute the inverse by starting with a seed that is correct for
// four bits. That is, denominator * inv ≡ 1 mod 2⁴.
uint256 inverse = (3 * denominator) ^ 2;
// Use the Newton-Raphson iteration to improve the precision. Thanks to Hensel's lifting lemma, this also
// works in modular arithmetic, doubling the correct bits in each step.
inverse *= 2 - denominator * inverse; // inverse mod 2⁸
inverse *= 2 - denominator * inverse; // inverse mod 2¹⁶
inverse *= 2 - denominator * inverse; // inverse mod 2³²
inverse *= 2 - denominator * inverse; // inverse mod 2⁶⁴
inverse *= 2 - denominator * inverse; // inverse mod 2¹²⁸
inverse *= 2 - denominator * inverse; // inverse mod 2²⁵⁶
// Because the division is now exact we can divide by multiplying with the modular inverse of denominator.
// This will give us the correct result modulo 2²⁵⁶. Since the preconditions guarantee that the outcome is
// less than 2²⁵⁶, this is the final result. We don't need to compute the high bits of the result and high
// is no longer required.
result = low * inverse;
return result;
}
}
/**
* @dev Calculates x * y / denominator with full precision, following the selected rounding direction.
*/
function mulDiv(uint256 x, uint256 y, uint256 denominator, Rounding rounding) internal pure returns (uint256) {
return mulDiv(x, y, denominator) + SafeCast.toUint(unsignedRoundsUp(rounding) && mulmod(x, y, denominator) > 0);
}
/**
* @dev Calculates floor(x * y >> n) with full precision. Throws if result overflows a uint256.
*/
function mulShr(uint256 x, uint256 y, uint8 n) internal pure returns (uint256 result) {
unchecked {
(uint256 high, uint256 low) = mul512(x, y);
if (high >= 1 << n) {
Panic.panic(Panic.UNDER_OVERFLOW);
}
return (high << (256 - n)) | (low >> n);
}
}
/**
* @dev Calculates x * y >> n with full precision, following the selected rounding direction.
*/
function mulShr(uint256 x, uint256 y, uint8 n, Rounding rounding) internal pure returns (uint256) {
return mulShr(x, y, n) + SafeCast.toUint(unsignedRoundsUp(rounding) && mulmod(x, y, 1 << n) > 0);
}
/**
* @dev Calculate the modular multiplicative inverse of a number in Z/nZ.
*
* If n is a prime, then Z/nZ is a field. In that case all elements are inversible, except 0.
* If n is not a prime, then Z/nZ is not a field, and some elements might not be inversible.
*
* If the input value is not inversible, 0 is returned.
*
* NOTE: If you know for sure that n is (big) a prime, it may be cheaper to use Fermat's little theorem and get the
* inverse using `Math.modExp(a, n - 2, n)`. See {invModPrime}.
*/
function invMod(uint256 a, uint256 n) internal pure returns (uint256) {
unchecked {
if (n == 0) return 0;
// The inverse modulo is calculated using the Extended Euclidean Algorithm (iterative version)
// Used to compute integers x and y such that: ax + ny = gcd(a, n).
// When the gcd is 1, then the inverse of a modulo n exists and it's x.
// ax + ny = 1
// ax = 1 + (-y)n
// ax ≡ 1 (mod n) # x is the inverse of a modulo n
// If the remainder is 0 the gcd is n right away.
uint256 remainder = a % n;
uint256 gcd = n;
// Therefore the initial coefficients are:
// ax + ny = gcd(a, n) = n
// 0a + 1n = n
int256 x = 0;
int256 y = 1;
while (remainder != 0) {
uint256 quotient = gcd / remainder;
(gcd, remainder) = (
// The old remainder is the next gcd to try.
remainder,
// Compute the next remainder.
// Can't overflow given that (a % gcd) * (gcd // (a % gcd)) <= gcd
// where gcd is at most n (capped to type(uint256).max)
gcd - remainder * quotient
);
(x, y) = (
// Increment the coefficient of a.
y,
// Decrement the coefficient of n.
// Can overflow, but the result is casted to uint256 so that the
// next value of y is "wrapped around" to a value between 0 and n - 1.
x - y * int256(quotient)
);
}
if (gcd != 1) return 0; // No inverse exists.
return ternary(x < 0, n - uint256(-x), uint256(x)); // Wrap the result if it's negative.
}
}
/**
* @dev Variant of {invMod}. More efficient, but only works if `p` is known to be a prime greater than `2`.
*
* From https://en.wikipedia.org/wiki/Fermat%27s_little_theorem[Fermat's little theorem], we know that if p is
* prime, then `a**(p-1) ≡ 1 mod p`. As a consequence, we have `a * a**(p-2) ≡ 1 mod p`, which means that
* `a**(p-2)` is the modular multiplicative inverse of a in Fp.
*
* NOTE: this function does NOT check that `p` is a prime greater than `2`.
*/
function invModPrime(uint256 a, uint256 p) internal view returns (uint256) {
unchecked {
return Math.modExp(a, p - 2, p);
}
}
/**
* @dev Returns the modular exponentiation of the specified base, exponent and modulus (b ** e % m)
*
* Requirements:
* - modulus can't be zero
* - underlying staticcall to precompile must succeed
*
* IMPORTANT: The result is only valid if the underlying call succeeds. When using this function, make
* sure the chain you're using it on supports the precompiled contract for modular exponentiation
* at address 0x05 as specified in https://eips.ethereum.org/EIPS/eip-198[EIP-198]. Otherwise,
* the underlying function will succeed given the lack of a revert, but the result may be incorrectly
* interpreted as 0.
*/
function modExp(uint256 b, uint256 e, uint256 m) internal view returns (uint256) {
(bool success, uint256 result) = tryModExp(b, e, m);
if (!success) {
Panic.panic(Panic.DIVISION_BY_ZERO);
}
return result;
}
/**
* @dev Returns the modular exponentiation of the specified base, exponent and modulus (b ** e % m).
* It includes a success flag indicating if the operation succeeded. Operation will be marked as failed if trying
* to operate modulo 0 or if the underlying precompile reverted.
*
* IMPORTANT: The result is only valid if the success flag is true. When using this function, make sure the chain
* you're using it on supports the precompiled contract for modular exponentiation at address 0x05 as specified in
* https://eips.ethereum.org/EIPS/eip-198[EIP-198]. Otherwise, the underlying function will succeed given the lack
* of a revert, but the result may be incorrectly interpreted as 0.
*/
function tryModExp(uint256 b, uint256 e, uint256 m) internal view returns (bool success, uint256 result) {
if (m == 0) return (false, 0);
assembly ("memory-safe") {
let ptr := mload(0x40)
// | Offset | Content | Content (Hex) |
// |-----------|------------|--------------------------------------------------------------------|
// | 0x00:0x1f | size of b | 0x0000000000000000000000000000000000000000000000000000000000000020 |
// | 0x20:0x3f | size of e | 0x0000000000000000000000000000000000000000000000000000000000000020 |
// | 0x40:0x5f | size of m | 0x0000000000000000000000000000000000000000000000000000000000000020 |
// | 0x60:0x7f | value of b | 0x<.............................................................b> |
// | 0x80:0x9f | value of e | 0x<.............................................................e> |
// | 0xa0:0xbf | value of m | 0x<.............................................................m> |
mstore(ptr, 0x20)
mstore(add(ptr, 0x20), 0x20)
mstore(add(ptr, 0x40), 0x20)
mstore(add(ptr, 0x60), b)
mstore(add(ptr, 0x80), e)
mstore(add(ptr, 0xa0), m)
// Given the result < m, it's guaranteed to fit in 32 bytes,
// so we can use the memory scratch space located at offset 0.
success := staticcall(gas(), 0x05, ptr, 0xc0, 0x00, 0x20)
result := mload(0x00)
}
}
/**
* @dev Variant of {modExp} that supports inputs of arbitrary length.
*/
function modExp(bytes memory b, bytes memory e, bytes memory m) internal view returns (bytes memory) {
(bool success, bytes memory result) = tryModExp(b, e, m);
if (!success) {
Panic.panic(Panic.DIVISION_BY_ZERO);
}
return result;
}
/**
* @dev Variant of {tryModExp} that supports inputs of arbitrary length.
*/
function tryModExp(
bytes memory b,
bytes memory e,
bytes memory m
) internal view returns (bool success, bytes memory result) {
if (_zeroBytes(m)) return (false, new bytes(0));
uint256 mLen = m.length;
// Encode call args in result and move the free memory pointer
result = abi.encodePacked(b.length, e.length, mLen, b, e, m);
assembly ("memory-safe") {
let dataPtr := add(result, 0x20)
// Write result on top of args to avoid allocating extra memory.
success := staticcall(gas(), 0x05, dataPtr, mload(result), dataPtr, mLen)
// Overwrite the length.
// result.length > returndatasize() is guaranteed because returndatasize() == m.length
mstore(result, mLen)
// Set the memory pointer after the returned data.
mstore(0x40, add(dataPtr, mLen))
}
}
/**
* @dev Returns whether the provided byte array is zero.
*/
function _zeroBytes(bytes memory byteArray) private pure returns (bool) {
for (uint256 i = 0; i < byteArray.length; ++i) {
if (byteArray[i] != 0) {
return false;
}
}
return true;
}
/**
* @dev Returns the square root of a number. If the number is not a perfect square, the value is rounded
* towards zero.
*
* This method is based on Newton's method for computing square roots; the algorithm is restricted to only
* using integer operations.
*/
function sqrt(uint256 a) internal pure returns (uint256) {
unchecked {
// Take care of easy edge cases when a == 0 or a == 1
if (a <= 1) {
return a;
}
// In this function, we use Newton's method to get a root of `f(x) := x² - a`. It involves building a
// sequence x_n that converges toward sqrt(a). For each iteration x_n, we also define the error between
// the current value as `ε_n = | x_n - sqrt(a) |`.
//
// For our first estimation, we consider `e` the smallest power of 2 which is bigger than the square root
// of the target. (i.e. `2**(e-1) ≤ sqrt(a) < 2**e`). We know that `e ≤ 128` because `(2¹²⁸)² = 2²⁵⁶` is
// bigger than any uint256.
//
// By noticing that
// `2**(e-1) ≤ sqrt(a) < 2**e → (2**(e-1))² ≤ a < (2**e)² → 2**(2*e-2) ≤ a < 2**(2*e)`
// we can deduce that `e - 1` is `log2(a) / 2`. We can thus compute `x_n = 2**(e-1)` using a method similar
// to the msb function.
uint256 aa = a;
uint256 xn = 1;
if (aa >= (1 << 128)) {
aa >>= 128;
xn <<= 64;
}
if (aa >= (1 << 64)) {
aa >>= 64;
xn <<= 32;
}
if (aa >= (1 << 32)) {
aa >>= 32;
xn <<= 16;
}
if (aa >= (1 << 16)) {
aa >>= 16;
xn <<= 8;
}
if (aa >= (1 << 8)) {
aa >>= 8;
xn <<= 4;
}
if (aa >= (1 << 4)) {
aa >>= 4;
xn <<= 2;
}
if (aa >= (1 << 2)) {
xn <<= 1;
}
// We now have x_n such that `x_n = 2**(e-1) ≤ sqrt(a) < 2**e = 2 * x_n`. This implies ε_n ≤ 2**(e-1).
//
// We can refine our estimation by noticing that the middle of that interval minimizes the error.
// If we move x_n to equal 2**(e-1) + 2**(e-2), then we reduce the error to ε_n ≤ 2**(e-2).
// This is going to be our x_0 (and ε_0)
xn = (3 * xn) >> 1; // ε_0 := | x_0 - sqrt(a) | ≤ 2**(e-2)
// From here, Newton's method give us:
// x_{n+1} = (x_n + a / x_n) / 2
//
// One should note that:
// x_{n+1}² - a = ((x_n + a / x_n) / 2)² - a
// = ((x_n² + a) / (2 * x_n))² - a
// = (x_n⁴ + 2 * a * x_n² + a²) / (4 * x_n²) - a
// = (x_n⁴ + 2 * a * x_n² + a² - 4 * a * x_n²) / (4 * x_n²)
// = (x_n⁴ - 2 * a * x_n² + a²) / (4 * x_n²)
// = (x_n² - a)² / (2 * x_n)²
// = ((x_n² - a) / (2 * x_n))²
// ≥ 0
// Which proves that for all n ≥ 1, sqrt(a) ≤ x_n
//
// This gives us the proof of quadratic convergence of the sequence:
// ε_{n+1} = | x_{n+1} - sqrt(a) |
// = | (x_n + a / x_n) / 2 - sqrt(a) |
// = | (x_n² + a - 2*x_n*sqrt(a)) / (2 * x_n) |
// = | (x_n - sqrt(a))² / (2 * x_n) |
// = | ε_n² / (2 * x_n) |
// = ε_n² / | (2 * x_n) |
//
// For the first iteration, we have a special case where x_0 is known:
// ε_1 = ε_0² / | (2 * x_0) |
// ≤ (2**(e-2))² / (2 * (2**(e-1) + 2**(e-2)))
// ≤ 2**(2*e-4) / (3 * 2**(e-1))
// ≤ 2**(e-3) / 3
// ≤ 2**(e-3-log2(3))
// ≤ 2**(e-4.5)
//
// For the following iterations, we use the fact that, 2**(e-1) ≤ sqrt(a) ≤ x_n:
// ε_{n+1} = ε_n² / | (2 * x_n) |
// ≤ (2**(e-k))² / (2 * 2**(e-1))
// ≤ 2**(2*e-2*k) / 2**e
// ≤ 2**(e-2*k)
xn = (xn + a / xn) >> 1; // ε_1 := | x_1 - sqrt(a) | ≤ 2**(e-4.5) -- special case, see above
xn = (xn + a / xn) >> 1; // ε_2 := | x_2 - sqrt(a) | ≤ 2**(e-9) -- general case with k = 4.5
xn = (xn + a / xn) >> 1; // ε_3 := | x_3 - sqrt(a) | ≤ 2**(e-18) -- general case with k = 9
xn = (xn + a / xn) >> 1; // ε_4 := | x_4 - sqrt(a) | ≤ 2**(e-36) -- general case with k = 18
xn = (xn + a / xn) >> 1; // ε_5 := | x_5 - sqrt(a) | ≤ 2**(e-72) -- general case with k = 36
xn = (xn + a / xn) >> 1; // ε_6 := | x_6 - sqrt(a) | ≤ 2**(e-144) -- general case with k = 72
// Because e ≤ 128 (as discussed during the first estimation phase), we know have reached a precision
// ε_6 ≤ 2**(e-144) < 1. Given we're operating on integers, then we can ensure that xn is now either
// sqrt(a) or sqrt(a) + 1.
return xn - SafeCast.toUint(xn > a / xn);
}
}
/**
* @dev Calculates sqrt(a), following the selected rounding direction.
*/
function sqrt(uint256 a, Rounding rounding) internal pure returns (uint256) {
unchecked {
uint256 result = sqrt(a);
return result + SafeCast.toUint(unsignedRoundsUp(rounding) && result * result < a);
}
}
/**
* @dev Return the log in base 2 of a positive value rounded towards zero.
* Returns 0 if given 0.
*/
function log2(uint256 x) internal pure returns (uint256 r) {
// If value has upper 128 bits set, log2 result is at least 128
r = SafeCast.toUint(x > 0xffffffffffffffffffffffffffffffff) << 7;
// If upper 64 bits of 128-bit half set, add 64 to result
r |= SafeCast.toUint((x >> r) > 0xffffffffffffffff) << 6;
// If upper 32 bits of 64-bit half set, add 32 to result
r |= SafeCast.toUint((x >> r) > 0xffffffff) << 5;
// If upper 16 bits of 32-bit half set, add 16 to result
r |= SafeCast.toUint((x >> r) > 0xffff) << 4;
// If upper 8 bits of 16-bit half set, add 8 to result
r |= SafeCast.toUint((x >> r) > 0xff) << 3;
// If upper 4 bits of 8-bit half set, add 4 to result
r |= SafeCast.toUint((x >> r) > 0xf) << 2;
// Shifts value right by the current result and use it as an index into this lookup table:
//
// | x (4 bits) | index | table[index] = MSB position |
// |------------|---------|-----------------------------|
// | 0000 | 0 | table[0] = 0 |
// | 0001 | 1 | table[1] = 0 |
// | 0010 | 2 | table[2] = 1 |
// | 0011 | 3 | table[3] = 1 |
// | 0100 | 4 | table[4] = 2 |
// | 0101 | 5 | table[5] = 2 |
// | 0110 | 6 | table[6] = 2 |
// | 0111 | 7 | table[7] = 2 |
// | 1000 | 8 | table[8] = 3 |
// | 1001 | 9 | table[9] = 3 |
// | 1010 | 10 | table[10] = 3 |
// | 1011 | 11 | table[11] = 3 |
// | 1100 | 12 | table[12] = 3 |
// | 1101 | 13 | table[13] = 3 |
// | 1110 | 14 | table[14] = 3 |
// | 1111 | 15 | table[15] = 3 |
//
// The lookup table is represented as a 32-byte value with the MSB positions for 0-15 in the last 16 bytes.
assembly ("memory-safe") {
r := or(r, byte(shr(r, x), 0x0000010102020202030303030303030300000000000000000000000000000000))
}
}
/**
* @dev Return the log in base 2, following the selected rounding direction, of a positive value.
* Returns 0 if given 0.
*/
function log2(uint256 value, Rounding rounding) internal pure returns (uint256) {
unchecked {
uint256 result = log2(value);
return result + SafeCast.toUint(unsignedRoundsUp(rounding) && 1 << result < value);
}
}
/**
* @dev Return the log in base 10 of a positive value rounded towards zero.
* Returns 0 if given 0.
*/
function log10(uint256 value) internal pure returns (uint256) {
uint256 result = 0;
unchecked {
if (value >= 10 ** 64) {
value /= 10 ** 64;
result += 64;
}
if (value >= 10 ** 32) {
value /= 10 ** 32;
result += 32;
}
if (value >= 10 ** 16) {
value /= 10 ** 16;
result += 16;
}
if (value >= 10 ** 8) {
value /= 10 ** 8;
result += 8;
}
if (value >= 10 ** 4) {
value /= 10 ** 4;
result += 4;
}
if (value >= 10 ** 2) {
value /= 10 ** 2;
result += 2;
}
if (value >= 10 ** 1) {
result += 1;
}
}
return result;
}
/**
* @dev Return the log in base 10, following the selected rounding direction, of a positive value.
* Returns 0 if given 0.
*/
function log10(uint256 value, Rounding rounding) internal pure returns (uint256) {
unchecked {
uint256 result = log10(value);
return result + SafeCast.toUint(unsignedRoundsUp(rounding) && 10 ** result < value);
}
}
/**
* @dev Return the log in base 256 of a positive value rounded towards zero.
* Returns 0 if given 0.
*
* Adding one to the result gives the number of pairs of hex symbols needed to represent `value` as a hex string.
*/
function log256(uint256 x) internal pure returns (uint256 r) {
// If value has upper 128 bits set, log2 result is at least 128
r = SafeCast.toUint(x > 0xffffffffffffffffffffffffffffffff) << 7;
// If upper 64 bits of 128-bit half set, add 64 to result
r |= SafeCast.toUint((x >> r) > 0xffffffffffffffff) << 6;
// If upper 32 bits of 64-bit half set, add 32 to result
r |= SafeCast.toUint((x >> r) > 0xffffffff) << 5;
// If upper 16 bits of 32-bit half set, add 16 to result
r |= SafeCast.toUint((x >> r) > 0xffff) << 4;
// Add 1 if upper 8 bits of 16-bit half set, and divide accumulated result by 8
return (r >> 3) | SafeCast.toUint((x >> r) > 0xff);
}
/**
* @dev Return the log in base 256, following the selected rounding direction, of a positive value.
* Returns 0 if given 0.
*/
function log256(uint256 value, Rounding rounding) internal pure returns (uint256) {
unchecked {
uint256 result = log256(value);
return result + SafeCast.toUint(unsignedRoundsUp(rounding) && 1 << (result << 3) < value);
}
}
/**
* @dev Returns whether a provided rounding mode is considered rounding up for unsigned integers.
*/
function unsignedRoundsUp(Rounding rounding) internal pure returns (bool) {
return uint8(rounding) % 2 == 1;
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.3.0) (utils/Pausable.sol)
pragma solidity ^0.8.20;
import {ContextUpgradeable} from "../utils/ContextUpgradeable.sol";
import {Initializable} from "../proxy/utils/Initializable.sol";
/**
* @dev Contract module which allows children to implement an emergency stop
* mechanism that can be triggered by an authorized account.
*
* This module is used through inheritance. It will make available the
* modifiers `whenNotPaused` and `whenPaused`, which can be applied to
* the functions of your contract. Note that they will not be pausable by
* simply including this module, only once the modifiers are put in place.
*/
abstract contract PausableUpgradeable is Initializable, ContextUpgradeable {
/// @custom:storage-location erc7201:openzeppelin.storage.Pausable
struct PausableStorage {
bool _paused;
}
// keccak256(abi.encode(uint256(keccak256("openzeppelin.storage.Pausable")) - 1)) & ~bytes32(uint256(0xff))
bytes32 private constant PausableStorageLocation = 0xcd5ed15c6e187e77e9aee88184c21f4f2182ab5827cb3b7e07fbedcd63f03300;
function _getPausableStorage() private pure returns (PausableStorage storage $) {
assembly {
$.slot := PausableStorageLocation
}
}
/**
* @dev Emitted when the pause is triggered by `account`.
*/
event Paused(address account);
/**
* @dev Emitted when the pause is lifted by `account`.
*/
event Unpaused(address account);
/**
* @dev The operation failed because the contract is paused.
*/
error EnforcedPause();
/**
* @dev The operation failed because the contract is not paused.
*/
error ExpectedPause();
/**
* @dev Modifier to make a function callable only when the contract is not paused.
*
* Requirements:
*
* - The contract must not be paused.
*/
modifier whenNotPaused() {
_requireNotPaused();
_;
}
/**
* @dev Modifier to make a function callable only when the contract is paused.
*
* Requirements:
*
* - The contract must be paused.
*/
modifier whenPaused() {
_requirePaused();
_;
}
function __Pausable_init() internal onlyInitializing {
}
function __Pausable_init_unchained() internal onlyInitializing {
}
/**
* @dev Returns true if the contract is paused, and false otherwise.
*/
function paused() public view virtual returns (bool) {
PausableStorage storage $ = _getPausableStorage();
return $._paused;
}
/**
* @dev Throws if the contract is paused.
*/
function _requireNotPaused() internal view virtual {
if (paused()) {
revert EnforcedPause();
}
}
/**
* @dev Throws if the contract is not paused.
*/
function _requirePaused() internal view virtual {
if (!paused()) {
revert ExpectedPause();
}
}
/**
* @dev Triggers stopped state.
*
* Requirements:
*
* - The contract must not be paused.
*/
function _pause() internal virtual whenNotPaused {
PausableStorage storage $ = _getPausableStorage();
$._paused = true;
emit Paused(_msgSender());
}
/**
* @dev Returns to normal state.
*
* Requirements:
*
* - The contract must be paused.
*/
function _unpause() internal virtual whenPaused {
PausableStorage storage $ = _getPausableStorage();
$._paused = false;
emit Unpaused(_msgSender());
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity >=0.6.2;
import {IUniswapV2Router01} from "./IUniswapV2Router01.sol";
interface IUniswapV2Router02 is IUniswapV2Router01 {
function removeLiquidityETHSupportingFeeOnTransferTokens(
address token,
uint256 liquidity,
uint256 amountTokenMin,
uint256 amountETHMin,
address to,
uint256 deadline
) external returns (uint256 amountETH);
function removeLiquidityETHWithPermitSupportingFeeOnTransferTokens(
address token,
uint256 liquidity,
uint256 amountTokenMin,
uint256 amountETHMin,
address to,
uint256 deadline,
bool approveMax,
uint8 v,
bytes32 r,
bytes32 s
) external returns (uint256 amountETH);
function swapExactTokensForTokensSupportingFeeOnTransferTokens(
uint256 amountIn,
uint256 amountOutMin,
address[] calldata path,
address to,
uint256 deadline
) external;
function swapExactETHForTokensSupportingFeeOnTransferTokens(
uint256 amountOutMin,
address[] calldata path,
address to,
uint256 deadline
) external payable;
function swapExactTokensForETHSupportingFeeOnTransferTokens(
uint256 amountIn,
uint256 amountOutMin,
address[] calldata path,
address to,
uint256 deadline
) external;
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
/// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity ^0.8.29;
import {IMainVault} from "./IMainVault.sol";
import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";
import {DataTypes} from "../utils/DataTypes.sol";
/// @title IInvestmentVault
/// @dev Interface for Investment Vault
interface IInvestmentVault {
/// @dev Event emitted when an exact amount of tokens is swapped for another token
event ExactTokensSwapped(
address indexed router, address indexed fromToken, address indexed toToken, uint256 amountIn, uint256 amountOut
);
/// @dev Event emitted when tokens are swapped for an exact amount of output tokens
event TokensSwappedForExact(
address indexed router, address indexed fromToken, address indexed toToken, uint256 amountIn, uint256 amountOut
);
/// @dev Event emitted when token allowance is increased for a router
event TokenAllowanceIncreased(address indexed token, address indexed router, uint256 amount);
/// @dev Event emitted when token allowance is decreased for a router
event TokenAllowanceDecreased(address indexed token, address indexed router, uint256 amount);
/// @dev Event emitted when a position is closed
event PositionClosed(
uint256 initialDeposit, uint256 finalBalance, uint256 totalProfit, uint256 investorProfit, uint256 feeProfit
);
/// @dev Event emitted when profit is withdrawn
event ProfitWithdrawn(
bool investorProfitWithdrawn, uint256 investorProfitAmount, bool feeProfitWithdrawn, uint256 feeProfitAmount
);
/// @dev Event emitted when the initial MI to MV swap is completed
///
/// @param router The address of the router used for the swap
/// @param amountIn The amount of MI tokens swapped
/// @param amountOut The amount of MV tokens received
/// @param timestamp The timestamp when the swap was executed
event MiToMvSwapInitialized(address router, uint256 amountIn, uint256 amountOut, uint256 timestamp);
/// @dev Event emitted when all MV to token swaps are completed
///
/// @param tokensCount The number of different tokens that were acquired
/// @param timestamp The timestamp when the swaps were executed
event MvToTokensSwapsInitialized(uint256 tokensCount, uint256 timestamp);
/// @dev Event emitted when asset shares are updated
///
/// @param token The token whose share is updated
/// @param oldShareMV The previous MV share value
/// @param newShareMV The new MV share value
event AssetShareUpdated(address indexed token, uint256 oldShareMV, uint256 newShareMV);
/// @dev Event emitted when asset capital is updated
///
/// @param token The token whose capital is updated
/// @param oldCapital The previous capital value
/// @param newCapital The new capital value
event AssetCapitalUpdated(address indexed token, uint256 oldCapital, uint256 newCapital);
/// @dev Event emitted when MI share is updated
///
/// @param oldShareMI The previous MI share value
/// @param newShareMI The new MI share value
event ShareMiUpdated(uint256 oldShareMI, uint256 newShareMI);
/// @dev Initializes the Investment Vault with the provided data
/// @param initData Initialization data for the vault
function initialize(DataTypes.InvestmentVaultInitData calldata initData) external;
/// @dev Initializes first swap from MI token to MV token
/// Only admin can call this function
/// @param miToMvPath Path for swapping MI token to MV token
/// @param deadline Deadline for swap transaction
/// @return amountOut The amount of MV tokens received
function initMiToMvSwap(DataTypes.InitSwapsData calldata miToMvPath, uint256 deadline)
external
returns (uint256 amountOut);
/// @dev Initializes secondary swaps from MV token to other tokens
/// Only admin can call this function
/// Must be called after initMiToMvSwap
///
/// For each asset, this function:
/// - Calculates and sets the capital based on mvBought and shareMV
/// - Executes swaps from MV token to the asset tokens
/// - Updates tracking data
///
/// @param mvToTokenPaths Paths for swapping MV token to other tokens
/// @param deadline Deadline for swap transactions
function initMvToTokensSwaps(DataTypes.InitSwapsData[] calldata mvToTokenPaths, uint256 deadline) external;
/// @dev Withdraws specified amount of token from vault to a recipient
/// Only the main vault can call this function
///
/// @param token Token to withdraw
/// @param amount Amount to withdraw
/// @param to Recipient address
function withdraw(IERC20 token, uint256 amount, address to) external;
/// @dev Withdraws profit to appropriate wallets
/// Only manager can call this function
/// Investor profit can only be withdrawn if profit lock is expired
/// Fee profit can be withdrawn regardless of lock
///
/// @return investorProfitWithdrawn Whether investor profit was withdrawn
/// @return investorProfitAmount Amount of investor profit withdrawn
/// @return feeProfitWithdrawn Whether fee profit was withdrawn
/// @return feeProfitAmount Amount of fee profit withdrawn
function withdrawProfit()
external
returns (
bool investorProfitWithdrawn,
uint256 investorProfitAmount,
bool feeProfitWithdrawn,
uint256 feeProfitAmount
);
/// @dev Increases token allowance for a router
/// Only admin can call this function
/// Router and token must be in the list of available routers and tokens in MainVault
///
/// @param token Token to approve
/// @param router Router to increase allowance for
/// @param amount Amount to increase allowance by
function increaseRouterAllowance(IERC20 token, address router, uint256 amount) external;
/// @dev Decreases token allowance for a router
/// Only admin can call this function
/// Router and token must be in the list of available routers and tokens in MainVault
///
/// @param token Token to approve
/// @param router Router to decrease allowance for
/// @param amount Amount to decrease allowance by
function decreaseRouterAllowance(IERC20 token, address router, uint256 amount) external;
/// @dev Closes the investment position
/// Only admin can call this function
/// Calculates profit as the difference between current tokenMI balance and initial deposit
/// Applies fee percentage from MainVault
/// Transfers initial deposit back to MainVault
/// Updates profit tracking variables
/// Marks the position as closed
function closePosition() external;
/// @dev Updates the share of MV tokens allocated to specific assets
/// Only admin can call this function
///
/// @param tokens Array of tokens to update
/// @param shares Array of new share values to set for each token
function setAssetShares(IERC20[] calldata tokens, uint256[] calldata shares) external;
/// @dev Updates the capital amount for specific assets
/// Only admin can call this function
///
/// @param tokens Array of tokens to update
/// @param capitals Array of new capital values to set for each token
function setAssetCapital(IERC20[] calldata tokens, uint256[] calldata capitals) external;
/// @dev Updates the MI share value
/// Only admin can call this function
/// This value determines the proportion of MI tokens that will be swapped to MV tokens
/// during the first phase of initialization
///
/// @param newShareMI New MI share value
function setShareMi(uint256 newShareMI) external;
/// @dev Swaps an exact amount of input tokens for as many output tokens as possible using Uniswap
/// Only manager can call this function
/// Router and tokens must be in the list of available routers and tokens in MainVault
///
/// @param router The Uniswap router address to use
/// @param amountIn The amount of input tokens to send
/// @param amountOutMin The minimum amount of output tokens to receive
/// @param path An array of token addresses representing the swap path
/// @param deadline Unix timestamp after which the transaction will revert
/// @return amounts The input token amount and all subsequent output token amounts
function swapExactTokensForTokens(
address router,
uint256 amountIn,
uint256 amountOutMin,
address[] calldata path,
uint256 deadline
) external returns (uint256[] memory amounts);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity >=0.7.5;
pragma abicoder v2;
import "./IUniswapV3SwapCallback.sol";
/// @title Router token swapping functionality
/// @notice Functions for swapping tokens via Uniswap V3
interface ISwapRouter is IUniswapV3SwapCallback {
struct ExactInputSingleParams {
address tokenIn;
address tokenOut;
uint24 fee;
address recipient;
uint256 deadline;
uint256 amountIn;
uint256 amountOutMinimum;
uint160 sqrtPriceLimitX96;
}
/// @notice Swaps `amountIn` of one token for as much as possible of another token
/// @param params The parameters necessary for the swap, encoded as `ExactInputSingleParams` in calldata
/// @return amountOut The amount of the received token
function exactInputSingle(ExactInputSingleParams calldata params) external payable returns (uint256 amountOut);
struct ExactInputParams {
bytes path;
address recipient;
uint256 deadline;
uint256 amountIn;
uint256 amountOutMinimum;
}
/// @notice Swaps `amountIn` of one token for as much as possible of another along the specified path
/// @param params The parameters necessary for the multi-hop swap, encoded as `ExactInputParams` in calldata
/// @return amountOut The amount of the received token
function exactInput(ExactInputParams calldata params) external payable returns (uint256 amountOut);
struct ExactOutputSingleParams {
address tokenIn;
address tokenOut;
uint24 fee;
address recipient;
uint256 deadline;
uint256 amountOut;
uint256 amountInMaximum;
uint160 sqrtPriceLimitX96;
}
/// @notice Swaps as little as possible of one token for `amountOut` of another token
/// @param params The parameters necessary for the swap, encoded as `ExactOutputSingleParams` in calldata
/// @return amountIn The amount of the input token
function exactOutputSingle(ExactOutputSingleParams calldata params) external payable returns (uint256 amountIn);
struct ExactOutputParams {
bytes path;
address recipient;
uint256 deadline;
uint256 amountOut;
uint256 amountInMaximum;
}
/// @notice Swaps as little as possible of one token for `amountOut` of another along the specified path (reversed)
/// @param params The parameters necessary for the multi-hop swap, encoded as `ExactOutputParams` in calldata
/// @return amountIn The amount of the input token
function exactOutput(ExactOutputParams calldata params) external payable returns (uint256 amountIn);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity ^0.8.29;
import {IAccessControl} from "@openzeppelin/contracts/access/IAccessControl.sol";
/// @title IPauserList
/// @dev Interface for the contract that stores a list of addresses with the right to pause functions
interface IPauserList is IAccessControl {
/// @dev Returns the identifier of the pauser role
/// @return identifier of the pauser role
function PAUSER_ROLE() external view returns (bytes32);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity ^0.8.29;
/**
* @title Constants
* @dev Library that contains all project constants in one place
*/
library Constants {
// Common denominators
uint256 public constant SHARE_DENOMINATOR = 1e18;
// Time constants
uint256 public constant PAUSE_AFTER_INIT = 4 hours;
uint256 public constant AUTO_RENEW_CHECK_PERIOD = 7 days; // Period before lock expiry to check for auto-renewal
uint256 public constant AUTO_RENEW_PERIOD = 365 days; // Period to extend lock when auto-renewal is enabled
uint256 public constant PAUSE_AFTER_UPDATE_ACCESS = 4 hours; // Pause period after access update
uint256 public constant WITHDRAW_COMMIT_MIN_DELAY = 1 hours; // Minimum delay for withdraw commit
uint256 public constant WITHDRAW_COMMIT_MAX_DELAY = 1 days; // Maximum delay for withdraw commit
// Percentage constants
uint256 public constant MAX_PERCENT = 10000; // Represents 100.00% - fee percentage can't exceed this value
// Price validation constants
uint256 public constant PRICE_CHECK_DENOMINATOR = 100; // Denominator for price check calculation
uint256 public constant PRICE_DIFF_MULTIPLIER = 100; // Multiplier for price difference calculation
uint256 public constant MAX_PRICE_DEVIATION = 3 * 1e18; // Maximum allowed price deviation (3%)
uint256 public constant MAX_PRICE_DEVIATION_FROM_ORACLE = 5 * 1e18; // Maximum allowed price deviation from oracle (5%)
uint256 public constant MAX_FIXED_PROFIT_PERCENT = 2500; // Represents 25.00% - fixed profit percent can't exceed this value
uint256 public constant MIN_TIME_BETWEEN_BUYS = 30 days; // Minimum time between buys of an asset
uint256 public constant MAX_STEP = 3e17; // Maximum step of an asset
uint256 public constant MIN_STEP = 2e16; // Minimum step of an asset
uint256 public constant SHARE_INITIAL_MAX = 7e17; // Maximum share of an asset
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity ^0.8.29;
import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";
import {IMainVault} from "../interfaces/IMainVault.sol";
/// @title DataTypes
/// @dev Library containing common data structures for InvestmentVault
library DataTypes {
/// @dev Enum representing swap initialization states
enum SwapInitState {
NotInitialized, // Swaps not initialized yet
MiToMvInitialized, // First swap (MI to MV) initialized
FullyInitialized // All swaps initialized
}
enum SwapType {
Default,
ProfitMvToProfitMi
}
/// @dev Enum representing asset trading strategies
enum Strategy {
Zero, // Zero strategy - buy at lower price, sell at higher price
First // First strategy - stepped buys and sells based on price changes
}
enum Router {
UniswapV2, //0
UniswapV3, // 1
QuickswapV3 // 2
}
enum ProfitType {
Dynamic,
Fixed
}
/// @dev Structure for storing asset data
struct AssetData {
uint256 shareMV; // Share of MV tokens allocated to this asset
uint256 step; // Step percentage for First strategy
Strategy strategy; // Trading strategy for this asset
int256 deposit; // Deposited amount
uint256 capital; // Capital allocated to this asset
uint256 tokenBought; // Amount of tokens bought
uint8 decimals; // Asset's decimals
uint256 lastBuyPrice; // Last price of the asset
uint256 lastBuyTimestamp; // Last buy timestamp of the asset
}
/// @dev Structure for swap parameters to avoid stack too deep errors
struct SwapParams {
IERC20 fromToken; // Token being sold
IERC20 toToken; // Token being bought
uint256 firstBalanceBefore; // Balance of fromToken before swap
uint256 secondBalanceBefore; // Balance of toToken before swap
uint256 feePercent; // Fee percentage
SwapType swapType; // Swap type
}
/// @dev Structure for storing main tokens and deposit data
struct TokenData {
IERC20 tokenMI; // Main investment token
IERC20 tokenMV; // Main vault token
uint256 initDeposit; // Initial deposit
uint256 mvBought; // Amount of MV tokens bought
uint256 shareMI; // Share of MI tokens for swap
uint256 depositInMv; // Deposit in MV tokens
uint256 timestampOfStartInvestment; // Timestamp of start of investment
ProfitType profitType; // Profit type
uint256 step;
uint256 lastBuyPrice; // Last price of the asset
uint256 lastBuyTimestamp; // Last buy timestamp of the asset
}
/// @dev Structure for storing profit data
struct ProfitData {
uint256 profitMV; // Profit in MV tokens
uint256 earntProfitInvestor; // Earned investor profit in MI
uint256 earntProfitFee; // Earned fee in MI
uint256 earntProfitTotal; // Total earned profit in MI
uint256 withdrawnProfitInvestor; // Withdrawn investor profit
uint256 withdrawnProfitFee; // Withdrawn fee
}
/// @dev Structure for initializing the investment vault
struct InvestmentVaultInitData {
IMainVault mainVault;
IERC20 tokenMI;
IERC20 tokenMV;
uint256 initDeposit;
uint256 shareMI;
uint256 step;
AssetInitData[] assets;
}
/// @dev Structure for initializing an asset
struct AssetInitData {
IERC20 token; // Asset token
uint256 shareMV; // Share of MV tokens for this asset
uint256 step; // Step percentage for First strategy
Strategy strategy; // Trading strategy
}
/// @dev Structure for initializing swaps
struct InitSwapsData {
address quouter;
address router; // Router address
address[] path; // Swap path
bytes pathBytes; // Swap path bytes
uint256 amountOutMin; // Minimum output amount
uint256 capital; // Capital for this asset
Router routerType;
}
/// @dev Parameters for exactInputSingle function (without recipient field)
struct DelegateExactInputSingleParams {
address router;
address tokenIn;
address tokenOut;
uint24 fee;
uint256 deadline;
uint256 amountIn;
uint256 amountOutMinimum;
uint160 sqrtPriceLimitX96;
SwapType swapType;
}
/// @dev Parameters for exactInput function (without recipient field)
struct DelegateExactInputParams {
address router;
bytes path;
uint256 deadline;
uint256 amountIn;
uint256 amountOutMinimum;
SwapType swapType;
}
/// @dev Parameters for exactOutputSingle function (without recipient field)
struct DelegateExactOutputSingleParams {
address router;
address tokenIn;
address tokenOut;
uint24 fee;
uint256 deadline;
uint256 amountOut;
uint256 amountInMaximum;
uint160 sqrtPriceLimitX96;
SwapType swapType;
}
/// @dev Parameters for exactOutput function (without recipient field)
struct DelegateExactOutputParams {
address router;
bytes path;
uint256 deadline;
uint256 amountOut;
uint256 amountInMaximum;
SwapType swapType;
}
struct DelegateQuickswapExactInputSingleParams {
address router;
address tokenIn;
address tokenOut;
uint256 amountIn;
uint256 amountOutMinimum;
uint160 limitSqrtPrice;
uint256 deadline;
SwapType swapType;
}
struct DelegateQuickswapExactInputParams {
address router;
bytes path;
uint256 amountIn;
uint256 amountOutMinimum;
uint256 deadline;
SwapType swapType;
}
struct DelegateQuickswapExactOutputSingleParams {
address router;
address tokenIn;
address tokenOut;
uint24 fee;
uint256 amountOut;
uint256 amountInMaximum;
uint160 limitSqrtPrice;
uint256 deadline;
SwapType swapType;
}
struct DelegateQuickswapExactOutputParams {
address router;
bytes path;
uint256 amountOut;
uint256 amountInMaximum;
uint256 deadline;
SwapType swapType;
}
struct VaultState {
bool closed; // Whether position is closed
uint256 assetsDataLength; // Number of assets
uint256 pauseToTimestamp; // Pause timestamp
DataTypes.SwapInitState swapInitState; // Swap initialization state
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity ^0.8.29;
import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";
import {SafeERC20} from "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol";
import {IUniswapV2Router02} from "../interfaces/IUniswapV2Router02.sol";
import {ISwapRouter} from "../interfaces/ISwapRouter.sol";
import {ISwapRouterBase} from "../interfaces/ISwapRouterBase.sol";
import {IQuickswapV3Router} from "../interfaces/IQuickswapV3Router.sol";
import {Constants} from "./Constants.sol";
import {DataTypes} from "./DataTypes.sol";
/// @title MainVaultSwapLibrary
/// @dev Library for swap operations in MainVault
/// @custom:oz-upgrades-unsafe-allow delegatecall
library MainVaultSwapLibrary {
using SafeERC20 for IERC20;
// Custom Errors
error RouterNotAvailable();
error TokenNotAvailable();
error ZeroAmountNotAllowed();
/// @dev Emitted when exactInputSingleDelegate is executed
event ExactInputSingleDelegateExecuted(
address indexed router, address indexed tokenIn, address indexed tokenOut, uint256 amountIn, uint256 amountOut
);
/// @dev Emitted when exactInputDelegate is executed
event ExactInputDelegateExecuted(
address indexed router, address indexed tokenIn, address indexed tokenOut, uint256 amountIn, uint256 amountOut
);
/// @dev Emitted when exactOutputSingleDelegate is executed
event ExactOutputSingleDelegateExecuted(
address indexed router, address indexed tokenIn, address indexed tokenOut, uint256 amountIn, uint256 amountOut
);
/// @dev Emitted when exactOutputDelegate is executed
event ExactOutputDelegateExecuted(
address indexed router, address indexed tokenIn, address indexed tokenOut, uint256 amountIn, uint256 amountOut
);
/// @dev Emitted when swapExactTokensForTokens is executed
event ExactTokensSwapped(
address indexed router, address indexed fromToken, address indexed toToken, uint256 amountIn, uint256 amountOut
);
/// @dev Emitted when swapTokensForExactTokens is executed
event TokensSwappedForExact(
address indexed router, address indexed fromToken, address indexed toToken, uint256 amountIn, uint256 amountOut
);
/// @dev Execute exactInputSingle swap
/// @param router The router address
/// @param params The parameters for the swap
/// @param availableRouterByAdmin Mapping to check if router is available
/// @param availableTokensByAdmin Mapping to check if token is available
/// @return amountOut Amount of tokens received
function executeExactInputSingle(
address router,
DataTypes.DelegateExactInputSingleParams memory params,
mapping(address => bool) storage availableRouterByAdmin,
mapping(address => bool) storage availableTokensByAdmin
) external returns (uint256 amountOut) {
// Verify router and tokens are available
require(availableRouterByAdmin[router], RouterNotAvailable());
require(params.amountIn > 0, ZeroAmountNotAllowed());
require(availableTokensByAdmin[params.tokenIn] && availableTokensByAdmin[params.tokenOut], TokenNotAvailable());
// Create router params
ISwapRouter.ExactInputSingleParams memory routerParams = ISwapRouter.ExactInputSingleParams({
tokenIn: params.tokenIn,
tokenOut: params.tokenOut,
fee: params.fee,
recipient: address(this),
deadline: params.deadline,
amountIn: params.amountIn,
amountOutMinimum: params.amountOutMinimum,
sqrtPriceLimitX96: params.sqrtPriceLimitX96
});
// Set token allowance if needed
IERC20 inputToken = IERC20(params.tokenIn);
uint256 currentAllowance = inputToken.allowance(address(this), router);
if (currentAllowance < params.amountIn) {
inputToken.safeIncreaseAllowance(router, type(uint256).max);
}
if (params.deadline == 0) {
amountOut = ISwapRouterBase(router).exactInputSingle(
ISwapRouterBase.ExactInputSingleParams({
tokenIn: params.tokenIn,
tokenOut: params.tokenOut,
fee: params.fee,
recipient: address(this),
amountIn: params.amountIn,
amountOutMinimum: params.amountOutMinimum,
sqrtPriceLimitX96: params.sqrtPriceLimitX96
})
);
} else {
amountOut = ISwapRouter(router).exactInputSingle(routerParams);
}
// Emit event
emit ExactInputSingleDelegateExecuted(router, params.tokenIn, params.tokenOut, params.amountIn, amountOut);
return amountOut;
}
/// @dev Execute exactInput swap
/// @param router The router address
/// @param params The parameters for the multi-hop swap
/// @param availableRouterByAdmin Mapping to check if router is available
/// @param availableTokensByAdmin Mapping to check if token is available
/// @return amountOut Amount of tokens received
function executeExactInput(
address router,
DataTypes.DelegateExactInputParams memory params,
mapping(address => bool) storage availableRouterByAdmin,
mapping(address => bool) storage availableTokensByAdmin
) external returns (uint256 amountOut) {
// Verify router and tokens are available
require(availableRouterByAdmin[router], RouterNotAvailable());
require(params.amountIn > 0, ZeroAmountNotAllowed());
// Extract first and last token from the path
address firstToken;
address lastToken;
// Get first token from path (first 20 bytes)
bytes memory path = params.path;
assembly {
firstToken := mload(add(path, 32))
// Right-align address
firstToken := shr(96, firstToken)
}
// Get last token from path (last 20 bytes)
uint256 lastTokenPos = path.length - 20;
assembly {
lastToken := mload(add(add(path, 32), lastTokenPos))
// Right-align address
lastToken := shr(96, lastToken)
}
// Verify tokens are available
require(availableTokensByAdmin[firstToken] && availableTokensByAdmin[lastToken], TokenNotAvailable());
// Create router params
ISwapRouter.ExactInputParams memory routerParams = ISwapRouter.ExactInputParams({
path: params.path,
recipient: address(this),
deadline: params.deadline,
amountIn: params.amountIn,
amountOutMinimum: params.amountOutMinimum
});
// Set token allowance if needed
IERC20 inputToken = IERC20(firstToken);
uint256 currentAllowance = inputToken.allowance(address(this), router);
if (currentAllowance < params.amountIn) {
inputToken.safeIncreaseAllowance(router, type(uint256).max);
}
if (params.deadline == 0) {
amountOut = ISwapRouterBase(router).exactInput(
ISwapRouterBase.ExactInputParams({
path: params.path,
recipient: address(this),
amountIn: params.amountIn,
amountOutMinimum: params.amountOutMinimum
})
);
} else {
amountOut = ISwapRouter(router).exactInput(routerParams);
}
// Emit event
emit ExactInputDelegateExecuted(router, firstToken, lastToken, params.amountIn, amountOut);
return amountOut;
}
/// @dev Execute exactOutputSingle swap
/// @param router The router address
/// @param params The parameters for the swap
/// @param availableRouterByAdmin Mapping to check if router is available
/// @param availableTokensByAdmin Mapping to check if token is available
/// @return amountIn Amount of tokens spent
function executeExactOutputSingle(
address router,
DataTypes.DelegateExactOutputSingleParams memory params,
mapping(address => bool) storage availableRouterByAdmin,
mapping(address => bool) storage availableTokensByAdmin
) external returns (uint256 amountIn) {
// Verify router and tokens are available
require(availableRouterByAdmin[router], RouterNotAvailable());
require(params.amountOut > 0, ZeroAmountNotAllowed());
require(availableTokensByAdmin[params.tokenIn] && availableTokensByAdmin[params.tokenOut], TokenNotAvailable());
// Create router params
ISwapRouter.ExactOutputSingleParams memory routerParams = ISwapRouter.ExactOutputSingleParams({
tokenIn: params.tokenIn,
tokenOut: params.tokenOut,
fee: params.fee,
recipient: address(this),
deadline: params.deadline,
amountOut: params.amountOut,
amountInMaximum: params.amountInMaximum,
sqrtPriceLimitX96: params.sqrtPriceLimitX96
});
// Set token allowance if needed
IERC20 inputToken = IERC20(params.tokenIn);
uint256 currentAllowance = inputToken.allowance(address(this), router);
if (currentAllowance < params.amountInMaximum) {
inputToken.safeIncreaseAllowance(router, type(uint256).max);
}
if (params.deadline == 0) {
amountIn = ISwapRouterBase(router).exactOutputSingle(
ISwapRouterBase.ExactOutputSingleParams({
tokenIn: params.tokenIn,
tokenOut: params.tokenOut,
fee: params.fee,
recipient: address(this),
amountOut: params.amountOut,
amountInMaximum: params.amountInMaximum,
sqrtPriceLimitX96: params.sqrtPriceLimitX96
})
);
} else {
amountIn = ISwapRouter(router).exactOutputSingle(routerParams);
}
// Emit event
emit ExactOutputSingleDelegateExecuted(router, params.tokenIn, params.tokenOut, amountIn, params.amountOut);
return amountIn;
}
/// @dev Execute exactOutput swap
/// @param router The router address
/// @param params The parameters for the multi-hop swap
/// @param availableRouterByAdmin Mapping to check if router is available
/// @param availableTokensByAdmin Mapping to check if token is available
/// @return amountIn Amount of tokens spent
function executeExactOutput(
address router,
DataTypes.DelegateExactOutputParams memory params,
mapping(address => bool) storage availableRouterByAdmin,
mapping(address => bool) storage availableTokensByAdmin
) external returns (uint256 amountIn) {
// Verify router and amount
require(availableRouterByAdmin[router], RouterNotAvailable());
require(params.amountOut > 0, ZeroAmountNotAllowed());
// Extract first and last token from the path
address firstToken; // Output token
address lastToken; // Input token
// Get first token from path (first 20 bytes)
bytes memory path = params.path;
assembly {
firstToken := mload(add(path, 32))
// Right-align address
firstToken := shr(96, firstToken)
}
// Get last token from path (last 20 bytes)
uint256 lastTokenPos = path.length - 20;
assembly {
lastToken := mload(add(add(path, 32), lastTokenPos))
// Right-align address
lastToken := shr(96, lastToken)
}
// Verify tokens are available
require(availableTokensByAdmin[lastToken] && availableTokensByAdmin[firstToken], TokenNotAvailable());
// Create router params
ISwapRouter.ExactOutputParams memory routerParams = ISwapRouter.ExactOutputParams({
path: params.path,
recipient: address(this),
deadline: params.deadline,
amountOut: params.amountOut,
amountInMaximum: params.amountInMaximum
});
// Set token allowance if needed
IERC20 inputToken = IERC20(firstToken);
uint256 currentAllowance = inputToken.allowance(address(this), router);
if (currentAllowance < params.amountInMaximum) {
inputToken.safeIncreaseAllowance(router, type(uint256).max);
}
if (params.deadline == 0) {
amountIn = ISwapRouterBase(router).exactOutput(
ISwapRouterBase.ExactOutputParams({
path: params.path,
recipient: address(this),
amountOut: params.amountOut,
amountInMaximum: params.amountInMaximum
})
);
} else {
amountIn = ISwapRouter(router).exactOutput(routerParams);
}
// Emit event
emit ExactOutputDelegateExecuted(router, lastToken, firstToken, amountIn, params.amountOut);
return amountIn;
}
/// @dev Execute swapExactTokensForTokens (Uniswap V2) and process the results
/// @param router The router address
/// @param amountIn Amount of input tokens
/// @param amountOutMin Minimum amount of output tokens
/// @param path Path of tokens for the swap
/// @param deadline Deadline for the swap
/// @param availableRouterByAdmin Mapping to check if router is available
/// @param availableTokensByAdmin Mapping to check if token is available
/// @return amounts Array of amounts for each token in the path
function executeSwapExactTokensForTokens(
address router,
uint256 amountIn,
uint256 amountOutMin,
address[] calldata path,
uint256 deadline,
mapping(address => bool) storage availableRouterByAdmin,
mapping(address => bool) storage availableTokensByAdmin
) external returns (uint256[] memory amounts) {
// Verify router and tokens are available
require(availableRouterByAdmin[router], RouterNotAvailable());
require(amountIn > 0, ZeroAmountNotAllowed());
// Get input and output tokens from path
address firstToken = path[0];
address lastToken = path[path.length - 1];
// Verify tokens are available
require(availableTokensByAdmin[firstToken] && availableTokensByAdmin[lastToken], TokenNotAvailable());
// Check and set token allowance if needed
IERC20 inputToken = IERC20(firstToken);
uint256 currentAllowance = inputToken.allowance(address(this), router);
if (currentAllowance < amountIn) {
inputToken.safeIncreaseAllowance(router, type(uint256).max);
}
// Execute the swap
amounts = IUniswapV2Router02(router).swapExactTokensForTokens(
amountIn,
amountOutMin,
path,
address(this), // tokens come back to the vault
deadline
);
// Emit event
emit ExactTokensSwapped(router, firstToken, lastToken, amountIn, amounts[amounts.length - 1]);
return amounts;
}
/// @dev Execute swapTokensForExactTokens (Uniswap V2) and process the results
/// @param router The router address
/// @param amountOut Amount of output tokens
/// @param amountInMax Maximum amount of input tokens
/// @param path Path of tokens for the swap
/// @param deadline Deadline for the swap
/// @param availableRouterByAdmin Mapping to check if router is available
/// @param availableTokensByAdmin Mapping to check if token is available
/// @return amounts Array of amounts for each token in the path
function executeSwapTokensForExactTokens(
address router,
uint256 amountOut,
uint256 amountInMax,
address[] calldata path,
uint256 deadline,
mapping(address => bool) storage availableRouterByAdmin,
mapping(address => bool) storage availableTokensByAdmin
) external returns (uint256[] memory amounts) {
// Verify router and tokens are available
require(availableRouterByAdmin[router], RouterNotAvailable());
require(amountOut > 0, ZeroAmountNotAllowed());
require(availableTokensByAdmin[path[0]] && availableTokensByAdmin[path[path.length - 1]], TokenNotAvailable());
// Check and set token allowance if needed
IERC20 inputToken = IERC20(path[0]);
uint256 currentAllowance = inputToken.allowance(address(this), router);
if (currentAllowance < amountInMax) {
inputToken.safeIncreaseAllowance(router, type(uint256).max);
}
// Execute the swap
amounts = IUniswapV2Router02(router).swapTokensForExactTokens(
amountOut,
amountInMax,
path,
address(this), // tokens come back to the vault
deadline
);
// Emit event
emit TokensSwappedForExact(router, path[0], path[path.length - 1], amounts[0], amountOut);
return amounts;
}
/// @dev Execute Quickswap exactInputSingle swap
/// @param router The router address
/// @param params The parameters for the swap
/// @param availableRouterByAdmin Mapping to check if router is available
/// @param availableTokensByAdmin Mapping to check if token is available
/// @return amountOut Amount of tokens received
function executeQuickswapExactInputSingle(
address router,
DataTypes.DelegateQuickswapExactInputSingleParams memory params,
mapping(address => bool) storage availableRouterByAdmin,
mapping(address => bool) storage availableTokensByAdmin
) external returns (uint256 amountOut) {
// Verify router and tokens are available
require(availableRouterByAdmin[router], RouterNotAvailable());
require(params.amountIn > 0, ZeroAmountNotAllowed());
require(availableTokensByAdmin[params.tokenIn] && availableTokensByAdmin[params.tokenOut], TokenNotAvailable());
// Create Quickswap params
IQuickswapV3Router.ExactInputSingleParams memory quickswapParams = IQuickswapV3Router.ExactInputSingleParams({
tokenIn: params.tokenIn,
tokenOut: params.tokenOut,
recipient: address(this),
deadline: params.deadline,
amountIn: params.amountIn,
amountOutMinimum: params.amountOutMinimum,
limitSqrtPrice: params.limitSqrtPrice
});
// Set token allowance if needed
IERC20 inputToken = IERC20(params.tokenIn);
uint256 currentAllowance = inputToken.allowance(address(this), router);
if (currentAllowance < params.amountIn) {
inputToken.safeIncreaseAllowance(router, type(uint256).max);
}
// Execute the swap
amountOut = IQuickswapV3Router(router).exactInputSingle(quickswapParams);
// Emit event
emit ExactInputSingleDelegateExecuted(router, params.tokenIn, params.tokenOut, params.amountIn, amountOut);
return amountOut;
}
/// @dev Execute Quickswap exactInput swap
/// @param router The router address
/// @param params The parameters for the multi-hop swap
/// @param availableRouterByAdmin Mapping to check if router is available
/// @param availableTokensByAdmin Mapping to check if token is available
/// @return amountOut Amount of tokens received
function executeQuickswapExactInput(
address router,
DataTypes.DelegateQuickswapExactInputParams memory params,
mapping(address => bool) storage availableRouterByAdmin,
mapping(address => bool) storage availableTokensByAdmin
) external returns (uint256 amountOut) {
// Verify router and tokens are available
require(availableRouterByAdmin[router], RouterNotAvailable());
require(params.amountIn > 0, ZeroAmountNotAllowed());
// Extract first and last token from the path
address firstToken;
address lastToken;
// Get first token from path (first 20 bytes)
bytes memory path = params.path;
assembly {
firstToken := mload(add(path, 32))
// Right-align address
firstToken := shr(96, firstToken)
}
// Get last token from path (last 20 bytes)
uint256 lastTokenPos = path.length - 20;
assembly {
lastToken := mload(add(add(path, 32), lastTokenPos))
// Right-align address
lastToken := shr(96, lastToken)
}
// Verify tokens are available
require(availableTokensByAdmin[firstToken] && availableTokensByAdmin[lastToken], TokenNotAvailable());
// Create Quickswap params
IQuickswapV3Router.ExactInputParams memory quickswapParams = IQuickswapV3Router.ExactInputParams({
path: params.path,
recipient: address(this),
deadline: params.deadline,
amountIn: params.amountIn,
amountOutMinimum: params.amountOutMinimum
});
// Set token allowance if needed
IERC20 inputToken = IERC20(firstToken);
uint256 currentAllowance = inputToken.allowance(address(this), router);
if (currentAllowance < params.amountIn) {
inputToken.safeIncreaseAllowance(router, type(uint256).max);
}
// Execute the swap
amountOut = IQuickswapV3Router(router).exactInput(quickswapParams);
// Emit event
emit ExactInputDelegateExecuted(router, firstToken, lastToken, params.amountIn, amountOut);
return amountOut;
}
/// @dev Execute Quickswap exactOutputSingle swap
/// @param router The router address
/// @param params The parameters for the swap
/// @param availableRouterByAdmin Mapping to check if router is available
/// @param availableTokensByAdmin Mapping to check if token is available
/// @return amountIn Amount of tokens spent
function executeQuickswapExactOutputSingle(
address router,
DataTypes.DelegateQuickswapExactOutputSingleParams memory params,
mapping(address => bool) storage availableRouterByAdmin,
mapping(address => bool) storage availableTokensByAdmin
) external returns (uint256 amountIn) {
// Verify router and tokens are available
require(availableRouterByAdmin[router], RouterNotAvailable());
require(params.amountOut > 0, ZeroAmountNotAllowed());
require(availableTokensByAdmin[params.tokenIn] && availableTokensByAdmin[params.tokenOut], TokenNotAvailable());
// Create Quickswap params
IQuickswapV3Router.ExactOutputSingleParams memory quickswapParams = IQuickswapV3Router.ExactOutputSingleParams({
tokenIn: params.tokenIn,
tokenOut: params.tokenOut,
fee: params.fee,
recipient: address(this),
deadline: params.deadline,
amountOut: params.amountOut,
amountInMaximum: params.amountInMaximum,
limitSqrtPrice: params.limitSqrtPrice
});
// Set token allowance if needed
IERC20 inputToken = IERC20(params.tokenIn);
uint256 currentAllowance = inputToken.allowance(address(this), router);
if (currentAllowance < params.amountInMaximum) {
inputToken.safeIncreaseAllowance(router, type(uint256).max);
}
// Execute the swap
amountIn = IQuickswapV3Router(router).exactOutputSingle(quickswapParams);
// Emit event
emit ExactOutputSingleDelegateExecuted(router, params.tokenIn, params.tokenOut, amountIn, params.amountOut);
return amountIn;
}
/// @dev Execute Quickswap exactOutput swap
/// @param router The router address
/// @param params The parameters for the multi-hop swap
/// @param availableRouterByAdmin Mapping to check if router is available
/// @param availableTokensByAdmin Mapping to check if token is available
/// @return amountIn Amount of tokens spent
function executeQuickswapExactOutput(
address router,
DataTypes.DelegateQuickswapExactOutputParams memory params,
mapping(address => bool) storage availableRouterByAdmin,
mapping(address => bool) storage availableTokensByAdmin
) external returns (uint256 amountIn) {
// Verify router and amount
require(availableRouterByAdmin[router], RouterNotAvailable());
require(params.amountOut > 0, ZeroAmountNotAllowed());
// Extract first and last token from the path
address firstToken; // Output token
address lastToken; // Input token
// Get first token from path (first 20 bytes)
bytes memory path = params.path;
assembly {
firstToken := mload(add(path, 32))
// Right-align address
firstToken := shr(96, firstToken)
}
// Get last token from path (last 20 bytes)
uint256 lastTokenPos = path.length - 20;
assembly {
lastToken := mload(add(add(path, 32), lastTokenPos))
// Right-align address
lastToken := shr(96, lastToken)
}
// Verify tokens are available
require(availableTokensByAdmin[lastToken] && availableTokensByAdmin[firstToken], TokenNotAvailable());
// Create Quickswap params
IQuickswapV3Router.ExactOutputParams memory quickswapParams = IQuickswapV3Router.ExactOutputParams({
path: params.path,
recipient: address(this),
deadline: params.deadline,
amountOut: params.amountOut,
amountInMaximum: params.amountInMaximum
});
// Set token allowance if needed
IERC20 inputToken = IERC20(firstToken);
uint256 currentAllowance = inputToken.allowance(address(this), router);
if (currentAllowance < params.amountInMaximum) {
inputToken.safeIncreaseAllowance(router, type(uint256).max);
}
// Execute the swap
amountIn = IQuickswapV3Router(router).exactOutput(quickswapParams);
// Emit event
emit ExactOutputDelegateExecuted(router, lastToken, firstToken, amountIn, params.amountOut);
return amountIn;
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity ^0.8.10;
import {IPriceOracleGetter} from "./IPriceOracleGetter.sol";
/**
* @title IMeraPriceOracle
* @notice Interface for the Mera price oracle.
*/
interface IMeraPriceOracle is IPriceOracleGetter {
/**
* @dev Emitted when the source of an asset is updated
* @param asset The address of the asset
* @param source The address of the source
*/
event AssetSourceUpdated(address indexed asset, address indexed source);
/**
* @dev Emitted when the fallback oracle is updated
* @param fallbackOracle The address of the fallback oracle
*/
event FallbackOracleUpdated(address indexed fallbackOracle);
/**
* @dev Structure containing all price-related data for an asset
* @param price The current price of the asset
* @param decimals The number of decimals for the asset price
* @param lastUpdateTime The timestamp of the last price update
*/
struct AssetPriceData {
uint256 price;
uint8 decimals;
uint256 lastUpdateTime;
}
/**
* @notice Sets the sources for multiple assets
* @param assets The addresses of the assets
* @param sources The addresses of the price sources
* @param decimals The decimals of the assets
*/
function setAssetSources(address[] calldata assets, address[] calldata sources, uint8[] calldata decimals)
external;
/**
* @notice Sets the fallback oracle
* @param fallbackOracle The address of the fallback oracle
*/
function setFallbackOracle(address fallbackOracle) external;
/**
* @notice Gets all price data for a list of assets
* @param assets The addresses of the assets
* @return Array of AssetPriceData structs containing price information
*/
function getAssetsPriceData(address[] calldata assets) external view returns (AssetPriceData[] memory);
/**
* @notice Gets the source of an asset's price
* @param asset The address of the asset
* @return The address of the source
*/
function getSourceOfAsset(address asset) external view returns (address);
/**
* @notice Gets the address of the fallback oracle
* @return The address of the fallback oracle
*/
function getFallbackOracle() external view returns (address);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity 0.8.29;
/**
* @dev External interface of MultiAdminSingleHolderAccessControl declared to support ERC-165 detection.
* Based on OpenZeppelin's IAccessControl but modified for single holder pattern.
*/
interface IMultiAdminSingleHolderAccessControl {
/**
* @dev The `account` is missing a role.
*/
error AccessControlUnauthorizedAccount(address account, bytes32 neededRole);
/**
* @dev The caller of a function is not the expected one.
*
* NOTE: Don't confuse with {AccessControlUnauthorizedAccount}.
*/
error AccessControlBadConfirmation();
/**
* @dev Emitted when `newAdminRole` is set as ``role``'s admin role, replacing `previousAdminRole`
*
* `DEFAULT_ADMIN_ROLE` is the starting admin for all roles, despite
* {RoleAdminChanged} not being emitted to signal this.
*/
event RoleAdminAdded(bytes32 indexed role, bytes32 indexed adminRole);
/**
* @dev Emitted when `adminRole` is removed from ``role``'s admin roles.
*/
event RoleAdminRemoved(bytes32 indexed role, bytes32 indexed adminRole);
/**
* @dev Emitted when `account` is granted `role`.
*
* `sender` is the account that originated the contract call. This account bears the admin role (for the granted role).
* Expected in cases where the role was granted using the internal {_grantRole}.
*/
event RoleGranted(bytes32 indexed role, address indexed account, address indexed sender);
/**
* @dev Emitted when `account` is revoked `role`.
*
* `sender` is the account that originated the contract call:
* - if using `revokeRole`, it is the admin role bearer
* - if using `renounceRole`, it is the role bearer (i.e. `account`)
*/
event RoleRevoked(bytes32 indexed role, address indexed account, address indexed sender);
/**
* @dev Returns `true` if `account` has been granted `role`.
*/
function hasRole(bytes32 role, address account) external view returns (bool);
/**
* @dev Returns the address that currently holds the specified role.
* Returns address(0) if no one holds the role.
*/
function getRoleHolder(bytes32 role) external view returns (address);
/**
* @dev Returns true if adminRole can control role
*/
function isRoleAdmin(bytes32 role, bytes32 adminRole) external view returns (bool);
/**
* @dev Grants `role` to `account`.
*
* If another account already has the role, it will be revoked from them first.
* If `account` had not been already granted `role`, emits a {RoleGranted}
* event.
*
* Requirements:
*
* - the caller must have an admin role that can control ``role``.
*/
function grantRole(bytes32 role, address account) external;
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (interfaces/IERC5267.sol)
pragma solidity ^0.8.20;
interface IERC5267 {
/**
* @dev MAY be emitted to signal that the domain could have changed.
*/
event EIP712DomainChanged();
/**
* @dev returns the fields and values that describe the domain separator used by this contract for EIP-712
* signature.
*/
function eip712Domain()
external
view
returns (
bytes1 fields,
string memory name,
string memory version,
uint256 chainId,
address verifyingContract,
bytes32 salt,
uint256[] memory extensions
);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (proxy/Proxy.sol)
pragma solidity ^0.8.20;
/**
* @dev This abstract contract provides a fallback function that delegates all calls to another contract using the EVM
* instruction `delegatecall`. We refer to the second contract as the _implementation_ behind the proxy, and it has to
* be specified by overriding the virtual {_implementation} function.
*
* Additionally, delegation to the implementation can be triggered manually through the {_fallback} function, or to a
* different contract through the {_delegate} function.
*
* The success and return data of the delegated call will be returned back to the caller of the proxy.
*/
abstract contract Proxy {
/**
* @dev Delegates the current call to `implementation`.
*
* This function does not return to its internal call site, it will return directly to the external caller.
*/
function _delegate(address implementation) internal virtual {
assembly {
// Copy msg.data. We take full control of memory in this inline assembly
// block because it will not return to Solidity code. We overwrite the
// Solidity scratch pad at memory position 0.
calldatacopy(0, 0, calldatasize())
// Call the implementation.
// out and outsize are 0 because we don't know the size yet.
let result := delegatecall(gas(), implementation, 0, calldatasize(), 0, 0)
// Copy the returned data.
returndatacopy(0, 0, returndatasize())
switch result
// delegatecall returns 0 on error.
case 0 {
revert(0, returndatasize())
}
default {
return(0, returndatasize())
}
}
}
/**
* @dev This is a virtual function that should be overridden so it returns the address to which the fallback
* function and {_fallback} should delegate.
*/
function _implementation() internal view virtual returns (address);
/**
* @dev Delegates the current call to the address returned by `_implementation()`.
*
* This function does not return to its internal call site, it will return directly to the external caller.
*/
function _fallback() internal virtual {
_delegate(_implementation());
}
/**
* @dev Fallback function that delegates calls to the address returned by `_implementation()`. Will run if no other
* function in the contract matches the call data.
*/
fallback() external payable virtual {
_fallback();
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.2.0) (proxy/ERC1967/ERC1967Utils.sol)
pragma solidity ^0.8.22;
import {IBeacon} from "../beacon/IBeacon.sol";
import {IERC1967} from "../../interfaces/IERC1967.sol";
import {Address} from "../../utils/Address.sol";
import {StorageSlot} from "../../utils/StorageSlot.sol";
/**
* @dev This library provides getters and event emitting update functions for
* https://eips.ethereum.org/EIPS/eip-1967[ERC-1967] slots.
*/
library ERC1967Utils {
/**
* @dev Storage slot with the address of the current implementation.
* This is the keccak-256 hash of "eip1967.proxy.implementation" subtracted by 1.
*/
// solhint-disable-next-line private-vars-leading-underscore
bytes32 internal constant IMPLEMENTATION_SLOT = 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc;
/**
* @dev The `implementation` of the proxy is invalid.
*/
error ERC1967InvalidImplementation(address implementation);
/**
* @dev The `admin` of the proxy is invalid.
*/
error ERC1967InvalidAdmin(address admin);
/**
* @dev The `beacon` of the proxy is invalid.
*/
error ERC1967InvalidBeacon(address beacon);
/**
* @dev An upgrade function sees `msg.value > 0` that may be lost.
*/
error ERC1967NonPayable();
/**
* @dev Returns the current implementation address.
*/
function getImplementation() internal view returns (address) {
return StorageSlot.getAddressSlot(IMPLEMENTATION_SLOT).value;
}
/**
* @dev Stores a new address in the ERC-1967 implementation slot.
*/
function _setImplementation(address newImplementation) private {
if (newImplementation.code.length == 0) {
revert ERC1967InvalidImplementation(newImplementation);
}
StorageSlot.getAddressSlot(IMPLEMENTATION_SLOT).value = newImplementation;
}
/**
* @dev Performs implementation upgrade with additional setup call if data is nonempty.
* This function is payable only if the setup call is performed, otherwise `msg.value` is rejected
* to avoid stuck value in the contract.
*
* Emits an {IERC1967-Upgraded} event.
*/
function upgradeToAndCall(address newImplementation, bytes memory data) internal {
_setImplementation(newImplementation);
emit IERC1967.Upgraded(newImplementation);
if (data.length > 0) {
Address.functionDelegateCall(newImplementation, data);
} else {
_checkNonPayable();
}
}
/**
* @dev Storage slot with the admin of the contract.
* This is the keccak-256 hash of "eip1967.proxy.admin" subtracted by 1.
*/
// solhint-disable-next-line private-vars-leading-underscore
bytes32 internal constant ADMIN_SLOT = 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103;
/**
* @dev Returns the current admin.
*
* TIP: To get this value clients can read directly from the storage slot shown below (specified by ERC-1967) using
* the https://eth.wiki/json-rpc/API#eth_getstorageat[`eth_getStorageAt`] RPC call.
* `0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103`
*/
function getAdmin() internal view returns (address) {
return StorageSlot.getAddressSlot(ADMIN_SLOT).value;
}
/**
* @dev Stores a new address in the ERC-1967 admin slot.
*/
function _setAdmin(address newAdmin) private {
if (newAdmin == address(0)) {
revert ERC1967InvalidAdmin(address(0));
}
StorageSlot.getAddressSlot(ADMIN_SLOT).value = newAdmin;
}
/**
* @dev Changes the admin of the proxy.
*
* Emits an {IERC1967-AdminChanged} event.
*/
function changeAdmin(address newAdmin) internal {
emit IERC1967.AdminChanged(getAdmin(), newAdmin);
_setAdmin(newAdmin);
}
/**
* @dev The storage slot of the UpgradeableBeacon contract which defines the implementation for this proxy.
* This is the keccak-256 hash of "eip1967.proxy.beacon" subtracted by 1.
*/
// solhint-disable-next-line private-vars-leading-underscore
bytes32 internal constant BEACON_SLOT = 0xa3f0ad74e5423aebfd80d3ef4346578335a9a72aeaee59ff6cb3582b35133d50;
/**
* @dev Returns the current beacon.
*/
function getBeacon() internal view returns (address) {
return StorageSlot.getAddressSlot(BEACON_SLOT).value;
}
/**
* @dev Stores a new beacon in the ERC-1967 beacon slot.
*/
function _setBeacon(address newBeacon) private {
if (newBeacon.code.length == 0) {
revert ERC1967InvalidBeacon(newBeacon);
}
StorageSlot.getAddressSlot(BEACON_SLOT).value = newBeacon;
address beaconImplementation = IBeacon(newBeacon).implementation();
if (beaconImplementation.code.length == 0) {
revert ERC1967InvalidImplementation(beaconImplementation);
}
}
/**
* @dev Change the beacon and trigger a setup call if data is nonempty.
* This function is payable only if the setup call is performed, otherwise `msg.value` is rejected
* to avoid stuck value in the contract.
*
* Emits an {IERC1967-BeaconUpgraded} event.
*
* CAUTION: Invoking this function has no effect on an instance of {BeaconProxy} since v5, since
* it uses an immutable beacon without looking at the value of the ERC-1967 beacon slot for
* efficiency.
*/
function upgradeBeaconToAndCall(address newBeacon, bytes memory data) internal {
_setBeacon(newBeacon);
emit IERC1967.BeaconUpgraded(newBeacon);
if (data.length > 0) {
Address.functionDelegateCall(IBeacon(newBeacon).implementation(), data);
} else {
_checkNonPayable();
}
}
/**
* @dev Reverts if `msg.value` is not zero. It can be used to avoid `msg.value` stuck in the contract
* if an upgrade doesn't perform an initialization call.
*/
function _checkNonPayable() private {
if (msg.value > 0) {
revert ERC1967NonPayable();
}
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.1) (utils/Context.sol)
pragma solidity ^0.8.20;
/**
* @dev Provides information about the current execution context, including the
* sender of the transaction and its data. While these are generally available
* via msg.sender and msg.data, they should not be accessed in such a direct
* manner, since when dealing with meta-transactions the account sending and
* paying for execution may not be the actual sender (as far as an application
* is concerned).
*
* This contract is only required for intermediate, library-like contracts.
*/
abstract contract Context {
function _msgSender() internal view virtual returns (address) {
return msg.sender;
}
function _msgData() internal view virtual returns (bytes calldata) {
return msg.data;
}
function _contextSuffixLength() internal view virtual returns (uint256) {
return 0;
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (interfaces/draft-IERC1822.sol)
pragma solidity ^0.8.20;
/**
* @dev ERC-1822: Universal Upgradeable Proxy Standard (UUPS) documents a method for upgradeability through a simplified
* proxy whose upgrades are fully controlled by the current implementation.
*/
interface IERC1822Proxiable {
/**
* @dev Returns the storage slot that the proxiable contract assumes is being used to store the implementation
* address.
*
* IMPORTANT: A proxy pointing at a proxiable contract should not be considered proxiable itself, because this risks
* bricking a proxy that upgrades to it, by delegating to itself until out of gas. Thus it is critical that this
* function revert if invoked through a proxy.
*/
function proxiableUUID() external view returns (bytes32);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.1) (utils/Context.sol)
pragma solidity ^0.8.20;
import {Initializable} from "../proxy/utils/Initializable.sol";
/**
* @dev Provides information about the current execution context, including the
* sender of the transaction and its data. While these are generally available
* via msg.sender and msg.data, they should not be accessed in such a direct
* manner, since when dealing with meta-transactions the account sending and
* paying for execution may not be the actual sender (as far as an application
* is concerned).
*
* This contract is only required for intermediate, library-like contracts.
*/
abstract contract ContextUpgradeable is Initializable {
function __Context_init() internal onlyInitializing {
}
function __Context_init_unchained() internal onlyInitializing {
}
function _msgSender() internal view virtual returns (address) {
return msg.sender;
}
function _msgData() internal view virtual returns (bytes calldata) {
return msg.data;
}
function _contextSuffixLength() internal view virtual returns (uint256) {
return 0;
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (utils/introspection/ERC165.sol)
pragma solidity ^0.8.20;
import {IERC165} from "@openzeppelin/contracts/utils/introspection/IERC165.sol";
import {Initializable} from "../../proxy/utils/Initializable.sol";
/**
* @dev Implementation of the {IERC165} interface.
*
* Contracts that want to implement ERC-165 should inherit from this contract and override {supportsInterface} to check
* for the additional interface id that will be supported. For example:
*
* ```solidity
* function supportsInterface(bytes4 interfaceId) public view virtual override returns (bool) {
* return interfaceId == type(MyInterface).interfaceId || super.supportsInterface(interfaceId);
* }
* ```
*/
abstract contract ERC165Upgradeable is Initializable, IERC165 {
function __ERC165_init() internal onlyInitializing {
}
function __ERC165_init_unchained() internal onlyInitializing {
}
/**
* @dev See {IERC165-supportsInterface}.
*/
function supportsInterface(bytes4 interfaceId) public view virtual returns (bool) {
return interfaceId == type(IERC165).interfaceId;
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (interfaces/IERC1363.sol)
pragma solidity ^0.8.20;
import {IERC20} from "./IERC20.sol";
import {IERC165} from "./IERC165.sol";
/**
* @title IERC1363
* @dev Interface of the ERC-1363 standard as defined in the https://eips.ethereum.org/EIPS/eip-1363[ERC-1363].
*
* Defines an extension interface for ERC-20 tokens that supports executing code on a recipient contract
* after `transfer` or `transferFrom`, or code on a spender contract after `approve`, in a single transaction.
*/
interface IERC1363 is IERC20, IERC165 {
/*
* Note: the ERC-165 identifier for this interface is 0xb0202a11.
* 0xb0202a11 ===
* bytes4(keccak256('transferAndCall(address,uint256)')) ^
* bytes4(keccak256('transferAndCall(address,uint256,bytes)')) ^
* bytes4(keccak256('transferFromAndCall(address,address,uint256)')) ^
* bytes4(keccak256('transferFromAndCall(address,address,uint256,bytes)')) ^
* bytes4(keccak256('approveAndCall(address,uint256)')) ^
* bytes4(keccak256('approveAndCall(address,uint256,bytes)'))
*/
/**
* @dev Moves a `value` amount of tokens from the caller's account to `to`
* and then calls {IERC1363Receiver-onTransferReceived} on `to`.
* @param to The address which you want to transfer to.
* @param value The amount of tokens to be transferred.
* @return A boolean value indicating whether the operation succeeded unless throwing.
*/
function transferAndCall(address to, uint256 value) external returns (bool);
/**
* @dev Moves a `value` amount of tokens from the caller's account to `to`
* and then calls {IERC1363Receiver-onTransferReceived} on `to`.
* @param to The address which you want to transfer to.
* @param value The amount of tokens to be transferred.
* @param data Additional data with no specified format, sent in call to `to`.
* @return A boolean value indicating whether the operation succeeded unless throwing.
*/
function transferAndCall(address to, uint256 value, bytes calldata data) external returns (bool);
/**
* @dev Moves a `value` amount of tokens from `from` to `to` using the allowance mechanism
* and then calls {IERC1363Receiver-onTransferReceived} on `to`.
* @param from The address which you want to send tokens from.
* @param to The address which you want to transfer to.
* @param value The amount of tokens to be transferred.
* @return A boolean value indicating whether the operation succeeded unless throwing.
*/
function transferFromAndCall(address from, address to, uint256 value) external returns (bool);
/**
* @dev Moves a `value` amount of tokens from `from` to `to` using the allowance mechanism
* and then calls {IERC1363Receiver-onTransferReceived} on `to`.
* @param from The address which you want to send tokens from.
* @param to The address which you want to transfer to.
* @param value The amount of tokens to be transferred.
* @param data Additional data with no specified format, sent in call to `to`.
* @return A boolean value indicating whether the operation succeeded unless throwing.
*/
function transferFromAndCall(address from, address to, uint256 value, bytes calldata data) external returns (bool);
/**
* @dev Sets a `value` amount of tokens as the allowance of `spender` over the
* caller's tokens and then calls {IERC1363Spender-onApprovalReceived} on `spender`.
* @param spender The address which will spend the funds.
* @param value The amount of tokens to be spent.
* @return A boolean value indicating whether the operation succeeded unless throwing.
*/
function approveAndCall(address spender, uint256 value) external returns (bool);
/**
* @dev Sets a `value` amount of tokens as the allowance of `spender` over the
* caller's tokens and then calls {IERC1363Spender-onApprovalReceived} on `spender`.
* @param spender The address which will spend the funds.
* @param value The amount of tokens to be spent.
* @param data Additional data with no specified format, sent in call to `spender`.
* @return A boolean value indicating whether the operation succeeded unless throwing.
*/
function approveAndCall(address spender, uint256 value, bytes calldata data) external returns (bool);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.3.0) (utils/cryptography/MessageHashUtils.sol)
pragma solidity ^0.8.20;
import {Strings} from "../Strings.sol";
/**
* @dev Signature message hash utilities for producing digests to be consumed by {ECDSA} recovery or signing.
*
* The library provides methods for generating a hash of a message that conforms to the
* https://eips.ethereum.org/EIPS/eip-191[ERC-191] and https://eips.ethereum.org/EIPS/eip-712[EIP 712]
* specifications.
*/
library MessageHashUtils {
/**
* @dev Returns the keccak256 digest of an ERC-191 signed data with version
* `0x45` (`personal_sign` messages).
*
* The digest is calculated by prefixing a bytes32 `messageHash` with
* `"\x19Ethereum Signed Message:\n32"` and hashing the result. It corresponds with the
* hash signed when using the https://ethereum.org/en/developers/docs/apis/json-rpc/#eth_sign[`eth_sign`] JSON-RPC method.
*
* NOTE: The `messageHash` parameter is intended to be the result of hashing a raw message with
* keccak256, although any bytes32 value can be safely used because the final digest will
* be re-hashed.
*
* See {ECDSA-recover}.
*/
function toEthSignedMessageHash(bytes32 messageHash) internal pure returns (bytes32 digest) {
assembly ("memory-safe") {
mstore(0x00, "\x19Ethereum Signed Message:\n32") // 32 is the bytes-length of messageHash
mstore(0x1c, messageHash) // 0x1c (28) is the length of the prefix
digest := keccak256(0x00, 0x3c) // 0x3c is the length of the prefix (0x1c) + messageHash (0x20)
}
}
/**
* @dev Returns the keccak256 digest of an ERC-191 signed data with version
* `0x45` (`personal_sign` messages).
*
* The digest is calculated by prefixing an arbitrary `message` with
* `"\x19Ethereum Signed Message:\n" + len(message)` and hashing the result. It corresponds with the
* hash signed when using the https://ethereum.org/en/developers/docs/apis/json-rpc/#eth_sign[`eth_sign`] JSON-RPC method.
*
* See {ECDSA-recover}.
*/
function toEthSignedMessageHash(bytes memory message) internal pure returns (bytes32) {
return
keccak256(bytes.concat("\x19Ethereum Signed Message:\n", bytes(Strings.toString(message.length)), message));
}
/**
* @dev Returns the keccak256 digest of an ERC-191 signed data with version
* `0x00` (data with intended validator).
*
* The digest is calculated by prefixing an arbitrary `data` with `"\x19\x00"` and the intended
* `validator` address. Then hashing the result.
*
* See {ECDSA-recover}.
*/
function toDataWithIntendedValidatorHash(address validator, bytes memory data) internal pure returns (bytes32) {
return keccak256(abi.encodePacked(hex"19_00", validator, data));
}
/**
* @dev Variant of {toDataWithIntendedValidatorHash-address-bytes} optimized for cases where `data` is a bytes32.
*/
function toDataWithIntendedValidatorHash(
address validator,
bytes32 messageHash
) internal pure returns (bytes32 digest) {
assembly ("memory-safe") {
mstore(0x00, hex"19_00")
mstore(0x02, shl(96, validator))
mstore(0x16, messageHash)
digest := keccak256(0x00, 0x36)
}
}
/**
* @dev Returns the keccak256 digest of an EIP-712 typed data (ERC-191 version `0x01`).
*
* The digest is calculated from a `domainSeparator` and a `structHash`, by prefixing them with
* `\x19\x01` and hashing the result. It corresponds to the hash signed by the
* https://eips.ethereum.org/EIPS/eip-712[`eth_signTypedData`] JSON-RPC method as part of EIP-712.
*
* See {ECDSA-recover}.
*/
function toTypedDataHash(bytes32 domainSeparator, bytes32 structHash) internal pure returns (bytes32 digest) {
assembly ("memory-safe") {
let ptr := mload(0x40)
mstore(ptr, hex"19_01")
mstore(add(ptr, 0x02), domainSeparator)
mstore(add(ptr, 0x22), structHash)
digest := keccak256(ptr, 0x42)
}
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (utils/Panic.sol)
pragma solidity ^0.8.20;
/**
* @dev Helper library for emitting standardized panic codes.
*
* ```solidity
* contract Example {
* using Panic for uint256;
*
* // Use any of the declared internal constants
* function foo() { Panic.GENERIC.panic(); }
*
* // Alternatively
* function foo() { Panic.panic(Panic.GENERIC); }
* }
* ```
*
* Follows the list from https://github.com/ethereum/solidity/blob/v0.8.24/libsolutil/ErrorCodes.h[libsolutil].
*
* _Available since v5.1._
*/
// slither-disable-next-line unused-state
library Panic {
/// @dev generic / unspecified error
uint256 internal constant GENERIC = 0x00;
/// @dev used by the assert() builtin
uint256 internal constant ASSERT = 0x01;
/// @dev arithmetic underflow or overflow
uint256 internal constant UNDER_OVERFLOW = 0x11;
/// @dev division or modulo by zero
uint256 internal constant DIVISION_BY_ZERO = 0x12;
/// @dev enum conversion error
uint256 internal constant ENUM_CONVERSION_ERROR = 0x21;
/// @dev invalid encoding in storage
uint256 internal constant STORAGE_ENCODING_ERROR = 0x22;
/// @dev empty array pop
uint256 internal constant EMPTY_ARRAY_POP = 0x31;
/// @dev array out of bounds access
uint256 internal constant ARRAY_OUT_OF_BOUNDS = 0x32;
/// @dev resource error (too large allocation or too large array)
uint256 internal constant RESOURCE_ERROR = 0x41;
/// @dev calling invalid internal function
uint256 internal constant INVALID_INTERNAL_FUNCTION = 0x51;
/// @dev Reverts with a panic code. Recommended to use with
/// the internal constants with predefined codes.
function panic(uint256 code) internal pure {
assembly ("memory-safe") {
mstore(0x00, 0x4e487b71)
mstore(0x20, code)
revert(0x1c, 0x24)
}
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (utils/math/SafeCast.sol)
// This file was procedurally generated from scripts/generate/templates/SafeCast.js.
pragma solidity ^0.8.20;
/**
* @dev Wrappers over Solidity's uintXX/intXX/bool casting operators with added overflow
* checks.
*
* Downcasting from uint256/int256 in Solidity does not revert on overflow. This can
* easily result in undesired exploitation or bugs, since developers usually
* assume that overflows raise errors. `SafeCast` restores this intuition by
* reverting the transaction when such an operation overflows.
*
* Using this library instead of the unchecked operations eliminates an entire
* class of bugs, so it's recommended to use it always.
*/
library SafeCast {
/**
* @dev Value doesn't fit in an uint of `bits` size.
*/
error SafeCastOverflowedUintDowncast(uint8 bits, uint256 value);
/**
* @dev An int value doesn't fit in an uint of `bits` size.
*/
error SafeCastOverflowedIntToUint(int256 value);
/**
* @dev Value doesn't fit in an int of `bits` size.
*/
error SafeCastOverflowedIntDowncast(uint8 bits, int256 value);
/**
* @dev An uint value doesn't fit in an int of `bits` size.
*/
error SafeCastOverflowedUintToInt(uint256 value);
/**
* @dev Returns the downcasted uint248 from uint256, reverting on
* overflow (when the input is greater than largest uint248).
*
* Counterpart to Solidity's `uint248` operator.
*
* Requirements:
*
* - input must fit into 248 bits
*/
function toUint248(uint256 value) internal pure returns (uint248) {
if (value > type(uint248).max) {
revert SafeCastOverflowedUintDowncast(248, value);
}
return uint248(value);
}
/**
* @dev Returns the downcasted uint240 from uint256, reverting on
* overflow (when the input is greater than largest uint240).
*
* Counterpart to Solidity's `uint240` operator.
*
* Requirements:
*
* - input must fit into 240 bits
*/
function toUint240(uint256 value) internal pure returns (uint240) {
if (value > type(uint240).max) {
revert SafeCastOverflowedUintDowncast(240, value);
}
return uint240(value);
}
/**
* @dev Returns the downcasted uint232 from uint256, reverting on
* overflow (when the input is greater than largest uint232).
*
* Counterpart to Solidity's `uint232` operator.
*
* Requirements:
*
* - input must fit into 232 bits
*/
function toUint232(uint256 value) internal pure returns (uint232) {
if (value > type(uint232).max) {
revert SafeCastOverflowedUintDowncast(232, value);
}
return uint232(value);
}
/**
* @dev Returns the downcasted uint224 from uint256, reverting on
* overflow (when the input is greater than largest uint224).
*
* Counterpart to Solidity's `uint224` operator.
*
* Requirements:
*
* - input must fit into 224 bits
*/
function toUint224(uint256 value) internal pure returns (uint224) {
if (value > type(uint224).max) {
revert SafeCastOverflowedUintDowncast(224, value);
}
return uint224(value);
}
/**
* @dev Returns the downcasted uint216 from uint256, reverting on
* overflow (when the input is greater than largest uint216).
*
* Counterpart to Solidity's `uint216` operator.
*
* Requirements:
*
* - input must fit into 216 bits
*/
function toUint216(uint256 value) internal pure returns (uint216) {
if (value > type(uint216).max) {
revert SafeCastOverflowedUintDowncast(216, value);
}
return uint216(value);
}
/**
* @dev Returns the downcasted uint208 from uint256, reverting on
* overflow (when the input is greater than largest uint208).
*
* Counterpart to Solidity's `uint208` operator.
*
* Requirements:
*
* - input must fit into 208 bits
*/
function toUint208(uint256 value) internal pure returns (uint208) {
if (value > type(uint208).max) {
revert SafeCastOverflowedUintDowncast(208, value);
}
return uint208(value);
}
/**
* @dev Returns the downcasted uint200 from uint256, reverting on
* overflow (when the input is greater than largest uint200).
*
* Counterpart to Solidity's `uint200` operator.
*
* Requirements:
*
* - input must fit into 200 bits
*/
function toUint200(uint256 value) internal pure returns (uint200) {
if (value > type(uint200).max) {
revert SafeCastOverflowedUintDowncast(200, value);
}
return uint200(value);
}
/**
* @dev Returns the downcasted uint192 from uint256, reverting on
* overflow (when the input is greater than largest uint192).
*
* Counterpart to Solidity's `uint192` operator.
*
* Requirements:
*
* - input must fit into 192 bits
*/
function toUint192(uint256 value) internal pure returns (uint192) {
if (value > type(uint192).max) {
revert SafeCastOverflowedUintDowncast(192, value);
}
return uint192(value);
}
/**
* @dev Returns the downcasted uint184 from uint256, reverting on
* overflow (when the input is greater than largest uint184).
*
* Counterpart to Solidity's `uint184` operator.
*
* Requirements:
*
* - input must fit into 184 bits
*/
function toUint184(uint256 value) internal pure returns (uint184) {
if (value > type(uint184).max) {
revert SafeCastOverflowedUintDowncast(184, value);
}
return uint184(value);
}
/**
* @dev Returns the downcasted uint176 from uint256, reverting on
* overflow (when the input is greater than largest uint176).
*
* Counterpart to Solidity's `uint176` operator.
*
* Requirements:
*
* - input must fit into 176 bits
*/
function toUint176(uint256 value) internal pure returns (uint176) {
if (value > type(uint176).max) {
revert SafeCastOverflowedUintDowncast(176, value);
}
return uint176(value);
}
/**
* @dev Returns the downcasted uint168 from uint256, reverting on
* overflow (when the input is greater than largest uint168).
*
* Counterpart to Solidity's `uint168` operator.
*
* Requirements:
*
* - input must fit into 168 bits
*/
function toUint168(uint256 value) internal pure returns (uint168) {
if (value > type(uint168).max) {
revert SafeCastOverflowedUintDowncast(168, value);
}
return uint168(value);
}
/**
* @dev Returns the downcasted uint160 from uint256, reverting on
* overflow (when the input is greater than largest uint160).
*
* Counterpart to Solidity's `uint160` operator.
*
* Requirements:
*
* - input must fit into 160 bits
*/
function toUint160(uint256 value) internal pure returns (uint160) {
if (value > type(uint160).max) {
revert SafeCastOverflowedUintDowncast(160, value);
}
return uint160(value);
}
/**
* @dev Returns the downcasted uint152 from uint256, reverting on
* overflow (when the input is greater than largest uint152).
*
* Counterpart to Solidity's `uint152` operator.
*
* Requirements:
*
* - input must fit into 152 bits
*/
function toUint152(uint256 value) internal pure returns (uint152) {
if (value > type(uint152).max) {
revert SafeCastOverflowedUintDowncast(152, value);
}
return uint152(value);
}
/**
* @dev Returns the downcasted uint144 from uint256, reverting on
* overflow (when the input is greater than largest uint144).
*
* Counterpart to Solidity's `uint144` operator.
*
* Requirements:
*
* - input must fit into 144 bits
*/
function toUint144(uint256 value) internal pure returns (uint144) {
if (value > type(uint144).max) {
revert SafeCastOverflowedUintDowncast(144, value);
}
return uint144(value);
}
/**
* @dev Returns the downcasted uint136 from uint256, reverting on
* overflow (when the input is greater than largest uint136).
*
* Counterpart to Solidity's `uint136` operator.
*
* Requirements:
*
* - input must fit into 136 bits
*/
function toUint136(uint256 value) internal pure returns (uint136) {
if (value > type(uint136).max) {
revert SafeCastOverflowedUintDowncast(136, value);
}
return uint136(value);
}
/**
* @dev Returns the downcasted uint128 from uint256, reverting on
* overflow (when the input is greater than largest uint128).
*
* Counterpart to Solidity's `uint128` operator.
*
* Requirements:
*
* - input must fit into 128 bits
*/
function toUint128(uint256 value) internal pure returns (uint128) {
if (value > type(uint128).max) {
revert SafeCastOverflowedUintDowncast(128, value);
}
return uint128(value);
}
/**
* @dev Returns the downcasted uint120 from uint256, reverting on
* overflow (when the input is greater than largest uint120).
*
* Counterpart to Solidity's `uint120` operator.
*
* Requirements:
*
* - input must fit into 120 bits
*/
function toUint120(uint256 value) internal pure returns (uint120) {
if (value > type(uint120).max) {
revert SafeCastOverflowedUintDowncast(120, value);
}
return uint120(value);
}
/**
* @dev Returns the downcasted uint112 from uint256, reverting on
* overflow (when the input is greater than largest uint112).
*
* Counterpart to Solidity's `uint112` operator.
*
* Requirements:
*
* - input must fit into 112 bits
*/
function toUint112(uint256 value) internal pure returns (uint112) {
if (value > type(uint112).max) {
revert SafeCastOverflowedUintDowncast(112, value);
}
return uint112(value);
}
/**
* @dev Returns the downcasted uint104 from uint256, reverting on
* overflow (when the input is greater than largest uint104).
*
* Counterpart to Solidity's `uint104` operator.
*
* Requirements:
*
* - input must fit into 104 bits
*/
function toUint104(uint256 value) internal pure returns (uint104) {
if (value > type(uint104).max) {
revert SafeCastOverflowedUintDowncast(104, value);
}
return uint104(value);
}
/**
* @dev Returns the downcasted uint96 from uint256, reverting on
* overflow (when the input is greater than largest uint96).
*
* Counterpart to Solidity's `uint96` operator.
*
* Requirements:
*
* - input must fit into 96 bits
*/
function toUint96(uint256 value) internal pure returns (uint96) {
if (value > type(uint96).max) {
revert SafeCastOverflowedUintDowncast(96, value);
}
return uint96(value);
}
/**
* @dev Returns the downcasted uint88 from uint256, reverting on
* overflow (when the input is greater than largest uint88).
*
* Counterpart to Solidity's `uint88` operator.
*
* Requirements:
*
* - input must fit into 88 bits
*/
function toUint88(uint256 value) internal pure returns (uint88) {
if (value > type(uint88).max) {
revert SafeCastOverflowedUintDowncast(88, value);
}
return uint88(value);
}
/**
* @dev Returns the downcasted uint80 from uint256, reverting on
* overflow (when the input is greater than largest uint80).
*
* Counterpart to Solidity's `uint80` operator.
*
* Requirements:
*
* - input must fit into 80 bits
*/
function toUint80(uint256 value) internal pure returns (uint80) {
if (value > type(uint80).max) {
revert SafeCastOverflowedUintDowncast(80, value);
}
return uint80(value);
}
/**
* @dev Returns the downcasted uint72 from uint256, reverting on
* overflow (when the input is greater than largest uint72).
*
* Counterpart to Solidity's `uint72` operator.
*
* Requirements:
*
* - input must fit into 72 bits
*/
function toUint72(uint256 value) internal pure returns (uint72) {
if (value > type(uint72).max) {
revert SafeCastOverflowedUintDowncast(72, value);
}
return uint72(value);
}
/**
* @dev Returns the downcasted uint64 from uint256, reverting on
* overflow (when the input is greater than largest uint64).
*
* Counterpart to Solidity's `uint64` operator.
*
* Requirements:
*
* - input must fit into 64 bits
*/
function toUint64(uint256 value) internal pure returns (uint64) {
if (value > type(uint64).max) {
revert SafeCastOverflowedUintDowncast(64, value);
}
return uint64(value);
}
/**
* @dev Returns the downcasted uint56 from uint256, reverting on
* overflow (when the input is greater than largest uint56).
*
* Counterpart to Solidity's `uint56` operator.
*
* Requirements:
*
* - input must fit into 56 bits
*/
function toUint56(uint256 value) internal pure returns (uint56) {
if (value > type(uint56).max) {
revert SafeCastOverflowedUintDowncast(56, value);
}
return uint56(value);
}
/**
* @dev Returns the downcasted uint48 from uint256, reverting on
* overflow (when the input is greater than largest uint48).
*
* Counterpart to Solidity's `uint48` operator.
*
* Requirements:
*
* - input must fit into 48 bits
*/
function toUint48(uint256 value) internal pure returns (uint48) {
if (value > type(uint48).max) {
revert SafeCastOverflowedUintDowncast(48, value);
}
return uint48(value);
}
/**
* @dev Returns the downcasted uint40 from uint256, reverting on
* overflow (when the input is greater than largest uint40).
*
* Counterpart to Solidity's `uint40` operator.
*
* Requirements:
*
* - input must fit into 40 bits
*/
function toUint40(uint256 value) internal pure returns (uint40) {
if (value > type(uint40).max) {
revert SafeCastOverflowedUintDowncast(40, value);
}
return uint40(value);
}
/**
* @dev Returns the downcasted uint32 from uint256, reverting on
* overflow (when the input is greater than largest uint32).
*
* Counterpart to Solidity's `uint32` operator.
*
* Requirements:
*
* - input must fit into 32 bits
*/
function toUint32(uint256 value) internal pure returns (uint32) {
if (value > type(uint32).max) {
revert SafeCastOverflowedUintDowncast(32, value);
}
return uint32(value);
}
/**
* @dev Returns the downcasted uint24 from uint256, reverting on
* overflow (when the input is greater than largest uint24).
*
* Counterpart to Solidity's `uint24` operator.
*
* Requirements:
*
* - input must fit into 24 bits
*/
function toUint24(uint256 value) internal pure returns (uint24) {
if (value > type(uint24).max) {
revert SafeCastOverflowedUintDowncast(24, value);
}
return uint24(value);
}
/**
* @dev Returns the downcasted uint16 from uint256, reverting on
* overflow (when the input is greater than largest uint16).
*
* Counterpart to Solidity's `uint16` operator.
*
* Requirements:
*
* - input must fit into 16 bits
*/
function toUint16(uint256 value) internal pure returns (uint16) {
if (value > type(uint16).max) {
revert SafeCastOverflowedUintDowncast(16, value);
}
return uint16(value);
}
/**
* @dev Returns the downcasted uint8 from uint256, reverting on
* overflow (when the input is greater than largest uint8).
*
* Counterpart to Solidity's `uint8` operator.
*
* Requirements:
*
* - input must fit into 8 bits
*/
function toUint8(uint256 value) internal pure returns (uint8) {
if (value > type(uint8).max) {
revert SafeCastOverflowedUintDowncast(8, value);
}
return uint8(value);
}
/**
* @dev Converts a signed int256 into an unsigned uint256.
*
* Requirements:
*
* - input must be greater than or equal to 0.
*/
function toUint256(int256 value) internal pure returns (uint256) {
if (value < 0) {
revert SafeCastOverflowedIntToUint(value);
}
return uint256(value);
}
/**
* @dev Returns the downcasted int248 from int256, reverting on
* overflow (when the input is less than smallest int248 or
* greater than largest int248).
*
* Counterpart to Solidity's `int248` operator.
*
* Requirements:
*
* - input must fit into 248 bits
*/
function toInt248(int256 value) internal pure returns (int248 downcasted) {
downcasted = int248(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(248, value);
}
}
/**
* @dev Returns the downcasted int240 from int256, reverting on
* overflow (when the input is less than smallest int240 or
* greater than largest int240).
*
* Counterpart to Solidity's `int240` operator.
*
* Requirements:
*
* - input must fit into 240 bits
*/
function toInt240(int256 value) internal pure returns (int240 downcasted) {
downcasted = int240(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(240, value);
}
}
/**
* @dev Returns the downcasted int232 from int256, reverting on
* overflow (when the input is less than smallest int232 or
* greater than largest int232).
*
* Counterpart to Solidity's `int232` operator.
*
* Requirements:
*
* - input must fit into 232 bits
*/
function toInt232(int256 value) internal pure returns (int232 downcasted) {
downcasted = int232(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(232, value);
}
}
/**
* @dev Returns the downcasted int224 from int256, reverting on
* overflow (when the input is less than smallest int224 or
* greater than largest int224).
*
* Counterpart to Solidity's `int224` operator.
*
* Requirements:
*
* - input must fit into 224 bits
*/
function toInt224(int256 value) internal pure returns (int224 downcasted) {
downcasted = int224(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(224, value);
}
}
/**
* @dev Returns the downcasted int216 from int256, reverting on
* overflow (when the input is less than smallest int216 or
* greater than largest int216).
*
* Counterpart to Solidity's `int216` operator.
*
* Requirements:
*
* - input must fit into 216 bits
*/
function toInt216(int256 value) internal pure returns (int216 downcasted) {
downcasted = int216(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(216, value);
}
}
/**
* @dev Returns the downcasted int208 from int256, reverting on
* overflow (when the input is less than smallest int208 or
* greater than largest int208).
*
* Counterpart to Solidity's `int208` operator.
*
* Requirements:
*
* - input must fit into 208 bits
*/
function toInt208(int256 value) internal pure returns (int208 downcasted) {
downcasted = int208(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(208, value);
}
}
/**
* @dev Returns the downcasted int200 from int256, reverting on
* overflow (when the input is less than smallest int200 or
* greater than largest int200).
*
* Counterpart to Solidity's `int200` operator.
*
* Requirements:
*
* - input must fit into 200 bits
*/
function toInt200(int256 value) internal pure returns (int200 downcasted) {
downcasted = int200(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(200, value);
}
}
/**
* @dev Returns the downcasted int192 from int256, reverting on
* overflow (when the input is less than smallest int192 or
* greater than largest int192).
*
* Counterpart to Solidity's `int192` operator.
*
* Requirements:
*
* - input must fit into 192 bits
*/
function toInt192(int256 value) internal pure returns (int192 downcasted) {
downcasted = int192(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(192, value);
}
}
/**
* @dev Returns the downcasted int184 from int256, reverting on
* overflow (when the input is less than smallest int184 or
* greater than largest int184).
*
* Counterpart to Solidity's `int184` operator.
*
* Requirements:
*
* - input must fit into 184 bits
*/
function toInt184(int256 value) internal pure returns (int184 downcasted) {
downcasted = int184(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(184, value);
}
}
/**
* @dev Returns the downcasted int176 from int256, reverting on
* overflow (when the input is less than smallest int176 or
* greater than largest int176).
*
* Counterpart to Solidity's `int176` operator.
*
* Requirements:
*
* - input must fit into 176 bits
*/
function toInt176(int256 value) internal pure returns (int176 downcasted) {
downcasted = int176(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(176, value);
}
}
/**
* @dev Returns the downcasted int168 from int256, reverting on
* overflow (when the input is less than smallest int168 or
* greater than largest int168).
*
* Counterpart to Solidity's `int168` operator.
*
* Requirements:
*
* - input must fit into 168 bits
*/
function toInt168(int256 value) internal pure returns (int168 downcasted) {
downcasted = int168(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(168, value);
}
}
/**
* @dev Returns the downcasted int160 from int256, reverting on
* overflow (when the input is less than smallest int160 or
* greater than largest int160).
*
* Counterpart to Solidity's `int160` operator.
*
* Requirements:
*
* - input must fit into 160 bits
*/
function toInt160(int256 value) internal pure returns (int160 downcasted) {
downcasted = int160(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(160, value);
}
}
/**
* @dev Returns the downcasted int152 from int256, reverting on
* overflow (when the input is less than smallest int152 or
* greater than largest int152).
*
* Counterpart to Solidity's `int152` operator.
*
* Requirements:
*
* - input must fit into 152 bits
*/
function toInt152(int256 value) internal pure returns (int152 downcasted) {
downcasted = int152(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(152, value);
}
}
/**
* @dev Returns the downcasted int144 from int256, reverting on
* overflow (when the input is less than smallest int144 or
* greater than largest int144).
*
* Counterpart to Solidity's `int144` operator.
*
* Requirements:
*
* - input must fit into 144 bits
*/
function toInt144(int256 value) internal pure returns (int144 downcasted) {
downcasted = int144(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(144, value);
}
}
/**
* @dev Returns the downcasted int136 from int256, reverting on
* overflow (when the input is less than smallest int136 or
* greater than largest int136).
*
* Counterpart to Solidity's `int136` operator.
*
* Requirements:
*
* - input must fit into 136 bits
*/
function toInt136(int256 value) internal pure returns (int136 downcasted) {
downcasted = int136(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(136, value);
}
}
/**
* @dev Returns the downcasted int128 from int256, reverting on
* overflow (when the input is less than smallest int128 or
* greater than largest int128).
*
* Counterpart to Solidity's `int128` operator.
*
* Requirements:
*
* - input must fit into 128 bits
*/
function toInt128(int256 value) internal pure returns (int128 downcasted) {
downcasted = int128(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(128, value);
}
}
/**
* @dev Returns the downcasted int120 from int256, reverting on
* overflow (when the input is less than smallest int120 or
* greater than largest int120).
*
* Counterpart to Solidity's `int120` operator.
*
* Requirements:
*
* - input must fit into 120 bits
*/
function toInt120(int256 value) internal pure returns (int120 downcasted) {
downcasted = int120(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(120, value);
}
}
/**
* @dev Returns the downcasted int112 from int256, reverting on
* overflow (when the input is less than smallest int112 or
* greater than largest int112).
*
* Counterpart to Solidity's `int112` operator.
*
* Requirements:
*
* - input must fit into 112 bits
*/
function toInt112(int256 value) internal pure returns (int112 downcasted) {
downcasted = int112(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(112, value);
}
}
/**
* @dev Returns the downcasted int104 from int256, reverting on
* overflow (when the input is less than smallest int104 or
* greater than largest int104).
*
* Counterpart to Solidity's `int104` operator.
*
* Requirements:
*
* - input must fit into 104 bits
*/
function toInt104(int256 value) internal pure returns (int104 downcasted) {
downcasted = int104(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(104, value);
}
}
/**
* @dev Returns the downcasted int96 from int256, reverting on
* overflow (when the input is less than smallest int96 or
* greater than largest int96).
*
* Counterpart to Solidity's `int96` operator.
*
* Requirements:
*
* - input must fit into 96 bits
*/
function toInt96(int256 value) internal pure returns (int96 downcasted) {
downcasted = int96(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(96, value);
}
}
/**
* @dev Returns the downcasted int88 from int256, reverting on
* overflow (when the input is less than smallest int88 or
* greater than largest int88).
*
* Counterpart to Solidity's `int88` operator.
*
* Requirements:
*
* - input must fit into 88 bits
*/
function toInt88(int256 value) internal pure returns (int88 downcasted) {
downcasted = int88(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(88, value);
}
}
/**
* @dev Returns the downcasted int80 from int256, reverting on
* overflow (when the input is less than smallest int80 or
* greater than largest int80).
*
* Counterpart to Solidity's `int80` operator.
*
* Requirements:
*
* - input must fit into 80 bits
*/
function toInt80(int256 value) internal pure returns (int80 downcasted) {
downcasted = int80(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(80, value);
}
}
/**
* @dev Returns the downcasted int72 from int256, reverting on
* overflow (when the input is less than smallest int72 or
* greater than largest int72).
*
* Counterpart to Solidity's `int72` operator.
*
* Requirements:
*
* - input must fit into 72 bits
*/
function toInt72(int256 value) internal pure returns (int72 downcasted) {
downcasted = int72(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(72, value);
}
}
/**
* @dev Returns the downcasted int64 from int256, reverting on
* overflow (when the input is less than smallest int64 or
* greater than largest int64).
*
* Counterpart to Solidity's `int64` operator.
*
* Requirements:
*
* - input must fit into 64 bits
*/
function toInt64(int256 value) internal pure returns (int64 downcasted) {
downcasted = int64(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(64, value);
}
}
/**
* @dev Returns the downcasted int56 from int256, reverting on
* overflow (when the input is less than smallest int56 or
* greater than largest int56).
*
* Counterpart to Solidity's `int56` operator.
*
* Requirements:
*
* - input must fit into 56 bits
*/
function toInt56(int256 value) internal pure returns (int56 downcasted) {
downcasted = int56(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(56, value);
}
}
/**
* @dev Returns the downcasted int48 from int256, reverting on
* overflow (when the input is less than smallest int48 or
* greater than largest int48).
*
* Counterpart to Solidity's `int48` operator.
*
* Requirements:
*
* - input must fit into 48 bits
*/
function toInt48(int256 value) internal pure returns (int48 downcasted) {
downcasted = int48(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(48, value);
}
}
/**
* @dev Returns the downcasted int40 from int256, reverting on
* overflow (when the input is less than smallest int40 or
* greater than largest int40).
*
* Counterpart to Solidity's `int40` operator.
*
* Requirements:
*
* - input must fit into 40 bits
*/
function toInt40(int256 value) internal pure returns (int40 downcasted) {
downcasted = int40(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(40, value);
}
}
/**
* @dev Returns the downcasted int32 from int256, reverting on
* overflow (when the input is less than smallest int32 or
* greater than largest int32).
*
* Counterpart to Solidity's `int32` operator.
*
* Requirements:
*
* - input must fit into 32 bits
*/
function toInt32(int256 value) internal pure returns (int32 downcasted) {
downcasted = int32(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(32, value);
}
}
/**
* @dev Returns the downcasted int24 from int256, reverting on
* overflow (when the input is less than smallest int24 or
* greater than largest int24).
*
* Counterpart to Solidity's `int24` operator.
*
* Requirements:
*
* - input must fit into 24 bits
*/
function toInt24(int256 value) internal pure returns (int24 downcasted) {
downcasted = int24(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(24, value);
}
}
/**
* @dev Returns the downcasted int16 from int256, reverting on
* overflow (when the input is less than smallest int16 or
* greater than largest int16).
*
* Counterpart to Solidity's `int16` operator.
*
* Requirements:
*
* - input must fit into 16 bits
*/
function toInt16(int256 value) internal pure returns (int16 downcasted) {
downcasted = int16(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(16, value);
}
}
/**
* @dev Returns the downcasted int8 from int256, reverting on
* overflow (when the input is less than smallest int8 or
* greater than largest int8).
*
* Counterpart to Solidity's `int8` operator.
*
* Requirements:
*
* - input must fit into 8 bits
*/
function toInt8(int256 value) internal pure returns (int8 downcasted) {
downcasted = int8(value);
if (downcasted != value) {
revert SafeCastOverflowedIntDowncast(8, value);
}
}
/**
* @dev Converts an unsigned uint256 into a signed int256.
*
* Requirements:
*
* - input must be less than or equal to maxInt256.
*/
function toInt256(uint256 value) internal pure returns (int256) {
// Note: Unsafe cast below is okay because `type(int256).max` is guaranteed to be positive
if (value > uint256(type(int256).max)) {
revert SafeCastOverflowedUintToInt(value);
}
return int256(value);
}
/**
* @dev Cast a boolean (false or true) to a uint256 (0 or 1) with no jump.
*/
function toUint(bool b) internal pure returns (uint256 u) {
assembly ("memory-safe") {
u := iszero(iszero(b))
}
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity >=0.6.2;
interface IUniswapV2Router01 {
function factory() external pure returns (address);
function WETH() external pure returns (address);
function addLiquidity(
address tokenA,
address tokenB,
uint256 amountADesired,
uint256 amountBDesired,
uint256 amountAMin,
uint256 amountBMin,
address to,
uint256 deadline
) external returns (uint256 amountA, uint256 amountB, uint256 liquidity);
function addLiquidityETH(
address token,
uint256 amountTokenDesired,
uint256 amountTokenMin,
uint256 amountETHMin,
address to,
uint256 deadline
) external payable returns (uint256 amountToken, uint256 amountETH, uint256 liquidity);
function removeLiquidity(
address tokenA,
address tokenB,
uint256 liquidity,
uint256 amountAMin,
uint256 amountBMin,
address to,
uint256 deadline
) external returns (uint256 amountA, uint256 amountB);
function removeLiquidityETH(
address token,
uint256 liquidity,
uint256 amountTokenMin,
uint256 amountETHMin,
address to,
uint256 deadline
) external returns (uint256 amountToken, uint256 amountETH);
function removeLiquidityWithPermit(
address tokenA,
address tokenB,
uint256 liquidity,
uint256 amountAMin,
uint256 amountBMin,
address to,
uint256 deadline,
bool approveMax,
uint8 v,
bytes32 r,
bytes32 s
) external returns (uint256 amountA, uint256 amountB);
function removeLiquidityETHWithPermit(
address token,
uint256 liquidity,
uint256 amountTokenMin,
uint256 amountETHMin,
address to,
uint256 deadline,
bool approveMax,
uint8 v,
bytes32 r,
bytes32 s
) external returns (uint256 amountToken, uint256 amountETH);
function swapExactTokensForTokens(
uint256 amountIn,
uint256 amountOutMin,
address[] calldata path,
address to,
uint256 deadline
) external returns (uint256[] memory amounts);
function swapTokensForExactTokens(
uint256 amountOut,
uint256 amountInMax,
address[] calldata path,
address to,
uint256 deadline
) external returns (uint256[] memory amounts);
function swapExactETHForTokens(uint256 amountOutMin, address[] calldata path, address to, uint256 deadline)
external
payable
returns (uint256[] memory amounts);
function swapTokensForExactETH(
uint256 amountOut,
uint256 amountInMax,
address[] calldata path,
address to,
uint256 deadline
) external returns (uint256[] memory amounts);
function swapExactTokensForETH(
uint256 amountIn,
uint256 amountOutMin,
address[] calldata path,
address to,
uint256 deadline
) external returns (uint256[] memory amounts);
function swapETHForExactTokens(uint256 amountOut, address[] calldata path, address to, uint256 deadline)
external
payable
returns (uint256[] memory amounts);
function quote(uint256 amountA, uint256 reserveA, uint256 reserveB) external pure returns (uint256 amountB);
function getAmountOut(uint256 amountIn, uint256 reserveIn, uint256 reserveOut)
external
pure
returns (uint256 amountOut);
function getAmountIn(uint256 amountOut, uint256 reserveIn, uint256 reserveOut)
external
pure
returns (uint256 amountIn);
function getAmountsOut(uint256 amountIn, address[] calldata path)
external
view
returns (uint256[] memory amounts);
function getAmountsIn(uint256 amountOut, address[] calldata path)
external
view
returns (uint256[] memory amounts);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: GPL-2.0-or-later
pragma solidity >=0.5.0;
/// @title Callback for IUniswapV3PoolActions#swap
/// @notice Any contract that calls IUniswapV3PoolActions#swap must implement this interface
interface IUniswapV3SwapCallback {
/// @notice Called to `msg.sender` after executing a swap via IUniswapV3Pool#swap.
/// @dev In the implementation you must pay the pool tokens owed for the swap.
/// The caller of this method must be checked to be a UniswapV3Pool deployed by the canonical UniswapV3Factory.
/// amount0Delta and amount1Delta can both be 0 if no tokens were swapped.
/// @param amount0Delta The amount of token0 that was sent (negative) or must be received (positive) by the pool by
/// the end of the swap. If positive, the callback must send that amount of token0 to the pool.
/// @param amount1Delta The amount of token1 that was sent (negative) or must be received (positive) by the pool by
/// the end of the swap. If positive, the callback must send that amount of token1 to the pool.
/// @param data Any data passed through by the caller via the IUniswapV3PoolActions#swap call
function uniswapV3SwapCallback(int256 amount0Delta, int256 amount1Delta, bytes calldata data) external;
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.3.0) (access/IAccessControl.sol)
pragma solidity ^0.8.20;
/**
* @dev External interface of AccessControl declared to support ERC-165 detection.
*/
interface IAccessControl {
/**
* @dev The `account` is missing a role.
*/
error AccessControlUnauthorizedAccount(address account, bytes32 neededRole);
/**
* @dev The caller of a function is not the expected one.
*
* NOTE: Don't confuse with {AccessControlUnauthorizedAccount}.
*/
error AccessControlBadConfirmation();
/**
* @dev Emitted when `newAdminRole` is set as ``role``'s admin role, replacing `previousAdminRole`
*
* `DEFAULT_ADMIN_ROLE` is the starting admin for all roles, despite
* {RoleAdminChanged} not being emitted to signal this.
*/
event RoleAdminChanged(bytes32 indexed role, bytes32 indexed previousAdminRole, bytes32 indexed newAdminRole);
/**
* @dev Emitted when `account` is granted `role`.
*
* `sender` is the account that originated the contract call. This account bears the admin role (for the granted role).
* Expected in cases where the role was granted using the internal {AccessControl-_grantRole}.
*/
event RoleGranted(bytes32 indexed role, address indexed account, address indexed sender);
/**
* @dev Emitted when `account` is revoked `role`.
*
* `sender` is the account that originated the contract call:
* - if using `revokeRole`, it is the admin role bearer
* - if using `renounceRole`, it is the role bearer (i.e. `account`)
*/
event RoleRevoked(bytes32 indexed role, address indexed account, address indexed sender);
/**
* @dev Returns `true` if `account` has been granted `role`.
*/
function hasRole(bytes32 role, address account) external view returns (bool);
/**
* @dev Returns the admin role that controls `role`. See {grantRole} and
* {revokeRole}.
*
* To change a role's admin, use {AccessControl-_setRoleAdmin}.
*/
function getRoleAdmin(bytes32 role) external view returns (bytes32);
/**
* @dev Grants `role` to `account`.
*
* If `account` had not been already granted `role`, emits a {RoleGranted}
* event.
*
* Requirements:
*
* - the caller must have ``role``'s admin role.
*/
function grantRole(bytes32 role, address account) external;
/**
* @dev Revokes `role` from `account`.
*
* If `account` had been granted `role`, emits a {RoleRevoked} event.
*
* Requirements:
*
* - the caller must have ``role``'s admin role.
*/
function revokeRole(bytes32 role, address account) external;
/**
* @dev Revokes `role` from the calling account.
*
* Roles are often managed via {grantRole} and {revokeRole}: this function's
* purpose is to provide a mechanism for accounts to lose their privileges
* if they are compromised (such as when a trusted device is misplaced).
*
* If the calling account had been granted `role`, emits a {RoleRevoked}
* event.
*
* Requirements:
*
* - the caller must be `callerConfirmation`.
*/
function renounceRole(bytes32 role, address callerConfirmation) external;
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity >=0.7.5;
pragma abicoder v2;
import "./IUniswapV3SwapCallback.sol";
/// @title Router token swapping functionality
/// @notice Functions for swapping tokens via Uniswap V3
interface ISwapRouterBase is IUniswapV3SwapCallback {
struct ExactInputSingleParams {
address tokenIn;
address tokenOut;
uint24 fee;
address recipient;
uint256 amountIn;
uint256 amountOutMinimum;
uint160 sqrtPriceLimitX96;
}
/// @notice Swaps `amountIn` of one token for as much as possible of another token
/// @param params The parameters necessary for the swap, encoded as `ExactInputSingleParams` in calldata
/// @return amountOut The amount of the received token
function exactInputSingle(ExactInputSingleParams calldata params) external payable returns (uint256 amountOut);
struct ExactInputParams {
bytes path;
address recipient;
uint256 amountIn;
uint256 amountOutMinimum;
}
/// @notice Swaps `amountIn` of one token for as much as possible of another along the specified path
/// @param params The parameters necessary for the multi-hop swap, encoded as `ExactInputParams` in calldata
/// @return amountOut The amount of the received token
function exactInput(ExactInputParams calldata params) external payable returns (uint256 amountOut);
struct ExactOutputSingleParams {
address tokenIn;
address tokenOut;
uint24 fee;
address recipient;
uint256 amountOut;
uint256 amountInMaximum;
uint160 sqrtPriceLimitX96;
}
/// @notice Swaps as little as possible of one token for `amountOut` of another token
/// @param params The parameters necessary for the swap, encoded as `ExactOutputSingleParams` in calldata
/// @return amountIn The amount of the input token
function exactOutputSingle(ExactOutputSingleParams calldata params) external payable returns (uint256 amountIn);
struct ExactOutputParams {
bytes path;
address recipient;
uint256 amountOut;
uint256 amountInMaximum;
}
/// @notice Swaps as little as possible of one token for `amountOut` of another along the specified path (reversed)
/// @param params The parameters necessary for the multi-hop swap, encoded as `ExactOutputParams` in calldata
/// @return amountIn The amount of the input token
function exactOutput(ExactOutputParams calldata params) external payable returns (uint256 amountIn);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: GPL-2.0-or-later
pragma solidity >=0.7.5;
pragma abicoder v2;
import {IAlgebraSwapCallback} from "./IAlgebraSwapCallback.sol";
/// @title Router token swapping functionality
/// @notice Functions for swapping tokens via Algebra
/// @dev Credit to Uniswap Labs under GPL-2.0-or-later license:
/// https://github.com/Uniswap/v3-periphery
interface IQuickswapV3Router is IAlgebraSwapCallback {
struct ExactInputSingleParams {
address tokenIn;
address tokenOut;
address recipient;
uint256 deadline;
uint256 amountIn;
uint256 amountOutMinimum;
uint160 limitSqrtPrice;
}
/// @notice Swaps `amountIn` of one token for as much as possible of another token
/// @param params The parameters necessary for the swap, encoded as `ExactInputSingleParams` in calldata
/// @return amountOut The amount of the received token
function exactInputSingle(ExactInputSingleParams calldata params) external payable returns (uint256 amountOut);
struct ExactInputParams {
bytes path;
address recipient;
uint256 deadline;
uint256 amountIn;
uint256 amountOutMinimum;
}
/// @notice Swaps `amountIn` of one token for as much as possible of another along the specified path
/// @param params The parameters necessary for the multi-hop swap, encoded as `ExactInputParams` in calldata
/// @return amountOut The amount of the received token
function exactInput(ExactInputParams calldata params) external payable returns (uint256 amountOut);
struct ExactOutputSingleParams {
address tokenIn;
address tokenOut;
uint24 fee;
address recipient;
uint256 deadline;
uint256 amountOut;
uint256 amountInMaximum;
uint160 limitSqrtPrice;
}
/// @notice Swaps as little as possible of one token for `amountOut` of another token
/// @param params The parameters necessary for the swap, encoded as `ExactOutputSingleParams` in calldata
/// @return amountIn The amount of the input token
function exactOutputSingle(ExactOutputSingleParams calldata params) external payable returns (uint256 amountIn);
struct ExactOutputParams {
bytes path;
address recipient;
uint256 deadline;
uint256 amountOut;
uint256 amountInMaximum;
}
/// @notice Swaps as little as possible of one token for `amountOut` of another along the specified path (reversed)
/// @param params The parameters necessary for the multi-hop swap, encoded as `ExactOutputParams` in calldata
/// @return amountIn The amount of the input token
function exactOutput(ExactOutputParams calldata params) external payable returns (uint256 amountIn);
/// @notice Swaps `amountIn` of one token for as much as possible of another along the specified path
/// @dev Unlike standard swaps, handles transferring from user before the actual swap.
/// @param params The parameters necessary for the multi-hop swap, encoded as `ExactInputParams` in calldata
/// @return amountOut The amount of the received token
function exactInputSingleSupportingFeeOnTransferTokens(ExactInputSingleParams calldata params)
external
returns (uint256 amountOut);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: UNLICENSED
// All rights reserved.
// This source code is provided for reference purposes only.
// You may not copy, reproduce, distribute, modify, deploy, or otherwise use this code in whole or in part without explicit written permission from the author.
// (c) 2025 fundmera.com
// https://github.com/merafund
pragma solidity ^0.8.10;
/**
* @title IPriceOracleGetter
* @notice Interface for the Mera price oracle getter.
*/
interface IPriceOracleGetter {
/**
* @notice Returns the asset price in the base currency
* @param asset The address of the asset
* @return The price of the asset
*/
function getAssetPrice(address asset) external view returns (uint256);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (proxy/beacon/IBeacon.sol)
pragma solidity ^0.8.20;
/**
* @dev This is the interface that {BeaconProxy} expects of its beacon.
*/
interface IBeacon {
/**
* @dev Must return an address that can be used as a delegate call target.
*
* {UpgradeableBeacon} will check that this address is a contract.
*/
function implementation() external view returns (address);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (interfaces/IERC1967.sol)
pragma solidity ^0.8.20;
/**
* @dev ERC-1967: Proxy Storage Slots. This interface contains the events defined in the ERC.
*/
interface IERC1967 {
/**
* @dev Emitted when the implementation is upgraded.
*/
event Upgraded(address indexed implementation);
/**
* @dev Emitted when the admin account has changed.
*/
event AdminChanged(address previousAdmin, address newAdmin);
/**
* @dev Emitted when the beacon is changed.
*/
event BeaconUpgraded(address indexed beacon);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.2.0) (utils/Address.sol)
pragma solidity ^0.8.20;
import {Errors} from "./Errors.sol";
/**
* @dev Collection of functions related to the address type
*/
library Address {
/**
* @dev There's no code at `target` (it is not a contract).
*/
error AddressEmptyCode(address target);
/**
* @dev Replacement for Solidity's `transfer`: sends `amount` wei to
* `recipient`, forwarding all available gas and reverting on errors.
*
* https://eips.ethereum.org/EIPS/eip-1884[EIP1884] increases the gas cost
* of certain opcodes, possibly making contracts go over the 2300 gas limit
* imposed by `transfer`, making them unable to receive funds via
* `transfer`. {sendValue} removes this limitation.
*
* https://consensys.net/diligence/blog/2019/09/stop-using-soliditys-transfer-now/[Learn more].
*
* IMPORTANT: because control is transferred to `recipient`, care must be
* taken to not create reentrancy vulnerabilities. Consider using
* {ReentrancyGuard} or the
* https://solidity.readthedocs.io/en/v0.8.20/security-considerations.html#use-the-checks-effects-interactions-pattern[checks-effects-interactions pattern].
*/
function sendValue(address payable recipient, uint256 amount) internal {
if (address(this).balance < amount) {
revert Errors.InsufficientBalance(address(this).balance, amount);
}
(bool success, bytes memory returndata) = recipient.call{value: amount}("");
if (!success) {
_revert(returndata);
}
}
/**
* @dev Performs a Solidity function call using a low level `call`. A
* plain `call` is an unsafe replacement for a function call: use this
* function instead.
*
* If `target` reverts with a revert reason or custom error, it is bubbled
* up by this function (like regular Solidity function calls). However, if
* the call reverted with no returned reason, this function reverts with a
* {Errors.FailedCall} error.
*
* Returns the raw returned data. To convert to the expected return value,
* use https://solidity.readthedocs.io/en/latest/units-and-global-variables.html?highlight=abi.decode#abi-encoding-and-decoding-functions[`abi.decode`].
*
* Requirements:
*
* - `target` must be a contract.
* - calling `target` with `data` must not revert.
*/
function functionCall(address target, bytes memory data) internal returns (bytes memory) {
return functionCallWithValue(target, data, 0);
}
/**
* @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`],
* but also transferring `value` wei to `target`.
*
* Requirements:
*
* - the calling contract must have an ETH balance of at least `value`.
* - the called Solidity function must be `payable`.
*/
function functionCallWithValue(address target, bytes memory data, uint256 value) internal returns (bytes memory) {
if (address(this).balance < value) {
revert Errors.InsufficientBalance(address(this).balance, value);
}
(bool success, bytes memory returndata) = target.call{value: value}(data);
return verifyCallResultFromTarget(target, success, returndata);
}
/**
* @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`],
* but performing a static call.
*/
function functionStaticCall(address target, bytes memory data) internal view returns (bytes memory) {
(bool success, bytes memory returndata) = target.staticcall(data);
return verifyCallResultFromTarget(target, success, returndata);
}
/**
* @dev Same as {xref-Address-functionCall-address-bytes-}[`functionCall`],
* but performing a delegate call.
*/
function functionDelegateCall(address target, bytes memory data) internal returns (bytes memory) {
(bool success, bytes memory returndata) = target.delegatecall(data);
return verifyCallResultFromTarget(target, success, returndata);
}
/**
* @dev Tool to verify that a low level call to smart-contract was successful, and reverts if the target
* was not a contract or bubbling up the revert reason (falling back to {Errors.FailedCall}) in case
* of an unsuccessful call.
*/
function verifyCallResultFromTarget(
address target,
bool success,
bytes memory returndata
) internal view returns (bytes memory) {
if (!success) {
_revert(returndata);
} else {
// only check if target is a contract if the call was successful and the return data is empty
// otherwise we already know that it was a contract
if (returndata.length == 0 && target.code.length == 0) {
revert AddressEmptyCode(target);
}
return returndata;
}
}
/**
* @dev Tool to verify that a low level call was successful, and reverts if it wasn't, either by bubbling the
* revert reason or with a default {Errors.FailedCall} error.
*/
function verifyCallResult(bool success, bytes memory returndata) internal pure returns (bytes memory) {
if (!success) {
_revert(returndata);
} else {
return returndata;
}
}
/**
* @dev Reverts with returndata if present. Otherwise reverts with {Errors.FailedCall}.
*/
function _revert(bytes memory returndata) private pure {
// Look for revert reason and bubble it up if present
if (returndata.length > 0) {
// The easiest way to bubble the revert reason is using memory via assembly
assembly ("memory-safe") {
let returndata_size := mload(returndata)
revert(add(32, returndata), returndata_size)
}
} else {
revert Errors.FailedCall();
}
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (utils/StorageSlot.sol)
// This file was procedurally generated from scripts/generate/templates/StorageSlot.js.
pragma solidity ^0.8.20;
/**
* @dev Library for reading and writing primitive types to specific storage slots.
*
* Storage slots are often used to avoid storage conflict when dealing with upgradeable contracts.
* This library helps with reading and writing to such slots without the need for inline assembly.
*
* The functions in this library return Slot structs that contain a `value` member that can be used to read or write.
*
* Example usage to set ERC-1967 implementation slot:
* ```solidity
* contract ERC1967 {
* // Define the slot. Alternatively, use the SlotDerivation library to derive the slot.
* bytes32 internal constant _IMPLEMENTATION_SLOT = 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc;
*
* function _getImplementation() internal view returns (address) {
* return StorageSlot.getAddressSlot(_IMPLEMENTATION_SLOT).value;
* }
*
* function _setImplementation(address newImplementation) internal {
* require(newImplementation.code.length > 0);
* StorageSlot.getAddressSlot(_IMPLEMENTATION_SLOT).value = newImplementation;
* }
* }
* ```
*
* TIP: Consider using this library along with {SlotDerivation}.
*/
library StorageSlot {
struct AddressSlot {
address value;
}
struct BooleanSlot {
bool value;
}
struct Bytes32Slot {
bytes32 value;
}
struct Uint256Slot {
uint256 value;
}
struct Int256Slot {
int256 value;
}
struct StringSlot {
string value;
}
struct BytesSlot {
bytes value;
}
/**
* @dev Returns an `AddressSlot` with member `value` located at `slot`.
*/
function getAddressSlot(bytes32 slot) internal pure returns (AddressSlot storage r) {
assembly ("memory-safe") {
r.slot := slot
}
}
/**
* @dev Returns a `BooleanSlot` with member `value` located at `slot`.
*/
function getBooleanSlot(bytes32 slot) internal pure returns (BooleanSlot storage r) {
assembly ("memory-safe") {
r.slot := slot
}
}
/**
* @dev Returns a `Bytes32Slot` with member `value` located at `slot`.
*/
function getBytes32Slot(bytes32 slot) internal pure returns (Bytes32Slot storage r) {
assembly ("memory-safe") {
r.slot := slot
}
}
/**
* @dev Returns a `Uint256Slot` with member `value` located at `slot`.
*/
function getUint256Slot(bytes32 slot) internal pure returns (Uint256Slot storage r) {
assembly ("memory-safe") {
r.slot := slot
}
}
/**
* @dev Returns a `Int256Slot` with member `value` located at `slot`.
*/
function getInt256Slot(bytes32 slot) internal pure returns (Int256Slot storage r) {
assembly ("memory-safe") {
r.slot := slot
}
}
/**
* @dev Returns a `StringSlot` with member `value` located at `slot`.
*/
function getStringSlot(bytes32 slot) internal pure returns (StringSlot storage r) {
assembly ("memory-safe") {
r.slot := slot
}
}
/**
* @dev Returns an `StringSlot` representation of the string storage pointer `store`.
*/
function getStringSlot(string storage store) internal pure returns (StringSlot storage r) {
assembly ("memory-safe") {
r.slot := store.slot
}
}
/**
* @dev Returns a `BytesSlot` with member `value` located at `slot`.
*/
function getBytesSlot(bytes32 slot) internal pure returns (BytesSlot storage r) {
assembly ("memory-safe") {
r.slot := slot
}
}
/**
* @dev Returns an `BytesSlot` representation of the bytes storage pointer `store`.
*/
function getBytesSlot(bytes storage store) internal pure returns (BytesSlot storage r) {
assembly ("memory-safe") {
r.slot := store.slot
}
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (utils/introspection/IERC165.sol)
pragma solidity ^0.8.20;
/**
* @dev Interface of the ERC-165 standard, as defined in the
* https://eips.ethereum.org/EIPS/eip-165[ERC].
*
* Implementers can declare support of contract interfaces, which can then be
* queried by others ({ERC165Checker}).
*
* For an implementation, see {ERC165}.
*/
interface IERC165 {
/**
* @dev Returns true if this contract implements the interface defined by
* `interfaceId`. See the corresponding
* https://eips.ethereum.org/EIPS/eip-165#how-interfaces-are-identified[ERC section]
* to learn more about how these ids are created.
*
* This function call must use less than 30 000 gas.
*/
function supportsInterface(bytes4 interfaceId) external view returns (bool);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (interfaces/IERC20.sol)
pragma solidity ^0.8.20;
import {IERC20} from "../token/ERC20/IERC20.sol"; <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (interfaces/IERC165.sol)
pragma solidity ^0.8.20;
import {IERC165} from "../utils/introspection/IERC165.sol"; <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.3.0) (utils/Strings.sol)
pragma solidity ^0.8.20;
import {Math} from "./math/Math.sol";
import {SafeCast} from "./math/SafeCast.sol";
import {SignedMath} from "./math/SignedMath.sol";
/**
* @dev String operations.
*/
library Strings {
using SafeCast for *;
bytes16 private constant HEX_DIGITS = "0123456789abcdef";
uint8 private constant ADDRESS_LENGTH = 20;
uint256 private constant SPECIAL_CHARS_LOOKUP =
(1 << 0x08) | // backspace
(1 << 0x09) | // tab
(1 << 0x0a) | // newline
(1 << 0x0c) | // form feed
(1 << 0x0d) | // carriage return
(1 << 0x22) | // double quote
(1 << 0x5c); // backslash
/**
* @dev The `value` string doesn't fit in the specified `length`.
*/
error StringsInsufficientHexLength(uint256 value, uint256 length);
/**
* @dev The string being parsed contains characters that are not in scope of the given base.
*/
error StringsInvalidChar();
/**
* @dev The string being parsed is not a properly formatted address.
*/
error StringsInvalidAddressFormat();
/**
* @dev Converts a `uint256` to its ASCII `string` decimal representation.
*/
function toString(uint256 value) internal pure returns (string memory) {
unchecked {
uint256 length = Math.log10(value) + 1;
string memory buffer = new string(length);
uint256 ptr;
assembly ("memory-safe") {
ptr := add(buffer, add(32, length))
}
while (true) {
ptr--;
assembly ("memory-safe") {
mstore8(ptr, byte(mod(value, 10), HEX_DIGITS))
}
value /= 10;
if (value == 0) break;
}
return buffer;
}
}
/**
* @dev Converts a `int256` to its ASCII `string` decimal representation.
*/
function toStringSigned(int256 value) internal pure returns (string memory) {
return string.concat(value < 0 ? "-" : "", toString(SignedMath.abs(value)));
}
/**
* @dev Converts a `uint256` to its ASCII `string` hexadecimal representation.
*/
function toHexString(uint256 value) internal pure returns (string memory) {
unchecked {
return toHexString(value, Math.log256(value) + 1);
}
}
/**
* @dev Converts a `uint256` to its ASCII `string` hexadecimal representation with fixed length.
*/
function toHexString(uint256 value, uint256 length) internal pure returns (string memory) {
uint256 localValue = value;
bytes memory buffer = new bytes(2 * length + 2);
buffer[0] = "0";
buffer[1] = "x";
for (uint256 i = 2 * length + 1; i > 1; --i) {
buffer[i] = HEX_DIGITS[localValue & 0xf];
localValue >>= 4;
}
if (localValue != 0) {
revert StringsInsufficientHexLength(value, length);
}
return string(buffer);
}
/**
* @dev Converts an `address` with fixed length of 20 bytes to its not checksummed ASCII `string` hexadecimal
* representation.
*/
function toHexString(address addr) internal pure returns (string memory) {
return toHexString(uint256(uint160(addr)), ADDRESS_LENGTH);
}
/**
* @dev Converts an `address` with fixed length of 20 bytes to its checksummed ASCII `string` hexadecimal
* representation, according to EIP-55.
*/
function toChecksumHexString(address addr) internal pure returns (string memory) {
bytes memory buffer = bytes(toHexString(addr));
// hash the hex part of buffer (skip length + 2 bytes, length 40)
uint256 hashValue;
assembly ("memory-safe") {
hashValue := shr(96, keccak256(add(buffer, 0x22), 40))
}
for (uint256 i = 41; i > 1; --i) {
// possible values for buffer[i] are 48 (0) to 57 (9) and 97 (a) to 102 (f)
if (hashValue & 0xf > 7 && uint8(buffer[i]) > 96) {
// case shift by xoring with 0x20
buffer[i] ^= 0x20;
}
hashValue >>= 4;
}
return string(buffer);
}
/**
* @dev Returns true if the two strings are equal.
*/
function equal(string memory a, string memory b) internal pure returns (bool) {
return bytes(a).length == bytes(b).length && keccak256(bytes(a)) == keccak256(bytes(b));
}
/**
* @dev Parse a decimal string and returns the value as a `uint256`.
*
* Requirements:
* - The string must be formatted as `[0-9]*`
* - The result must fit into an `uint256` type
*/
function parseUint(string memory input) internal pure returns (uint256) {
return parseUint(input, 0, bytes(input).length);
}
/**
* @dev Variant of {parseUint-string} that parses a substring of `input` located between position `begin` (included) and
* `end` (excluded).
*
* Requirements:
* - The substring must be formatted as `[0-9]*`
* - The result must fit into an `uint256` type
*/
function parseUint(string memory input, uint256 begin, uint256 end) internal pure returns (uint256) {
(bool success, uint256 value) = tryParseUint(input, begin, end);
if (!success) revert StringsInvalidChar();
return value;
}
/**
* @dev Variant of {parseUint-string} that returns false if the parsing fails because of an invalid character.
*
* NOTE: This function will revert if the result does not fit in a `uint256`.
*/
function tryParseUint(string memory input) internal pure returns (bool success, uint256 value) {
return _tryParseUintUncheckedBounds(input, 0, bytes(input).length);
}
/**
* @dev Variant of {parseUint-string-uint256-uint256} that returns false if the parsing fails because of an invalid
* character.
*
* NOTE: This function will revert if the result does not fit in a `uint256`.
*/
function tryParseUint(
string memory input,
uint256 begin,
uint256 end
) internal pure returns (bool success, uint256 value) {
if (end > bytes(input).length || begin > end) return (false, 0);
return _tryParseUintUncheckedBounds(input, begin, end);
}
/**
* @dev Implementation of {tryParseUint-string-uint256-uint256} that does not check bounds. Caller should make sure that
* `begin <= end <= input.length`. Other inputs would result in undefined behavior.
*/
function _tryParseUintUncheckedBounds(
string memory input,
uint256 begin,
uint256 end
) private pure returns (bool success, uint256 value) {
bytes memory buffer = bytes(input);
uint256 result = 0;
for (uint256 i = begin; i < end; ++i) {
uint8 chr = _tryParseChr(bytes1(_unsafeReadBytesOffset(buffer, i)));
if (chr > 9) return (false, 0);
result *= 10;
result += chr;
}
return (true, result);
}
/**
* @dev Parse a decimal string and returns the value as a `int256`.
*
* Requirements:
* - The string must be formatted as `[-+]?[0-9]*`
* - The result must fit in an `int256` type.
*/
function parseInt(string memory input) internal pure returns (int256) {
return parseInt(input, 0, bytes(input).length);
}
/**
* @dev Variant of {parseInt-string} that parses a substring of `input` located between position `begin` (included) and
* `end` (excluded).
*
* Requirements:
* - The substring must be formatted as `[-+]?[0-9]*`
* - The result must fit in an `int256` type.
*/
function parseInt(string memory input, uint256 begin, uint256 end) internal pure returns (int256) {
(bool success, int256 value) = tryParseInt(input, begin, end);
if (!success) revert StringsInvalidChar();
return value;
}
/**
* @dev Variant of {parseInt-string} that returns false if the parsing fails because of an invalid character or if
* the result does not fit in a `int256`.
*
* NOTE: This function will revert if the absolute value of the result does not fit in a `uint256`.
*/
function tryParseInt(string memory input) internal pure returns (bool success, int256 value) {
return _tryParseIntUncheckedBounds(input, 0, bytes(input).length);
}
uint256 private constant ABS_MIN_INT256 = 2 ** 255;
/**
* @dev Variant of {parseInt-string-uint256-uint256} that returns false if the parsing fails because of an invalid
* character or if the result does not fit in a `int256`.
*
* NOTE: This function will revert if the absolute value of the result does not fit in a `uint256`.
*/
function tryParseInt(
string memory input,
uint256 begin,
uint256 end
) internal pure returns (bool success, int256 value) {
if (end > bytes(input).length || begin > end) return (false, 0);
return _tryParseIntUncheckedBounds(input, begin, end);
}
/**
* @dev Implementation of {tryParseInt-string-uint256-uint256} that does not check bounds. Caller should make sure that
* `begin <= end <= input.length`. Other inputs would result in undefined behavior.
*/
function _tryParseIntUncheckedBounds(
string memory input,
uint256 begin,
uint256 end
) private pure returns (bool success, int256 value) {
bytes memory buffer = bytes(input);
// Check presence of a negative sign.
bytes1 sign = begin == end ? bytes1(0) : bytes1(_unsafeReadBytesOffset(buffer, begin)); // don't do out-of-bound (possibly unsafe) read if sub-string is empty
bool positiveSign = sign == bytes1("+");
bool negativeSign = sign == bytes1("-");
uint256 offset = (positiveSign || negativeSign).toUint();
(bool absSuccess, uint256 absValue) = tryParseUint(input, begin + offset, end);
if (absSuccess && absValue < ABS_MIN_INT256) {
return (true, negativeSign ? -int256(absValue) : int256(absValue));
} else if (absSuccess && negativeSign && absValue == ABS_MIN_INT256) {
return (true, type(int256).min);
} else return (false, 0);
}
/**
* @dev Parse a hexadecimal string (with or without "0x" prefix), and returns the value as a `uint256`.
*
* Requirements:
* - The string must be formatted as `(0x)?[0-9a-fA-F]*`
* - The result must fit in an `uint256` type.
*/
function parseHexUint(string memory input) internal pure returns (uint256) {
return parseHexUint(input, 0, bytes(input).length);
}
/**
* @dev Variant of {parseHexUint-string} that parses a substring of `input` located between position `begin` (included) and
* `end` (excluded).
*
* Requirements:
* - The substring must be formatted as `(0x)?[0-9a-fA-F]*`
* - The result must fit in an `uint256` type.
*/
function parseHexUint(string memory input, uint256 begin, uint256 end) internal pure returns (uint256) {
(bool success, uint256 value) = tryParseHexUint(input, begin, end);
if (!success) revert StringsInvalidChar();
return value;
}
/**
* @dev Variant of {parseHexUint-string} that returns false if the parsing fails because of an invalid character.
*
* NOTE: This function will revert if the result does not fit in a `uint256`.
*/
function tryParseHexUint(string memory input) internal pure returns (bool success, uint256 value) {
return _tryParseHexUintUncheckedBounds(input, 0, bytes(input).length);
}
/**
* @dev Variant of {parseHexUint-string-uint256-uint256} that returns false if the parsing fails because of an
* invalid character.
*
* NOTE: This function will revert if the result does not fit in a `uint256`.
*/
function tryParseHexUint(
string memory input,
uint256 begin,
uint256 end
) internal pure returns (bool success, uint256 value) {
if (end > bytes(input).length || begin > end) return (false, 0);
return _tryParseHexUintUncheckedBounds(input, begin, end);
}
/**
* @dev Implementation of {tryParseHexUint-string-uint256-uint256} that does not check bounds. Caller should make sure that
* `begin <= end <= input.length`. Other inputs would result in undefined behavior.
*/
function _tryParseHexUintUncheckedBounds(
string memory input,
uint256 begin,
uint256 end
) private pure returns (bool success, uint256 value) {
bytes memory buffer = bytes(input);
// skip 0x prefix if present
bool hasPrefix = (end > begin + 1) && bytes2(_unsafeReadBytesOffset(buffer, begin)) == bytes2("0x"); // don't do out-of-bound (possibly unsafe) read if sub-string is empty
uint256 offset = hasPrefix.toUint() * 2;
uint256 result = 0;
for (uint256 i = begin + offset; i < end; ++i) {
uint8 chr = _tryParseChr(bytes1(_unsafeReadBytesOffset(buffer, i)));
if (chr > 15) return (false, 0);
result *= 16;
unchecked {
// Multiplying by 16 is equivalent to a shift of 4 bits (with additional overflow check).
// This guarantees that adding a value < 16 will not cause an overflow, hence the unchecked.
result += chr;
}
}
return (true, result);
}
/**
* @dev Parse a hexadecimal string (with or without "0x" prefix), and returns the value as an `address`.
*
* Requirements:
* - The string must be formatted as `(0x)?[0-9a-fA-F]{40}`
*/
function parseAddress(string memory input) internal pure returns (address) {
return parseAddress(input, 0, bytes(input).length);
}
/**
* @dev Variant of {parseAddress-string} that parses a substring of `input` located between position `begin` (included) and
* `end` (excluded).
*
* Requirements:
* - The substring must be formatted as `(0x)?[0-9a-fA-F]{40}`
*/
function parseAddress(string memory input, uint256 begin, uint256 end) internal pure returns (address) {
(bool success, address value) = tryParseAddress(input, begin, end);
if (!success) revert StringsInvalidAddressFormat();
return value;
}
/**
* @dev Variant of {parseAddress-string} that returns false if the parsing fails because the input is not a properly
* formatted address. See {parseAddress-string} requirements.
*/
function tryParseAddress(string memory input) internal pure returns (bool success, address value) {
return tryParseAddress(input, 0, bytes(input).length);
}
/**
* @dev Variant of {parseAddress-string-uint256-uint256} that returns false if the parsing fails because input is not a properly
* formatted address. See {parseAddress-string-uint256-uint256} requirements.
*/
function tryParseAddress(
string memory input,
uint256 begin,
uint256 end
) internal pure returns (bool success, address value) {
if (end > bytes(input).length || begin > end) return (false, address(0));
bool hasPrefix = (end > begin + 1) && bytes2(_unsafeReadBytesOffset(bytes(input), begin)) == bytes2("0x"); // don't do out-of-bound (possibly unsafe) read if sub-string is empty
uint256 expectedLength = 40 + hasPrefix.toUint() * 2;
// check that input is the correct length
if (end - begin == expectedLength) {
// length guarantees that this does not overflow, and value is at most type(uint160).max
(bool s, uint256 v) = _tryParseHexUintUncheckedBounds(input, begin, end);
return (s, address(uint160(v)));
} else {
return (false, address(0));
}
}
function _tryParseChr(bytes1 chr) private pure returns (uint8) {
uint8 value = uint8(chr);
// Try to parse `chr`:
// - Case 1: [0-9]
// - Case 2: [a-f]
// - Case 3: [A-F]
// - otherwise not supported
unchecked {
if (value > 47 && value < 58) value -= 48;
else if (value > 96 && value < 103) value -= 87;
else if (value > 64 && value < 71) value -= 55;
else return type(uint8).max;
}
return value;
}
/**
* @dev Escape special characters in JSON strings. This can be useful to prevent JSON injection in NFT metadata.
*
* WARNING: This function should only be used in double quoted JSON strings. Single quotes are not escaped.
*
* NOTE: This function escapes all unicode characters, and not just the ones in ranges defined in section 2.5 of
* RFC-4627 (U+0000 to U+001F, U+0022 and U+005C). ECMAScript's `JSON.parse` does recover escaped unicode
* characters that are not in this range, but other tooling may provide different results.
*/
function escapeJSON(string memory input) internal pure returns (string memory) {
bytes memory buffer = bytes(input);
bytes memory output = new bytes(2 * buffer.length); // worst case scenario
uint256 outputLength = 0;
for (uint256 i; i < buffer.length; ++i) {
bytes1 char = bytes1(_unsafeReadBytesOffset(buffer, i));
if (((SPECIAL_CHARS_LOOKUP & (1 << uint8(char))) != 0)) {
output[outputLength++] = "\\";
if (char == 0x08) output[outputLength++] = "b";
else if (char == 0x09) output[outputLength++] = "t";
else if (char == 0x0a) output[outputLength++] = "n";
else if (char == 0x0c) output[outputLength++] = "f";
else if (char == 0x0d) output[outputLength++] = "r";
else if (char == 0x5c) output[outputLength++] = "\\";
else if (char == 0x22) {
// solhint-disable-next-line quotes
output[outputLength++] = '"';
}
} else {
output[outputLength++] = char;
}
}
// write the actual length and deallocate unused memory
assembly ("memory-safe") {
mstore(output, outputLength)
mstore(0x40, add(output, shl(5, shr(5, add(outputLength, 63)))))
}
return string(output);
}
/**
* @dev Reads a bytes32 from a bytes array without bounds checking.
*
* NOTE: making this function internal would mean it could be used with memory unsafe offset, and marking the
* assembly block as such would prevent some optimizations.
*/
function _unsafeReadBytesOffset(bytes memory buffer, uint256 offset) private pure returns (bytes32 value) {
// This is not memory safe in the general case, but all calls to this private function are within bounds.
assembly ("memory-safe") {
value := mload(add(buffer, add(0x20, offset)))
}
}
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: GPL-2.0-or-later
pragma solidity >=0.5.0;
/// @title Callback for IAlgebraPoolActions#swap
/// @notice Any contract that calls IAlgebraPoolActions#swap must implement this interface
/// @dev Credit to Uniswap Labs under GPL-2.0-or-later license:
/// https://github.com/Uniswap/v3-core/tree/main/contracts/interfaces
interface IAlgebraSwapCallback {
/// @notice Called to `msg.sender` after executing a swap via IAlgebraPool#swap.
/// @dev In the implementation you must pay the pool tokens owed for the swap.
/// The caller of this method must be checked to be a AlgebraPool deployed by the canonical AlgebraFactory.
/// amount0Delta and amount1Delta can both be 0 if no tokens were swapped.
/// @param amount0Delta The amount of token0 that was sent (negative) or must be received (positive) by the pool by
/// the end of the swap. If positive, the callback must send that amount of token0 to the pool.
/// @param amount1Delta The amount of token1 that was sent (negative) or must be received (positive) by the pool by
/// the end of the swap. If positive, the callback must send that amount of token1 to the pool.
/// @param data Any data passed through by the caller via the IAlgebraPoolActions#swap call
function algebraSwapCallback(int256 amount0Delta, int256 amount1Delta, bytes calldata data) external;
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (utils/Errors.sol)
pragma solidity ^0.8.20;
/**
* @dev Collection of common custom errors used in multiple contracts
*
* IMPORTANT: Backwards compatibility is not guaranteed in future versions of the library.
* It is recommended to avoid relying on the error API for critical functionality.
*
* _Available since v5.1._
*/
library Errors {
/**
* @dev The ETH balance of the account is not enough to perform the operation.
*/
error InsufficientBalance(uint256 balance, uint256 needed);
/**
* @dev A call to an address target failed. The target may have reverted.
*/
error FailedCall();
/**
* @dev The deployment failed.
*/
error FailedDeployment();
/**
* @dev A necessary precompile is missing.
*/
error MissingPrecompile(address);
} <i class='far fa-question-circle text-muted ms-2' data-bs-trigger='hover' data-bs-toggle='tooltip' data-bs-html='true' data-bs-title='Click on the check box to select individual contract to compare. Only 1 contract can be selected from each side.'></i>
// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (utils/math/SignedMath.sol)
pragma solidity ^0.8.20;
import {SafeCast} from "./SafeCast.sol";
/**
* @dev Standard signed math utilities missing in the Solidity language.
*/
library SignedMath {
/**
* @dev Branchless ternary evaluation for `a ? b : c`. Gas costs are constant.
*
* IMPORTANT: This function may reduce bytecode size and consume less gas when used standalone.
* However, the compiler may optimize Solidity ternary operations (i.e. `a ? b : c`) to only compute
* one branch when needed, making this function more expensive.
*/
function ternary(bool condition, int256 a, int256 b) internal pure returns (int256) {
unchecked {
// branchless ternary works because:
// b ^ (a ^ b) == a
// b ^ 0 == b
return b ^ ((a ^ b) * int256(SafeCast.toUint(condition)));
}
}
/**
* @dev Returns the largest of two signed numbers.
*/
function max(int256 a, int256 b) internal pure returns (int256) {
return ternary(a > b, a, b);
}
/**
* @dev Returns the smallest of two signed numbers.
*/
function min(int256 a, int256 b) internal pure returns (int256) {
return ternary(a < b, a, b);
}
/**
* @dev Returns the average of two signed numbers without overflow.
* The result is rounded towards zero.
*/
function average(int256 a, int256 b) internal pure returns (int256) {
// Formula from the book "Hacker's Delight"
int256 x = (a & b) + ((a ^ b) >> 1);
return x + (int256(uint256(x) >> 255) & (a ^ b));
}
/**
* @dev Returns the absolute unsigned value of a signed value.
*/
function abs(int256 n) internal pure returns (uint256) {
unchecked {
// Formula from the "Bit Twiddling Hacks" by Sean Eron Anderson.
// Since `n` is a signed integer, the generated bytecode will use the SAR opcode to perform the right shift,
// taking advantage of the most significant (or "sign" bit) in two's complement representation.
// This opcode adds new most significant bits set to the value of the previous most significant bit. As a result,
// the mask will either be `bytes32(0)` (if n is positive) or `~bytes32(0)` (if n is negative).
int256 mask = n >> 255;
// A `bytes32(0)` mask leaves the input unchanged, while a `~bytes32(0)` mask complements it.
return uint256((n + mask) ^ mask);
}
}
}