@3test/ethereum-order-gateway-contracts1.2.0 • Public • Published
Smart contracts used by the order gateway on the Ethereum blockchain.
Warning about deploying OrderGateway smart contract
To prevent from replay attacks (signed order created on testnet can be executed on mainnet), the order signing mechanism includes the contract address in the order you sign. This way, only a specific smart contract address can execute the signed order.
CREATE2 and other methods provide ways of deploying the same contract on different networks that end up with the same contract address. This is the reason this warning exists. If you are deploying the OrderGateway yourself or if you are using a third-party deployment that you do not trust, this could become a possible vulnerability.
All 0xcert-deployed addresses are available in Documentation. We will never deploy smart contract on different networks in a way that would assign it the same contract addresses.