Paxos-issued USD-collateralized ERC20 stablecoin public smart contract repository.
The whitepaper can be found here.
The contract abi is in USDP.abi. It is the abi of the implementation contract.
Interaction with Pax Dollar is done at the address of the proxy at 0x8e870d67f660d95d5be530380d0ec0bd388289e1. See
https://etherscan.io/token/0x8e870d67f660d95d5be530380d0ec0bd388289e1 for live on-chain details, and the section on bytecode verification below.
The initial independent security audits were conducted by Nomic Labs, ChainSecurity, and Trail of Bits.
Audits were also performed by Zellic and Trail of Bits on the new USDP v2 implementation. The PaxosTokenV2 audit reports can be found here.
Pax Dollar (USDP) is an ERC20 token that is Centrally Minted and Burned by Paxos, representing the trusted party backing the token with USD.
The public interface of Pax Dollar is the ERC20 interface specified by EIP-20.
name()symbol()decimals()totalSupply()balanceOf(address who)transfer(address to, uint256 value)approve(address spender, uint256 value)increaseApproval(address spender, uint256 addedValue)decreaseApproval(address spender, uint256 subtractedValue)allowance(address owner, address spender)transferFrom(address from, address to, uint256 value)
And the usual events.
event Transfer(address indexed from, address indexed to, uint256 value)event Approval(address indexed owner, address indexed spender, uint256 value)
Typical interaction with the contract will use transfer to move the token as payment.
Additionally, a pattern involving approve and transferFrom can be used to allow another
address to move tokens from your address to a third party without the need for the middleperson
to custody the tokens, such as in the 0x protocol.
There is a well known gotcha involving the ERC20 approve method. The problem occurs when the owner decides
to change the allowance of a spender that already has an allowance. If the spender sends a transferFrom
transaction at a similar time that the owner sends the new approve transaction
and the transferFrom by the spender goes through first, then the spender gets to use the
original allowance, and also get approved for the intended new allowance.
To mitigate this risk, we recommend that smart contract users utilize the alternative functions increaseApproval and
decreaseApproval instead of using approve directly.
USDP uses a separately deployed SupplyControl contract to control the token supply. SupplyControl has a SUPPLY_CONTROLLER_MANAGER_ROLE which is responsible for managing addresses with the SUPPLY_CONTROLLER_ROLE, referred
to as supplyControllers. Only supplyControllers can mint and burn tokens. SupplyControllers can optionally have rate
limits to limit how many tokens can be minted over a given time frame.
SupplyControl also includes functions to get all of the supply controller addresses
and get configuration for a specific supply controller.
In the event of a critical security threat, Paxos has the ability to pause transfers
and approvals of the USDP token. The ability to pause is controlled by a single owner role,
following OpenZeppelin's
Ownable.
The simple model for pausing transfers following OpenZeppelin's
Pausable.
While paused, the supply controller retains the ability to mint and burn tokens.
The ASSET_PROTECTION_ROLE can freeze and unfreeze the token balance of any address on chain.
It can also wipe the balance of an address after it is frozen
to allow the appropriate authorities to seize the backing assets.
Freezing is something that Paxos will not do on its own accord,
and as such we expect to happen extremely rarely. Checking if an address is frozen is possible
via isFrozen(address who).
To facilitate gas-less transactions, we have implemented EIP-3009 and EIP-2612.
The public functions, transferWithAuthorization and transferWithAuthorizationBatch (for multiple transfers request), allows a spender(delegate) to transfer tokens on behalf of the sender, with condition that a signature, conforming to EIP-712, is provided by the respective sender.
function transferWithAuthorization(
address from,
address to,
uint256 value,
uint256 validAfter,
uint256 validBefore,
bytes32 nonce,
uint8 v,
bytes32 r,
bytes32 s
) external;
function transferWithAuthorizationBatch(
address[] memory from,
address[] memory to,
uint256[] memory value,
uint256[] memory validAfter,
uint256[] memory validBefore,
bytes32[] memory nonce,
uint8[] memory v,
bytes32[] memory r,
bytes32[] memory s
) external;
The sender can establish an allowance for the spender using the permit function, which employs an EIP-712 signature for authorization. Subsequently, the spender can employ the transferFrom and transferFromBatch functions to initiate transfers on behalf of the sender.
function permit(
address owner,
address spender,
uint value,
uint deadline,
uint8 v,
bytes32 r,
bytes32 s
) external;
function transferFrom(
address _from,
address _to,
uint256 _value
) public returns (bool);
function transferFromBatch(
address[] calldata _from,
address[] calldata _to,
uint256[] calldata _value
) public returns (bool);
To facilitate upgradeability on the immutable blockchain we follow a standard two-contract delegation pattern: a proxy contract represents the token, while all calls not involving upgrading the contract are delegated to an implementation contract.
The delegation uses delegatecall, which runs the code of the implementation contract
in the context of the proxy storage. This way the implementation pointer can
be changed to a different implementation contract while still keeping the same
data and USDP contract address, which are really for the proxy contract.
The proxy used here is AdminUpgradeabilityProxy from ZeppelinOS.
The implementation contract is only used for the logic of the non-admin methods.
A new implementation contract can be set by calling upgradeTo() or upgradeToAndCall() on the proxy,
where the latter is used for upgrades requiring a new initialization or data migration so that
it can all be done in one transaction. You must first deploy a copy of the new implementation
contract, which is automatically paused by its constructor to help avoid accidental calls directly
to the proxy contract.
The proxy contract and implementation contracts are verified on etherscan at the following links:
- Proxy: https://etherscan.io/token/0x8e870d67f660d95d5be530380d0ec0bd388289e1
- Implementation: https://etherscan.io/token/0x28eDAB7eEC878d54fa877fFFf4604DFD649F533F
The SupplyControl contract and implementation contracts are verified on etherscan at the following links:
- Proxy: https://etherscan.io/address/0xDc55B5F0f2d441C1116DcC3b9D56314Da7f5496D
- Implementation: https://etherscan.io/address/0xc896C7777f85cf8eDF9Dcb2EE40274b7307da488
Visit Paxos USDP website for more information.
Paxos Faucet to get USDP on testnet.
USDP is also available on the Solana network. You can interact with the USDP token at the address: HVbpJAQGNpkgBaYBZQBR1t7yFdvaYVp2vCQQfKKEN4tM.
Install dependencies:
npm install
Compile the contracts:
npm run compile