Massa Multisignature Wallet

The purpose of multisig wallets is to increase security by requiring multiple parties to agree on transactions before execution. Transactions can be executed only when confirmed by a predefined number of owners.

Features Can hold Massa and all kinds of tokens Integration with web3 wallets Interacting with any contracts @dev Most important concepts:

•  Threshold/required: Number of required confirmations for a Multisig transaction.
  

•  Owners: List of addresses that control the Multisig. They are the only ones that
   can submit, approve, and execute transactions.
  

•  UpgradeDelay: Delay necessary between an upgrade proposition and the actual upgrade
  

•  executionDelay: Delay necessary between the time the threshold is met for a specific transaction and its execution.
  

•  Id: Each transaction has a different ID to prevent replay attacks.
  

•  Signature: A valid signature of an owner of the Multisig for a transaction hash.
  

•  Owners can only be added/removed by the multisig (same for changing the threshold
   and upgrading the contract)
  

•  Change the owners, required,& upgradeDelay to your needs in src/deploy.ts 
  

The executionDelay starts once the threshold is met, and is not reset when another wallet approves the tx. It can be reset if a wallet revokes approval and the approval count goes below the threshold.

Anyone can send coins to the multisig using the receiveCoins functions. Only owners can call submit, approve, execute & revoke functions. Only the multisig itself can call addOwner, removeOwner, replaceOwner, changeRequirement, changeExecutionDelay, changeUpgradeDelay, proposeUpgrade & upgrade functions. Thus, they can only be called by submitting the call through the multisig, approving & executing it.

Security

The code was fully audited for security by a third party professional security firm. The report is publicly available as the security_audit.pdf file at the root of the repository.

Build

By default this will build all files in assembly/contracts directory.

npm run build

Deploy the multisig

Prerequisites :

• You must add a .env file at the root of the repository with the following keys set to valid values :
  • WALLET_PRIVATE_KEY="wallet_private_key"

These keys will be the ones used by the deployer script to interact with the blockchain.

Adapt required, owners & upgradeDelay to your liking (cf. important concepts) in src/deploy.ts.

The following command will build contracts in assembly/contracts directory and execute the deployment script src/deploy.ts. This script will deploy on the node specified in the .env file.

npm run deploy

Unit tests

The test framework documentation is available here: as-pect docs

npm run test

Format code

npm run fmt