How to securely manage a coin swap pool with admin access?

Question

I want to swap pair of coins, say COIN_A/COIN_B. I need to create a pool object containing the balances of COIN_A and COIN_B. My concern is about how to securely manage this pool. If I use transfer::transfer, others wont access the pool, but if I use transfer::share_object, I fear someone might withdraw all the funds. How can I ensure that only admin can access or modify this pool?

BlueEyedCrypto · Accepted Answer

To address this concern, you can design functions within your smart contract that restrict access to only admin users. By using transfer::share_object, your pool becomes a shared object accessible by everyone. However, you can implement access controls where only certain functions, like withdrawing or changing the balance, can be called by the admin. A shared object will allow you broad access, but with careful design of functions and permissions, you can ensure your pool remains secure.

dudley_smith · Answer

The inclusion of capability-based permissions can help manage who can perform which actions on your shared object. Refer to resources like the official Move documentation or community guides such as the one found on move-book.com regarding programmability and capability handling.

Bài viết

Chia sẻ kiến thức của bạn.

How to securely manage a coin swap pool with admin access?

Câu trả lời

Bạn có biết câu trả lời không?

Kiếm phần của bạn từ 1000 Sui