How to securely manage a coin swap pool with admin access?

Question

I want to swap pair of coins, say COIN_A/COIN_B. I need to create a pool object containing the balances of COIN_A and COIN_B. My concern is about how to securely manage this pool. If I use transfer::transfer, others wont access the pool, but if I use transfer::share_object, I fear someone might withdraw all the funds. How can I ensure that only admin can access or modify this pool?

BlueEyedCrypto · Accepted Answer

To address this concern, you can design functions within your smart contract that restrict access to only admin users. By using transfer::share_object, your pool becomes a shared object accessible by everyone. However, you can implement access controls where only certain functions, like withdrawing or changing the balance, can be called by the admin. A shared object will allow you broad access, but with careful design of functions and permissions, you can ensure your pool remains secure.

dudley_smith · Answer

The inclusion of capability-based permissions can help manage who can perform which actions on your shared object. Refer to resources like the official Move documentation or community guides such as the one found on move-book.com regarding programmability and capability handling.

帖子

分享您的知识。

How to securely manage a coin swap pool with admin access?

答案

你知道答案吗？

赚取你的 1000 Sui 份额