Skip to content

candidelabs/candide-contracts

Repository files navigation

Candide Contracts

atelier-meta-web

About

Candide Wallet is a smart contract wallet for Ethereum Mainnet and EVM compatible rollups.
This repo includes the smart contracts used by Candide Labs.

Features

Account Recovery

In this section, we highlight and explain the SocialRecoveryModule.sol contract.

The Account Recovery module is designed to work for both a single-owner account and an n-m multi-sig account. In the case of the single-owner account, the signer key is typically stored on the user's device. More specifically, owners can add recovery addresses (also known as Guardians) to change the ownership of the account, in case their signer key is lost or compromised.

Recovery methods are typical Ethereum accounts. They can be:

  • Family & Friends' contacts
  • Hardware wallets
  • Institutions
  • Custodial services that offer cloud-based wallets

Normal operations of the Account do not require the approval of added Guardians in the module.

Owners of the account decide the threshold for the number of guardians needed for recovery, as well as the number of guardians. A typical single-owner account can have 3 guardians with a threshold of 2. This decreases the likelihood that a single guardian can overtake the account.

Owners are encouraged to ask their guardians to provide fresh addresses. This makes them private and eliminates the possibility of malicious guardians cooperating against an owner. By design, a guardian does not need to necessarily store value in their account to maintain their duties, even during a recovery process.

Once the recovery is initiated, the owners have until the delayPeriod to cancel the recovery, if the initiation was done with malicious intent. Once the delayPeriod is over, anyone can finalize the recovery to update the ownership of that particular Safe Wallet.

Account Recovery interfaces can be built with or without a backend service:

  • An interface without a backend service can simply let each guardian submit their signatures separately. Once the threshold is met, anyone can call execute recovery to start the recovery period.

  • An interface that leverages a backend service can aggregate guardians' signatures so that only the last guardian executes the transaction and pay gas fees. This is similar to how Safe's interface works when multiple owners for a multi-sig sign transactions before submitting them.

High-Level specs of methods

We assume that the signer key belongs to its real owner. The probability of the signer key being in control of someone else should be close to zero. Under this model, we can build a simple yet highly secure non-custodial wallet. To enable that model to evolve if needed, upgrading the wallet to a new implementation requires the approval of only the owner of the account.

Method Owner Guardians Anyone Comment
addGuardianWithThreshold X Owner can add a guardian with a new threshold
revokeGuardianWithThreshold X Owner can remove a guardian from its list of guardians
confirmRecovery X Lets a single guardian approve the execution of the recovery request
multiConfirmRecovery X Lets multiple guardians approve the execution of the recovery request
cancelRecovery X Lets an owner cancel an ongoing recovery request
finalizeRecovery X Finalizes an ongoing recovery request if the recovery period is over. The method is public and callable by anyone

Audit

Development

Install dependencies

yarn install

Add required .env variables

cp .env.example .env

Run tests

yarn build
yarn test

Run FV

certoraRun certora/conf/SocialRecoveryModule.conf
certoraRun certora/conf/GuardianStorage.conf
certoraRun certora/conf/RecoveryConfirmationSignatureValidity.conf

Note: You will need to install Certora CLI and a valid Certora Key for running FV. To provide a custom solc path, use --solc flag.

License

GNU General Public License v3.0

Acknowledgments