OpenZeppelin Contracts 5.0 Release Candidate is now available for public testing 🧪
5.0 includes an all new AccessManager module for improved security and transparency, plus efficiency improvements and simplifications.
Bug bounty rewards increase by 50% during the RC phase.
Redefined Access Control 🔐
AccessManager is a new and comprehensive solution for role management across contracts. Instead of having to manage them separately, AccessManager allows you to manage permissions from a central contract, also making your system easier to audit.
AccessManager built-ins
⏰ Permissions can be time locked by default — no need for separate contracts.
🔄 Governor DAOs can interact with contracts using AccessManager through GovernorTimelockAccess.
⚡️ Existing contracts can migrate to AccessManager without upgrades.
With Contracts 5.0, we are able to include a few breaking changes to modernize the codebase, follow best practices like namespaced storage, and further improve gas efficiency without compromising security.
@Amxx shared more details at EthCC in July:
Bug Hunters 🐛🕵🏻♂️
All @immunefi bug bounties will be boosted by 50% during the RC phase.
Contracts 5.0 has been audited by OpenZeppelin Security Research. Test your skills and see if you can find novel attack vectors! immunefi.com/bounty/openzep…
Thank you to all our contributors for helping lead the way in secure web3 development!
Did you know that you can use a collection of Forta detection bots to automatically analyze, inspect, and detect bugs on newly deployed Contracts?
Thread below👇
The Contract Bots Gang is a collection of @FortaNetwork bots separated into three layers developed by our Security Research Experts at OpenZeppelin:
⚙️ Deconstruction layer
💡 Detection layer
🐞 Bug hunting layer
⚙️: The Deconstruction layer right now is composed of a single Forta bot that inspects each transaction in the blockchain and reacts whenever the transaction contains a new smart contract deployment.
Introducing Contracts Wizard for Cairo! An interactive generator to bootstrap your smart contracts and learn about OpenZeppelin Contracts for Cairo.
A thread 👇
What is Cairo: Contracts Wizard for Cairo is an interface to interactively build a smart contract out of components from OpenZeppelin Contracts for Cairo. Cairo is the native smart contract language for StarkNet, a decentralized ZK Rollup.
How to use: Select the kind of contract that you want, set your parameters and desired features (token name, symbol, premint amount, etc.), and Contracts Wizard for Cairo will generate all of the code necessary.
2 years ago, the DAO was hacked and we learned the importance of security in smart contract development the hard way. We created #OpenZeppelin to fill this gap
As of today, #OpenZeppelin libraries were downloaded 100,000+ times, leveraging a community of 4500+ developers. Still, smart contract development remains a difficult and inefficient endeavor, analogous to the early days of computing
We are now making @zeppelin_os the canonical smart contract development platform — improving the experience of developing, deploying* and managing** decentralized applications