ICON Developer Portal

ICON Developer Portal

ICON Network is a decentralized smart contract protocol based on ‘loopchain’, a high-performance blockchain engine. The ICON Network aims to remove barriers among different blockchains and allow them to exchange values without intermediaries. By realizing this goal, ICON will realize the mass adoption of blockchain technology and Hyperconnect the World.

Get Started

SCORE Audit

List of pending audit requests - https://audit.icon.foundation/guest/pendingList

For every SCOREs requested to deploy to the ICON mainnet, we perform a security audit in an effort to verify they do not break the mainnet. Audit process may take several days. Before you plan to build your DApp, please take a time to look at these guidelines.

Guidelines

Code should be deterministic as it will run on multiple nodes. You should avoid any business logic that depends on non-deterministic input such as clock time, random number, or external data source.

  • Do not use clock time. Use block height instead. If you really want to use time information, use block timestamp or transaction timestamp.
  • Do not use python random module. Do not use transaction hash or block height as a seed for generating a pseudo random number since they are predictable.
  • Do not make an outgoing network call to fetch external data source whose outcome cannot be verified and also can change over time.

To pass an ICON audit, we recommend you do the following.

  • DO NOT import any system packages. DO import only “iconservice” and the files of your own implementation placed in the same folder.
  • DO NOT make any long-running operation inside the SCORE. Average block generation time would be 2 seconds in ICON, your transaction should not interrupt the block generation. No zero transaction blocks for now.

Audit Process

  • You request to “deploy” your SCORE to the ICON mainnet from the T-Bears CLI.
  • Your SCORE becomes in “pending” state, if the deploy transaction succeeded.
  • You can query your SCORE’s state by sending an API call to a special address using SDKs (Java, Python) or on the ICONex.
    • Address : cx0000000000000000000000000000000000000001
    • API : getScoreStatus
    • Parameter : SCORE address. You can get this address by querying the result of deploy transaction using "tbears txresult" command.
  • Once auditor approves your SCORE, it becomes in “active” state.
  • If rejected, it becomes in “rejected” state. Response message of "getScoreStatus" will return the audit transaction hash, and if you query the audit transaction, you will know why it has been rejected. You need to deploy again after fixing the issues.

Notes

We confirm that we do not have any intention of controlling DApps. Our first priority is maintaining ICON network as stable as possible, and minimizing any negative impacts, if any, on our partners business running on ICON.

Updated 15 days ago

SCORE Audit


List of pending audit requests - https://audit.icon.foundation/guest/pendingList

Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.