Description:
Multi-signature wallet contract requiring multiple confirmations for transaction execution.
Blockchain: Ethereum
Source Code: View Code On The Blockchain
Solidity Source Code:
{{
"language": "Solidity",
"sources": {
"@openzeppelin/contracts/access/Ownable.sol": {
"content": "// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.0) (access/Ownable.sol)
pragma solidity ^0.8.20;
import {Context} from "../utils/Context.sol";
/**
* @dev Contract module which provides a basic access control mechanism, where
* there is an account (an owner) that can be granted exclusive access to
* specific functions.
*
* The initial owner is set to the address provided by the deployer. This can
* later be changed with {transferOwnership}.
*
* This module is used through inheritance. It will make available the modifier
* `onlyOwner`, which can be applied to your functions to restrict their use to
* the owner.
*/
abstract contract Ownable is Context {
address private _owner;
/**
* @dev The caller account is not authorized to perform an operation.
*/
error OwnableUnauthorizedAccount(address account);
/**
* @dev The owner is not a valid owner account. (eg. `address(0)`)
*/
error OwnableInvalidOwner(address owner);
event OwnershipTransferred(address indexed previousOwner, address indexed newOwner);
/**
* @dev Initializes the contract setting the address provided by the deployer as the initial owner.
*/
constructor(address initialOwner) {
if (initialOwner == address(0)) {
revert OwnableInvalidOwner(address(0));
}
_transferOwnership(initialOwner);
}
/**
* @dev Throws if called by any account other than the owner.
*/
modifier onlyOwner() {
_checkOwner();
_;
}
/**
* @dev Returns the address of the current owner.
*/
function owner() public view virtual returns (address) {
return _owner;
}
/**
* @dev Throws if the sender is not the owner.
*/
function _checkOwner() internal view virtual {
if (owner() != _msgSender()) {
revert OwnableUnauthorizedAccount(_msgSender());
}
}
/**
* @dev Leaves the contract without owner. It will not be possible to call
* `onlyOwner` functions. Can only be called by the current owner.
*
* NOTE: Renouncing ownership will leave the contract without an owner,
* thereby disabling any functionality that is only available to the owner.
*/
function renounceOwnership() public virtual onlyOwner {
_transferOwnership(address(0));
}
/**
* @dev Transfers ownership of the contract to a new account (`newOwner`).
* Can only be called by the current owner.
*/
function transferOwnership(address newOwner) public virtual onlyOwner {
if (newOwner == address(0)) {
revert OwnableInvalidOwner(address(0));
}
_transferOwnership(newOwner);
}
/**
* @dev Transfers ownership of the contract to a new account (`newOwner`).
* Internal function without access restriction.
*/
function _transferOwnership(address newOwner) internal virtual {
address oldOwner = _owner;
_owner = newOwner;
emit OwnershipTransferred(oldOwner, newOwner);
}
}
"
},
"@openzeppelin/contracts/token/ERC20/IERC20.sol": {
"content": "// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (token/ERC20/IERC20.sol)
pragma solidity ^0.8.20;
/**
* @dev Interface of the ERC-20 standard as defined in the ERC.
*/
interface IERC20 {
/**
* @dev Emitted when `value` tokens are moved from one account (`from`) to
* another (`to`).
*
* Note that `value` may be zero.
*/
event Transfer(address indexed from, address indexed to, uint256 value);
/**
* @dev Emitted when the allowance of a `spender` for an `owner` is set by
* a call to {approve}. `value` is the new allowance.
*/
event Approval(address indexed owner, address indexed spender, uint256 value);
/**
* @dev Returns the value of tokens in existence.
*/
function totalSupply() external view returns (uint256);
/**
* @dev Returns the value of tokens owned by `account`.
*/
function balanceOf(address account) external view returns (uint256);
/**
* @dev Moves a `value` amount of tokens from the caller's account to `to`.
*
* Returns a boolean value indicating whether the operation succeeded.
*
* Emits a {Transfer} event.
*/
function transfer(address to, uint256 value) external returns (bool);
/**
* @dev Returns the remaining number of tokens that `spender` will be
* allowed to spend on behalf of `owner` through {transferFrom}. This is
* zero by default.
*
* This value changes when {approve} or {transferFrom} are called.
*/
function allowance(address owner, address spender) external view returns (uint256);
/**
* @dev Sets a `value` amount of tokens as the allowance of `spender` over the
* caller's tokens.
*
* Returns a boolean value indicating whether the operation succeeded.
*
* IMPORTANT: Beware that changing an allowance with this method brings the risk
* that someone may use both the old and the new allowance by unfortunate
* transaction ordering. One possible solution to mitigate this race
* condition is to first reduce the spender's allowance to 0 and set the
* desired value afterwards:
* https://github.com/ethereum/EIPs/issues/20#issuecomment-263524729
*
* Emits an {Approval} event.
*/
function approve(address spender, uint256 value) external returns (bool);
/**
* @dev Moves a `value` amount of tokens from `from` to `to` using the
* allowance mechanism. `value` is then deducted from the caller's
* allowance.
*
* Returns a boolean value indicating whether the operation succeeded.
*
* Emits a {Transfer} event.
*/
function transferFrom(address from, address to, uint256 value) external returns (bool);
}
"
},
"@openzeppelin/contracts/utils/Context.sol": {
"content": "// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.0.1) (utils/Context.sol)
pragma solidity ^0.8.20;
/**
* @dev Provides information about the current execution context, including the
* sender of the transaction and its data. While these are generally available
* via msg.sender and msg.data, they should not be accessed in such a direct
* manner, since when dealing with meta-transactions the account sending and
* paying for execution may not be the actual sender (as far as an application
* is concerned).
*
* This contract is only required for intermediate, library-like contracts.
*/
abstract contract Context {
function _msgSender() internal view virtual returns (address) {
return msg.sender;
}
function _msgData() internal view virtual returns (bytes calldata) {
return msg.data;
}
function _contextSuffixLength() internal view virtual returns (uint256) {
return 0;
}
}
"
},
"@openzeppelin/contracts/utils/ReentrancyGuard.sol": {
"content": "// SPDX-License-Identifier: MIT
// OpenZeppelin Contracts (last updated v5.1.0) (utils/ReentrancyGuard.sol)
pragma solidity ^0.8.20;
/**
* @dev Contract module that helps prevent reentrant calls to a function.
*
* Inheriting from `ReentrancyGuard` will make the {nonReentrant} modifier
* available, which can be applied to functions to make sure there are no nested
* (reentrant) calls to them.
*
* Note that because there is a single `nonReentrant` guard, functions marked as
* `nonReentrant` may not call one another. This can be worked around by making
* those functions `private`, and then adding `external` `nonReentrant` entry
* points to them.
*
* TIP: If EIP-1153 (transient storage) is available on the chain you're deploying at,
* consider using {ReentrancyGuardTransient} instead.
*
* TIP: If you would like to learn more about reentrancy and alternative ways
* to protect against it, check out our blog post
* https://blog.openzeppelin.com/reentrancy-after-istanbul/[Reentrancy After Istanbul].
*/
abstract contract ReentrancyGuard {
// Booleans are more expensive than uint256 or any type that takes up a full
// word because each write operation emits an extra SLOAD to first read the
// slot's contents, replace the bits taken up by the boolean, and then write
// back. This is the compiler's defense against contract upgrades and
// pointer aliasing, and it cannot be disabled.
// The values being non-zero value makes deployment a bit more expensive,
// but in exchange the refund on every call to nonReentrant will be lower in
// amount. Since refunds are capped to a percentage of the total
// transaction's gas, it is best to keep them low in cases like this one, to
// increase the likelihood of the full refund coming into effect.
uint256 private constant NOT_ENTERED = 1;
uint256 private constant ENTERED = 2;
uint256 private _status;
/**
* @dev Unauthorized reentrant call.
*/
error ReentrancyGuardReentrantCall();
constructor() {
_status = NOT_ENTERED;
}
/**
* @dev Prevents a contract from calling itself, directly or indirectly.
* Calling a `nonReentrant` function from another `nonReentrant`
* function is not supported. It is possible to prevent this from happening
* by making the `nonReentrant` function external, and making it call a
* `private` function that does the actual work.
*/
modifier nonReentrant() {
_nonReentrantBefore();
_;
_nonReentrantAfter();
}
function _nonReentrantBefore() private {
// On the first call to nonReentrant, _status will be NOT_ENTERED
if (_status == ENTERED) {
revert ReentrancyGuardReentrantCall();
}
// Any calls to nonReentrant after this point will fail
_status = ENTERED;
}
function _nonReentrantAfter() private {
// By storing the original value once again, a refund is triggered (see
// https://eips.ethereum.org/EIPS/eip-2200)
_status = NOT_ENTERED;
}
/**
* @dev Returns true if the reentrancy guard is currently set to "entered", which indicates there is a
* `nonReentrant` function in the call stack.
*/
function _reentrancyGuardEntered() internal view returns (bool) {
return _status == ENTERED;
}
}
"
},
"contracts/ICO.sol": {
"content": "// SPDX-License-Identifier: MIT\r
pragma solidity 0.8.28;\r
\r
import { IERC20 } from "@openzeppelin/contracts/token/ERC20/IERC20.sol";\r
import { Ownable } from "@openzeppelin/contracts/access/Ownable.sol";\r
import { ReentrancyGuard } from "@openzeppelin/contracts/utils/ReentrancyGuard.sol";\r
\r
interface IPriceFeed {\r
function latestAnswer() external view returns (int256);\r
}\r
\r
/**\r
* @title Coatl ICO Contract\r
* @notice Handles the initial coin offering (ICO) for the Coatl token with softcap, hardcap, dynamic ETH/USD pricing, and refund logic.\r
* @dev\r
* - Accepts ETH contributions in exchange for tokens at a USD-pegged price (10 cents per token, using Chainlink ETH/USD).\r
* - ICO runs between a start and end timestamp.\r
* - If softcap is reached, funds can be released to the project before the end date, but ICO continues until hardcap or end.\r
* - If softcap is not reached by the end, contributors can claim refunds.\r
* - Tokens are transferred immediately upon purchase.\r
* - Owner can recover unsold tokens after ICO ends.\r
* @custom:security-contact security@coatl.one\r
*/\r
contract ICO is Ownable, ReentrancyGuard {\r
// --- State Variables ---\r
IERC20 public immutable token;\r
IPriceFeed public immutable priceFeed; // Chainlink ETH/USD price feed\r
\r
uint256 public immutable softCap; // in tokens (18 decimals)\r
uint256 public immutable hardCap; // in tokens (18 decimals)\r
uint256 public immutable start;\r
uint256 public immutable end;\r
uint256 public constant TOKEN_USD_PRICE = 10; // 10 cents\r
uint256 public constant MIN_CONTRIBUTION_USD = 500; // $5.00 in cents\r
uint256 public constant MAX_CONTRIBUTION_USD = 100000000; // $1,000,000.00 in cents\r
\r
uint256 public totalRaised;\r
uint256 public totalTokensSold;\r
bool public softCapReached;\r
bool public finalized;\r
bool public started;\r
\r
bool public icoEndedEventEmitted;\r
\r
mapping(address => uint256) public contributions;\r
mapping(address => uint256) public tokensPurchased;\r
\r
address public immutable projectWallet;\r
\r
// --- Events ---\r
event TokensPurchased(address indexed buyer, uint256 ethAmount, uint256 tokenAmount);\r
event FundsReleased(address indexed to, uint256 amount);\r
event RefundClaimed(address indexed buyer, uint256 amount);\r
event ICOStarted(uint256 start, uint256 end, uint256 softCap, uint256 hardCap);\r
event ICOEnded(bool successful, uint256 totalRaised);\r
event UnsoldTokensRecovered(address indexed to, uint256 amount);\r
event Finalized();\r
event EmergencyWithdraw(address indexed to, uint256 amount);\r
event ICOCreated(uint256 start, uint256 end, uint256 softCap, uint256 hardCap);\r
\r
// --- Custom Errors ---\r
error ZeroAddressNotAllowed();\r
error InvalidCaps();\r
error InvalidTimeWindow();\r
error HardcapReached();\r
error NoEthSent();\r
error ZeroTokens();\r
error TokenTransferFailed();\r
error EthTransferFailed();\r
error SoftcapNotReached();\r
error ICOnotEnded();\r
error SoftcapReachedAlready();\r
error NoContribution();\r
error RefundFailed();\r
error InvalidPrice();\r
error ContributionTooLow();\r
error ContributionTooHigh();\r
error NotEnoughTokens();\r
error DirectEthNotAllowed();\r
error ICONotActive();\r
error NoEthToRelease();\r
error NoUnsoldTokens();\r
error AlreadyFinalized();\r
error NotFinalized();\r
error NoEthToWithdraw();\r
error UnsoldTokensNotRecovered();\r
\r
// --- Constructor ---\r
/**\r
* @notice Deploys the ICO contract for a specific token and price feed.\r
* @param _token The address of the Coatl token contract.\r
* @param _priceFeed The address of the Chainlink ETH/USD price feed.\r
* @param _softCap The minimum amount of CTL to consider the ICO successful.\r
* @param _hardCap The maximum amount of CTL to consider the ICO successful.\r
* @param _start The ICO start timestamp.\r
* @param _end The ICO end timestamp.\r
* @param _projectWallet The immutable project/multisig wallet to receive funds.\r
*/\r
constructor(\r
address _token,\r
address _priceFeed,\r
uint256 _softCap,\r
uint256 _hardCap,\r
uint256 _start,\r
uint256 _end,\r
address _projectWallet\r
) Ownable(msg.sender) {\r
if (_token == address(0) || _priceFeed == address(0) || _projectWallet == address(0)) revert ZeroAddressNotAllowed();\r
if (_softCap == 0 || _hardCap <= _softCap) revert InvalidCaps();\r
if (_start >= _end || _end <= block.timestamp) revert InvalidTimeWindow();\r
\r
token = IERC20(_token);\r
priceFeed = IPriceFeed(_priceFeed);\r
softCap = _softCap;\r
hardCap = _hardCap;\r
start = _start;\r
end = _end;\r
projectWallet = _projectWallet;\r
\r
emit ICOCreated(_start, _end, _softCap, _hardCap);\r
}\r
\r
// --- Modifiers ---\r
modifier onlyWhileOpen() {\r
if (block.timestamp < start || block.timestamp > end) {\r
if (!icoEndedEventEmitted) {\r
icoEndedEventEmitted = true;\r
emit ICOEnded(softCapReached, totalRaised);\r
}\r
revert ICONotActive();\r
}\r
_;\r
}\r
\r
// --- Fallbacks ---\r
receive() external payable {\r
revert DirectEthNotAllowed();\r
}\r
\r
fallback() external payable {\r
revert DirectEthNotAllowed();\r
}\r
\r
// --- Functions ---\r
\r
/**\r
* @notice Buy tokens with ETH at the current USD price.\r
* @dev Calculates token amount based on Chainlink ETH/USD price and 10 cent USD price per token.\r
*/\r
function buyTokens() external payable nonReentrant onlyWhileOpen {\r
if (!started) {\r
started = true;\r
emit ICOStarted(start, end, softCap, hardCap);\r
}\r
\r
if (totalTokensSold >= hardCap) revert HardcapReached();\r
if (msg.value == 0) revert NoEthSent();\r
\r
uint256 ethUsd = getEthUsdPrice();\r
\r
uint256 minWei = (MIN_CONTRIBUTION_USD * 1e18) / (ethUsd / 1e16);\r
uint256 maxWei = (MAX_CONTRIBUTION_USD * 1e18) / (ethUsd / 1e16);\r
\r
if (msg.value < minWei) revert ContributionTooLow();\r
if (contributions[msg.sender] + msg.value > maxWei) revert ContributionTooHigh();\r
\r
uint256 usdValue = (msg.value * ethUsd) / 1e18;\r
uint256 tokens = (usdValue * 100) / TOKEN_USD_PRICE;\r
if (tokens == 0) revert ZeroTokens();\r
if (token.balanceOf(address(this)) < tokens) revert NotEnoughTokens();\r
\r
if (totalTokensSold + tokens > hardCap) revert HardcapReached();\r
\r
if (!token.transfer(msg.sender, tokens)) revert TokenTransferFailed();\r
\r
contributions[msg.sender] += msg.value;\r
tokensPurchased[msg.sender] += tokens;\r
totalRaised += msg.value;\r
totalTokensSold += tokens;\r
\r
emit TokensPurchased(msg.sender, msg.value, tokens);\r
\r
if (!softCapReached && totalTokensSold >= softCap) {\r
softCapReached = true;\r
}\r
}\r
\r
/**\r
* @notice Returns the latest ETH/USD price from Chainlink.\r
* @dev Scales the price to 18 decimals.\r
*/\r
function getEthUsdPrice() public view returns (uint256) {\r
int256 price = priceFeed.latestAnswer(); // 8 decimals\r
if (price <= 0) revert InvalidPrice();\r
return uint256(price) * 1e10; // scale to 18 decimals\r
}\r
\r
/**\r
* @notice Returns the minimum amount of wei allowed for a token purchase at the current ETH/USD price.\r
*/\r
function getMinWeiAllowed() external view returns (uint256) {\r
uint256 ethUsd = getEthUsdPrice();\r
return (MIN_CONTRIBUTION_USD * 1e18) / (ethUsd / 1e16);\r
}\r
\r
/**\r
* @notice Returns the maximum amount of wei allowed for a token purchase at the current ETH/USD price.\r
*/\r
function getMaxWeiAllowed() external view returns (uint256) {\r
uint256 ethUsd = getEthUsdPrice();\r
return (MAX_CONTRIBUTION_USD * 1e18) / (ethUsd / 1e16);\r
}\r
\r
/**\r
* @notice Releases all raised ETH to the project wallet if softcap is reached.\r
*/\r
function releaseFunds() external onlyOwner nonReentrant {\r
if (!softCapReached) revert SoftcapNotReached();\r
uint256 amount = address(this).balance;\r
if (amount == 0) revert NoEthToRelease();\r
(bool sent, ) = projectWallet.call{value: amount}("");\r
if (!sent) revert TokenTransferFailed();\r
emit FundsReleased(projectWallet, amount);\r
}\r
\r
/**\r
* @notice Allows contributors to claim a refund if the ICO was unsuccessful.\r
*/\r
function claimRefund() external nonReentrant {\r
if (block.timestamp <= end) revert ICOnotEnded();\r
if (softCapReached) revert SoftcapReachedAlready();\r
uint256 contributed = contributions[msg.sender];\r
if (contributed == 0) revert NoContribution();\r
(bool sent, ) = msg.sender.call{value: contributed}("");\r
if (!sent) revert RefundFailed();\r
contributions[msg.sender] = 0;\r
emit RefundClaimed(msg.sender, contributed);\r
}\r
\r
/**\r
* @notice Returns true if the ICO softcap has been reached.\r
*/\r
function icoSuccessful() public view returns (bool) {\r
return softCapReached;\r
}\r
\r
/**\r
* @notice Returns true if the ICO has ended (by time or hardcap).\r
*/\r
function icoEnded() public view returns (bool) {\r
return block.timestamp > end || totalTokensSold >= hardCap;\r
}\r
\r
/**\r
* @notice Owner can recover unsold tokens after ICO ends.\r
* @param to The address to receive the unsold tokens.\r
*/\r
function recoverUnsoldTokens(address to) external onlyOwner {\r
uint256 unsold = token.balanceOf(address(this));\r
if (!icoEnded()) revert ICOnotEnded();\r
if (finalized) revert AlreadyFinalized();\r
if (unsold == 0) revert NoUnsoldTokens();\r
if (!token.transfer(to, unsold)) revert TokenTransferFailed();\r
emit UnsoldTokensRecovered(to, unsold);\r
}\r
\r
/**\r
* @notice Finalizes the ICO, preventing further state changes.\r
* Can only be called after the ICO has ended and all unsold tokens are recovered.\r
*/\r
function finalize() external onlyOwner {\r
if (!icoEnded()) revert ICOnotEnded();\r
if (finalized) revert AlreadyFinalized();\r
if (token.balanceOf(address(this)) > 0) revert UnsoldTokensNotRecovered();\r
finalized = true;\r
emit Finalized();\r
}\r
\r
/**\r
* @notice Emergency function to withdraw stuck ETH after ICO is finalized.\r
* Only callable by the owner and only after finalization.\r
* @param to The address to receive the ETH.\r
*/\r
function emergencyWithdraw(address to) external onlyOwner {\r
if (!finalized) revert NotFinalized();\r
uint256 amount = address(this).balance;\r
if (amount == 0) revert NoEthToWithdraw();\r
(bool sent, ) = to.call{value: amount}("");\r
if (!sent) revert EthTransferFailed();\r
emit EmergencyWithdraw(to, amount);\r
}\r
}"
}
},
"settings": {
"evmVersion": "paris",
"optimizer": {
"enabled": false,
"runs": 200
},
"outputSelection": {
"*": {
"*": [
"evm.bytecode",
"evm.deployedBytecode",
"devdoc",
"userdoc",
"metadata",
"abi"
]
}
},
"libraries": {}
}
}}
Submitted on: 2025-09-30 10:47:23
Comments
Log in to comment.
No comments yet.