Rust smart contracts Development Diary (10-2): Sputnik DAO Factory Contract Analysis

This article will provide an in-depth analysis of the factory contract code of the Sputnik DAO platform, focusing on the creation and updating process of DAO instances.

1. Sputnik-DAO Factory Smart Contract

Sputnik-DAO adopts the factory design pattern to achieve the unified creation and management of DAOs on the platform. The main states of the factory contract include:

• factory_manager: Implementation of internal functional logic, providing methods to create/delete/update DAO instances.
• daos: Records the NEAR account addresses of all created DAO instances on the platform.

2. Create DAO

The main process of creating a DAO instance:

1. Call the create() method of the factory contract
2. Construct the account address and initialization parameters for the new DAO smart contracts.
3. Deploy a new contract through factory_manager.create_contract()
4. Execute the initialization function of the new contract new()
5. Callback on_create() records new DAO information

The main steps to create_contract():

1. Load DAO contract template code
2. Create a new account and transfer funds
3. Deploy contract code
4. Call the initialization function
5. Callback on_create()

3. Update DAO

The factory contract provides the update() method for upgrading the DAO contract:

1. Check caller permissions
2. Confirm that the DAO was created by the factory
3. Call factory_manager.update_contract()
4. Execute the update() function in the DAO smart contract.

4. Security Analysis

• Permission control: privileged functions can only be called by the owner
• Error handling: handling exceptional situations
• Fixed an important update permission vulnerability

Overall, the factory contracts ensure security through mechanisms such as permission management and error handling, providing a reliable infrastructure for the Sputnik DAO platform.