Skip to main content

CAD010: Transactions

Overview​

Transactions are instructions to the Convex Network submitted by users.

Transactions SHOULD be instructions that a user wishes to have executed and reflected in the global state. Typical examples might be:

  • Transfer of a digital asset from one account to another
  • Executing a smart contract
  • Updating an on-chain database record
  • Deploying or upgrading CVM code
  • Voting in a decentralised governance process
  • Registering a hash that can be used to identify and validate off-chain content (e.g. on the Data Lattice )

The general lifecycle of a transaction is as follows:

  1. Client constructs a transaction containing the desired instruction to the network
  2. Client signs the transaction using a private Ed25519 key
  3. The signed transaction is submitted to a peer of the client's choosing
  4. The peer incorporates the transaction into a Belief, which is propagated to the network
  5. The transaction is confirmed in consensus according to the CPoS algorithm
  6. The peer computes the effect of the transaction on the CVM state, and any result(s)
  7. Peer returns a confirmed transaction result to the client

Transaction Types​

All signed transactions MUST contain at least the following fields:

  • An Ed25519 digital signature. This field is critical to ensure that the transaction is authorised by the holder of the correct private key
  • An Address specifying the origin account for the transaction. This is the account that will pay any transaction fees, and against which the digital signature will be checked for cryptographic security purposes.
  • A sequence number specifying the order in which the transaction must be run for the origin account. This MUST be one more than the total number of transactions executed for the origin account so far. i.e. the first sequence number accepted will be 1, the next 2 etc. This field is critical to prevent replay attacks.

Transfer​

A Transfer is a transaction requesting the transfer of Convex Coins from a user (origin) account to some other (target) account.

A transfer transaction MUST specify an amount to transfer, as an integer.

The source Account MUST be the origin account for the transaction, i.e. transfers can only occur from the account which has the correct digital signature

Both accounts MUST be valid, otherwise the transaction MUST fail

The transaction MUST fail if any of the following are true:

  • The source Account has insufficient balance to pay for Transfer Transaction fees.
  • The transferred Amount is negative
  • The transferred Amount is greater than the Convex Coin Balance of the source Account (after subtracting any Transfer Transaction Fees)

If the transfer transaction does not fail for any reason, then:

  • The Amount MUST be subtracted from the Source Account's Balance
  • The Amount MUST be added to the Destination Account's balance

A transfer amount of zero will succeed, though this is relatively pointless. Users SHOULD avoid submitting such transfers, unless there is a good reason (e.g. public proving the ability to transact with a given account).

Invoke​

An Invoke transaction is a request to execute some CVM code by a user account. This is the most general type of transaction: any CVM code may be executed.

An Invoke transaction causes the execution of CVM Code when successfully signed and submitted to the Convex network

An Invoke Transaction MUST include a payload of CVM Code. This may be either:

  • A pre-compiled CVM Op
  • A source code form that will be compiled and executed, as if using eval

High volume users MAY consider pre-compilation of CVM code to avoid additional compilation juice fees.

An Invoke transaction MUST fail if:

  • The CVM Code is not valid for execution (e.g. a syntax error in compilation)
  • The Origin Account has insufficient balance to pay for Juice required by the code execution
  • The execution of CVM Code causes any Error (e.g. a :TRUST Error caused by attempting an unauthorised operation on an actor)

Otherwise, the CVM State MUST be updated by the result of executing the CVM Code for the Origin Account

Call​

A Call is a transaction requesting the execution of a callable function (typically a smart contract entry point) from a user account.

Semantically, this is broadly equivalent to using an Invoke transaction to do the following:

(call target-address (function-name arg1 arg2 .... argN)

Call transaction types are mainly intended as an efficient way for user applications to invoke smart contract calls on behalf of the User.

A Call Transaction causes the invocation of an Actor function.

Apart from lower transaction fees, the Call instruction MUST be functionally equivalent to invoking CVM Code of the form:

(call actor offer (actor-function arg1 arg2 .....))

Call Transaction are primarily intended for efficient execution of Smart Contract functionality by Clients that need to utilise the functionality of a specific Actor.

General Handling​

Construction​

Clients MUST ensure the transaction is correctly constructed according to one of the transaction types defined in this CAD

Clients MAY delegate transaction construction to another system. If this is done, care should be taken to ensure the transaction is correctly constructed (e.g. does not contain malicious code that has been inserted by a hacker)

Clients MUST ensure that the sequence number on the transaction is correct. Failure to do so is likely to result in immediate transaction rejection, and possible blacklisting by Peers.

Clients MUST ensure that they sign the transaction with the correct private key for the origin account. Failure to do so is likely to result in immediate transaction rejection, and possible blacklisting by Peers.

Results​

Transaction results MUST be returned in a Result record which contains the following fields:

  • :id - the message ID of the transaction to correlate with the client
  • :result - the final result of the transaction (will be the error message if an error occurred)
  • :error - the error code (MUST nil if no error occurred, otherwise can be any Keyword)
  • :log - a vector of log entries created (may be omitted if no logs events occurred)
  • :info - a Map of information reported by the peer to the client, which SHOULD include:
  • :tx - the 32-byte SHA3-256 hash of the signed transaction
  • :loc - the location of the transaction in consensus, as a vector [block-index transaction-index]
  • :trace - an error trace, which is a vector of stack messages if an error occurred
  • :eaddr - the Address of execution where the error was raised
  • :mem - Integer amount of memory consumed by the transaction (may be omitted if zero, may be negative for a refund)
  • :juice - Execution juice for the transaction
  • :fees - Total fee paid in Convex coppers, including memory cost
  • :source - The source location at which the Result was generated

An an optimisation, peers MAY avoid creating Result records if they have no requirement to report results back to clients.

Fees​

Total fees for a successful transaction are calculated as:

(juice used + transaction base cost) * juice price + memory costs

See CAD007 for more details on juice cost calculation.

See CAD006 for more details on memory cost calculation.

Memory costs MUST be zero if no memory was used, or if the origin account had sufficient memory allowance to cover the increase in state size caused by the transaction.

In the case of a failed transaction, memory fees MUST be zero (since state changes are rolled back)

If a transaction failed signature or sequence verification, the base transaction cost is paid by the peer that submitted the erroneous transaction.

Verification​

If the client trusts the peer, the returned result may be assumed as evidence that the transaction has succeeded.

If there are doubts about the integrity of the peer, further verification may be performed in several ways:

  • Checking the consensus ordering to ensure that the transaction occurred when the peer claimed
  • Querying the CVM state to ensure transaction effects have been carried out
  • Confirming the result with one or more independent peers

It is generally the responsibility of the user / app developer to choose an appropriate level of verification and ensure connection to trusted peers.

Peer Responsibilities​

Peers are generally expected to be responsible for validating and submitting legitimate transactions for consensus on behalf of their clients.

Peers MAY define their own terms for allowing a client to use their services.

Peers SHOULD submit legitimate transaction for consensus, unless they have a reason to believe the transaction is invalid or illegitimate.

Peers SHOULD submit transactions in the order that they are received from any single client. Failure to do so is likely to result in sequence errors and potential economic cost for the peers.

Peers SHOULD validate the digital signature of transactions they include in a block. Failure to do so is likely to result in penalties (at a minimum, paying the fees for the invalid transaction)

Peers MAY reject transactions that do not appear to be legitimate, in which case the Peer MUST return a Result to the Client submitting the transaction indicating the reason for rejection. Some examples where this may be appropriate:

  • Any transaction that has an obviously invalid sequence number (less than that required for the current Consensus State)
  • A transaction that has a future Sequence number (greater than would be valid for the current consensus), and the Peer is unaware of any previous in-flight transactions from the Client that would make this valid.
  • A transaction that appears too expensive for its origin account to execute (a very large transaction size or a large transfer that would be likely to fail)
  • An account or client has been blacklisted by the Peer for previous bad behaviour

Signatures​

All valid transactions MUST be signed by the account key of the account for which the user submits the transaction. The relevant account key is the one that is set in the CVM state at the time the transaction is executed.