ERC-223

Token standard designed by security experts. Prevents user mistakes and accidental loss of funds.

ERC-223 is a token standard designed to be an alternative to ERC-20. ERC-223 solves a number of problems ERC-20 has - most notably ERC-20 token transfers can not be handled by the recipient which means there is no way to filter or prevent any user mistakes or handle any errors that may occur during the transaction. We believe that letting a user to lose all his life savings as a result of a mistake that could be easily prevented is not acceptable for a global standard of digital assets.

EIP-223

This page will be aggregating the updates and resources related to the adoption and development of ERC-223 standard. If you wish to contribute to the development - you can write guidelines, articles, code templates or spread the word about our efforts. Your content can get listed at this page too! You can navigate to https://github.com/Dexaran/dexaran.github.io/issues and open a new issue. Describe your content and it will be listed at this page in the next update.

Articles
Articles about the tokens development
Known problems of ERC-20 standard.Lack of transaction handling, pull transactions
ERC-20 approve & transferFrom methods pose a threat to safety of users fundsThe article describes Pull tx VS Push tx approach
Callisto Security statement regarding ERC-20 standard.Statement by the security auditing organization
Cryptonomist: ERC-223The token standard by hacker Dexaran has been added to Ethereum’s list of standards
Dexaran's interview regarding ERC-20, ERC-223 and ERC-777 development
Dexarans interview with CryptoInsidersHK
ERC-20 vs ERC-223 vs ERC-777Third party media describes the research on token standards
Cryptopolitan announces ERC-223 standardThird party media publication
ERC-223
The most important links
ERC-223 Token source codeReference implementation by the author of ERC-223 standard. Any questions: dexaran@ethereumclassic.org
EIP-223: SpecificationEthereum Improvement Proposal #223
Original discussion thread: issue#223The most debated EIP in the history of Ethereum!
EIP-7417: Token ConverterFormal specification of the contract that makes standards interoperable
Token Converter source codeFormal specification of the contract that makes standards interoperable
Development resources
Tutorials, guidelines, examples
ERC-223 token creation guidelineMedium article describing the process of creating a ERC-223 token
Known problems of ERC-20 standard.Lack of transaction handling, pull transactions
ERC-20 approve & transferFrom methods pose a threat to safety of users fundsThe article describes Pull tx VS Push tx approach
Callisto Security statement regarding ERC-20 standard.Statement by the security auditing organization
Cryptonomist: ERC-223The token standard by hacker Dexaran has been added to Ethereum’s list of standards
Dexaran's interview regarding ERC-20, ERC-223 and ERC-777 development
Dexarans interview with CryptoInsidersHK
ERC-20 vs ERC-223 vs ERC-777Third party media describes the research on token standards
Cryptopolitan announces ERC-223 standardThird party media publication

Events

The chronology of events related to the emergence and development of the idea of creating this standard is accessible here. Get your popcorn🍿 ready! There was a lot of drama and a lot is still ahead.

📅 Events timeline (Total: 68 publications)
[github] ERC-20 flaw is reported to ZetaChain developers as they inherit it in their ZRC-20.
8.12.2023
[github] Poloniex hacker lost $2,500,000 worth fo ERC-20 tokens to a security flaw of the standard that I described in 2017
11.11.2023
[github] Dev discussion regarding ERC-223 vs ERC-777 vs ERC-1363 implementations
18.10.2023
[github] EIP moderator proposed the removal of the optional 'standard' function from ERC-223 standard.
16.10.2023
[r/ethereum] A user lost $240K worth of CRO on 6.09.2023
6.09.2023
[github] ERC-223 is assigned 'final' status.
6.09.2023
Ethereum Foundation rejected 'ERC-223 ecosystem campaign' application for Small Grants
25.08.2023
[github] Dexaran is starting the creation of a process of final EIP modifications upon security vulnerability disclosures
25.08.2023
[github] EIP editors decided there is no necessity to place a warning on ERC-20 regarding the loss of $201M tokens and related insecurity of the standard. Security concern was raised by Dexaran
25.08.2023
[github] Comment on github discussion related to ERC-20 losses of funds
25.08.2023
All ERC Devs call record available at airgram, passcode FT6H
24.08.2023
ERC-223 presentation at All ERC Devs call
24.08.2023
ERC-223 is moved to 'Last Call' status
19.08.2023
[Callisto] Dex223 vs Soy.Finance ERC-223 compatible exchange description
15.08.2023
[github] Update on token standards documentation at ethereum.org: arguing regarding ERC-223, ERC-20 and security practices in general with ethereum mods
15.08.2023
[r/ethereum] Dex223, a decentralized exchange for ERC-20 and ERC-223 tokens is announced. The team starts to accept feature requests.
15.08.2023
[ethresear.ch] Publication regarding $130M lost in ERC-20 tokens submitted to EthResearch forum
15.08.2023
[🍿Ongoing/EIPs] ERC-223 is moving to 'last call'
14.08.2023
1 ETH bounty to anyone who can ask Vitalik Buterin regarding $130M loss on a public conference is announced
13.08.2023
[r/ethereum] EIP-7417 Token Converter is announced at ETH reddit
12.08.2023
[r/ethereum] The output of the ERC-20 losses calculation script is approved after 9 days
12.08.2023
[github] Update of ERC-223 specification to match reference implementation for some reason called 'fix major vuln' by EIP editor
10.08.2023
[github] Ethereum Foundation employee highlighted that EIP process does not allow for amendments upon vulnerability disclosure and nobody expected that a vulnerability can be discovered in a 'final' EIP
9.08.2023
[github] Escalation of ERC-20 vulnerability discovery at Ethereum Cat Herders
9.08.2023
[🍿Ongoing/github] Ethereum moderator 'removed ERC-223 because of a personal feeling that something is wrong with it'
9.08.2023
[github] Requested a warning for ERC-20 users at ethereum.org
7.08.2023
[ETH reddit] ERC-223 front page (this page) is announced. Long explanatory comment thread.
6.08.2023
[discord] Educational post regarding ERC-20 insecurity is created on CryptoDevs discord
4.08.2023
[r/ethereum] The output of the ERC-20 losses calculation script is pending approval by r/ethereum mods for 9 days
3.08.2023
[🍿Ongoing] Github issue to bring ERC-223 back to the list of standards is opened because (1) it was a mistake, (2) it is no longer in 'draft'
2.08.2023
[🍿Ongoing] ERC-223 status is changed from 'draft' to 'review'
2.08.2023
[🍿Ongoing] Discussion regarding improper removal of the ERC-223 from standards list was initiated at EthereumOrg discord. As per the discussion the removal was considered a mistake.
2.08.2023
[twitter] Discussion regarding ERC-223 implementation patterns
2.08.2023
Dexarans interview with CryptoInsidersHK regarding ERC-223
2.08.2023
[CENSORED] Crosspost of the Security statement from r/Cybersecurity is awaiting approval for 3 days and not getting approved
1.08.2023
[🍿Ongoing] ERC-223 removed from the official token standards documentation as it is in 'draft'
1.08.2023
[ETH reddit] Call To Action is announced
1.08.2023
[github] ERC-223 Ecosystem coordination repo is created by EthereumCommonwealth
1.08.2023
[🍿Ongoing] Cryptonomist releases an article regarding ERC-223 being added to the official token standards documentation
31.07.2023
Callisto Security statement regarding ERC-20 tokens is removed at r/ethereum with a reason 'It is not related to Ethereum or ecosystem'
31.07.2023
Callisto Security statement regarding ERC-20 tokens is assigned 'Vulnerability Disclosure' status at r/CyberSecurity
31.07.2023
Callisto Security statement regarding ERC-20 tokens is published on r/CyberSecurity and r/ethereum
31.07.2023
Callisto Security releases a statement regarding ERC-20 tokens
31.07.2023
[ETH reddit] ERC-223 declaration: our mission is to make Ethereum tokens secure
30.07.2023
[🍿Ongoing] The fact of addition of ERC-223 to the token standards list on ethereum.org was announced on r/ethereum
28.07.2023
[EIP] EIP-7417: Token Converter is submitted to Ethereum EIPs. The token converter will transform ERC-20 tokens to ERC-223 and back if necessary
27.07.2023
[github] Token Standards Converter source code is completed
27.07.2023
[🍿Ongoing] ERC-223 was added to the list of token standards at ethereum.org/en/developers/docs/
25.07.2023
Script that calculates ERC-20 losses automatically is developed. Today $130,000,000 worth of tokens are lost in 49 examined contracts out of 1300 existing token contracts.
18.07.2023
[github] ERC-20 issue was reported to OpenZeppelin. OpenZeppelin refused to do anything with the issue and leaves it in wontfix state.
11.07.2023
[twitter] ERC-223 & ERC-20 compatibility discussion focused on the necessity to support approvals.
10.07.2023
[♛ Ethereum Foundation] The creator of the ERC-20 says he doesn't want to use it in his new project.
5.07.2023
[article] Cryptopolitan announces ERC-223 submission
4.07.2023
[ETH reddit] Known problems of ERC-20 standard article
10.03.2023
UToday is publishing an overview article about ERC-223
7.03.2023
[github] ERC-223 is officially merged as a 'draft' EIP to Ethereum/EIPs
6.03.2023
[github] ERC-223 & ERC-20 Compatible Decentralized Exchange is created
17.06.2022
[etherscan] Comment on Etherscan pointing at a user losing all ERC-20 tokens to a contract unhandled transfer
27.12.2021
[ETH reddit] Breaking changes to ERC-223 standard announcement
17.09.2021
ERC-223 Token Development Services released
25.05.2021
[github] Callisto Network Security Department adopted a practice of describing ERC-20 vulnerabilities and recommending transfer function security restrictions in their reports
25.05.2021
Trust Wallet supports ERC-223 tokens
2.04.2020
[EOS] Dexaran described the ERC-20 standard problems in a comparison to EOS C++ token
31.10.2019
[EOS] EOS C++ token is released. Internal logic of EOS token is similar to ERC-223 tokens.
26.06.2019
FieldCoin article regarding ERC-223 standard
7.5.2018
Cointelligence articles: comparison of ERC-20, ERC-223 and ERC-777 standards
11.02.2018
[ETH reddit] Reminder about ERC-20 security flaws
11.02.2018
[ETH reddit] The total amount of lost ERC-20 tokens reached $1,000,000
27.12.2017
[ETH reddit] User u/cryptoassetmana lost $130,000 due to the known ERC-20 flaw and reported it
23.12.2017
[ethereum.org] Request to stop promoting ERC-20 at the official ethereum.org web page
20.12.2017
[ETH reddit] Notice regarding Raiden and potential ERC-20 problems of state channels
9.11.2017
[QTUM reddit] $260,000 loss caused by ERC-20 flaws was discovered in QTUM contract
12.10.2017
[ETC reddit] ERC-223 compliant multisig wallets
8.10.2017
[♛ Ethereum Foundation] Discussion thread with ENS founder regarding ERC-20 losses and ERC-223 vs approveAndCall()
17.08.2017
[ETH reddit] Reminder about ERC-20 problems on r/ethereum
17.08.2017
Bittrex re-standardized its deposit contracts to accept ERC-223 tokens.
15.08.2017
[STORJ reddit] The first loss of $5000 is discovered in STORJ contract. It happened exactly as I warned the STORJ devs earlier.
11.08.2017
[ETH reddit] First in the world ERC-223 ICO launched
8.07.2017
[ETH reddit] Appeal to token developers on r/ethereum
13.06.2017
[ETH reddit] Description of the ERC-20 problems on r/ethereum
13.06.2017
[ERC-20 discussion thread] Dexarans comment regarding the potential problem of stuck tokens
12.06.2017
[ETH reddit] ENS contract was deployed and instantly became a trap for more ERC-20 tokens
30.05.2017
[ETH reddit] $77000 lost in Gnosis contract
19.05.2017
[☆STORJ reddit☆] Legendary reply from STORJ dev: 'We know our users will lose money but we prefer to err on the side of well tested insecure code'
11.05.2017
[STORJ reddit] STORJ developers were warned about the issue with ERC-20 tokens
11.05.2017
[♛ Ethereum Foundation] Dexaran commented that ERC-20 has security flaw and it caused a loss of funds already.
24.04.2017
[♛ ETH reddit] Discussion with Ethereum Foundation members regarding ERC-223 and lost funds in ERC-20 tokens
20.04.2017
[♛ medium] Vitalik Buterin responded to a question regarding ERC-223 standard
17.04.2017
[ERC-20 thread] Dexarans comment on EIP#20 discussion thread regarding approve() function vulnerability
25.03.2017
[ETH reddit] Where it all started: Attention! Be careful using Ethereum tokens.
21.03.2017
[ETC reddit] First explanation of the difference between ERC-20 and ERC-223
9.03.2017
[ETC reddit] Initial ERC-223 announcement on ETC public media
5.03.2017
[github] Token standard was created and submitted as Ethereum EIP 223
5.03.2017
[github] Reference implementation of ERC-223 token was created
5.03.2017
This is a non-profit project, but donations appreciated:
Donations appreciated:0x2ca1377dfa03577ce5bbb815c98eda1ac7632e7d0x2ca1377dfa0357...8eda1ac7632e7d
GPLv3
Callisto NetworkAudits Callisto NetworkGithub