Would like to implement ERC 865 (pay transfer fees with token instead of eth) or similar functionality in my smart contract. Is ERC 865 safe and audited currently? If not, is there any implementation out there that is safe to use?

Have been searching few similar implementation online and it seems that all of them has security issue. Glad to know if anyone actually use it on mainnet.

  • 1
    Honestly, even if one implementation was "safe" to use, highly likely that there are some security issues. In my opinion it would be best not to take the rest. Not aware of any "safe" contracts, I would trust a known flawed contracts rather than a unknown contract with no flaws because bugs are everywhere.
    – GrandFleet
    Oct 1, 2018 at 4:24

1 Answer 1


Safe is a very relative term here that has different meaning to different people. ERC 865 has got a lot of attention recently, and is (likely) on the safer side of the wall.

With that said, it is not accepted as a standard and may have some issues or vulnerabilities.

bokkypoobah created an implementation on February 2nd, 2018. It has been in the wild for almost 8 months now. On May 1st, 2018, he fixed a bug that was found after people began using it in production. You will see that people have continued to use and improve upon this implementation, but it has not yet been solidified.

  • Please note that ERC865 reference code currently (Jan 25 2019) has a vulnerability where the signed signature can be replayed Jan 24, 2019 at 17:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.