2

To accept payments in ether myself, I first tried how others have implemented it. So I bought an item in a store that uses Coinbase Commerce to accept crypto payments and paid for my item with ether. Here is my payment transaction: https://etherscan.io/tx/0x229fc693785f97f905f9db953800edca58cced706592684d5f24ca9b69d80dac

At the moment I made this transaction, etherscan was showing the recipient address 0x6a173337f2bb7ad85c011dda499ab9cfc1016461 as a regular (external) address that has just received my payment and had the ether on its balance.

But 8 minutes (37 blocks) later a series of internal transactions appeared: https://etherscan.io/address/0x6a173337f2bb7ad85c011dda499ab9cfc1016461/advanced#internaltx

Which included the contract creation and a transfer of the funds to another address. Here is the parent transaction: https://etherscan.io/tx/0xc05d18302cf9363c858cea9068f1ba88827ef5b0d446553c44c5c9cab282c693

My question is: how could a contract be created on an existing address that was previously used as external? And what exactly has happened there in general? Does anyone understand such a scheme works under the hood? Any clues are highly appreciated, thanks!

2

Looks like the answer to your question is CREATE2. This is an EVM opcode that was created to allow contracts to be created deterministically, (other people use the term 'counterfactually')

It's a fairly complicated topic. One link is here: https://hackernoon.com/using-ethereums-create2-nw2137q7 but there are many you could check out.

Perhaps most simply put, it means that you can determine in advance the address that a new contract will be deployed to (which is much harder in the case of 'CREATE') - and this means that funds could be sent to the contract in advance of the contract actually being deployed.

Your use of the word "External" is perhaps misleading you here. All you did is send your funds to an address. And those funds can only be used by someone that knows the private key of the address, or a contract deployed to that address. Here - this is the second case - all that happened is that the contract was deployed afterwards.

| improve this answer | |
  • What is the business benefit for Coinbase Commerce to provision a smart contract to these addresses, as they still need to help the private key to move funds forward (or deploy a contract in the first place)? – Mikko Ohtamaa May 11 at 16:44
  • 1
    that's a good question. I'm not sure I know the answer. If you look at the contract code they deployed, it's literally the smallest thing you could write - allowing the owner of the contract to call DELEGATECALL. Does seem somewhat odd. Maybe it's just them being super paranoid about hot wallets. Which probably isn't a bad thing, although I don't see exactly how this helps... – Zakalwe May 11 at 18:46
  • 1
    Thanks a lot Zakalwe! – Roman Vinogradov May 12 at 7:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.