A standard interface for tokens that support chargebacks, theft prevention, and lost & found resolutions.
Abstract
The following standard allows for the implementation of a standard API for tokens extending ERC-20 or ERC-791. This standard provides basic functionality to recover stolen or lost accounts, as well as provide for the chargeback of tokens.
Motivation
To mitigate the effects of reasonably provable token or asset loss or theft and to help resolve other conflicts. Ethereum’s protocol should not be modified because of loss, theft, or conflicts, but it is possible to solve these problems in the smart contract layer.
Specification
RecoverableToken
Methods
claimLost
Reports the lostAccount address as being lost. MUST trigger the AccountClaimedLost event.
After the time configured in getLostAccountRecoveryTimeInMinutes the implementer MUST provide a mechanism for determining the correct owner of the tokens held and moving the tokens to a new account.
Account recoveries must trigger the AccountRecovered event.
Reports the msg.sender’s account as being not being lost. MUST trigger the AccountClaimedLostCanceled event.
MUST fail if an account recovery process has already begun.
Otherwise, this method MUST stop a dispute from being started to recover funds.
functionclaimLost()returns(boolsuccess)
reportStolen
Reports the current address as being stolen. MUST trigger the AccountFrozen event.
Successful calls MUST result in the msg.sender’s tokens being frozen.
The implementer MUST provide a mechanism for determining the correct owner of the tokens held and moving the tokens to a new account.
Account recoveries must trigger the AccountRecovered event.
functionreportStolen()returns(boolsuccess)
chargeback
Requests a reversal of transfer on behalf of msg.sender.
The implementer MUST provide a mechanism for determining the correct owner of the tokens disputed and moving the tokens to the correct account.
MUST comply with sender’s chargeback window as value configured by setPendingTransferTimeInMinutes.
A record of an account being frozen. MUST trigger when an account is frozen.
eventAccountFrozen(addressindexedreported)
Rationale
A recoverable token standard can provide configurable safety for users or contracts who desire this safety.
Implementations of this standard will give users the ability to select a dispute resolution process on an opt-in basis and benefit the community by decreasing the necessity of consideration of token recovery actions.