We are pleased to announce the integration of the sCrypt smart contract verification plugin on WhatsOnChain . This plugin allows anyone to submit and verify sCrypt code for deployed smart contracts.
Smart contract verification
Before interacting with a smart contract, users need to ensure that the smart contract does what it claims to do. In theory, everyone can view the contract and verify its logic because it is fully on-chain. In practice, however, this quickly becomes nearly impossible for any non-simple contract. This is because the contract on the chain is the underlying bytecode, called a script, which is difficult to understand and reason about.
Smart contract verification matches a smart contract’s high-level language source code (such as sCrypt) to its on-chain script. It recompiles the smart contract source code into a script and compares it with the on-chain script. If they are the same, the contract verification is successful.
After verification, anyone can read the smart contract in sCrypt and easily verify its business logic. Since the contract is immutable and cannot be tampered with after deployment, it remains trustless and transparent, arguably the most important prerequisite for smart contracts.
Releasing the source code of a smart contract also allows multiple parties to independently review it and identify potential security vulnerabilities.
How to verify smart contracts on WhatsOnChain
To verify a deployed smart contract on WhatsOnChain, you can open its deployment transaction and navigate to the sCrypt plugin tab. You paste the smart contract code and click submit.
The plugin checks if the source code compiles to the same script as in the transaction. If yes, the smart contract has been verified!
Acknowledgments
We would like to thank the WhatsOnChain team for their support, especially Liam Missin and Muhammad Raza. Their plug-in system can flexibly provide metadata for various on-chain data.