Announcements

On Sunday May 2nd, 2021, the Fei Labs team identified an economic vulnerability that affected the Fei Protocol, which would have allowed an attacker to drain funds from the ETH-FEI Uniswap pool. The team immediately paused the relevant functionality, and no funds were lost. The Fei team reached out to the OpenZeppelin team, and we worked together to ensure a secure fix for the issue was found.

This new release introduces UUPS proxies as a cheaper alternative to Transparent proxies. Additionally, a new ERC20 extension allows easy creation of tokens with built-in flash minting, and a new small utility contract provides a function batching mechanism that requires no extra work to set up. Read on to learn more!

Contracts Wizard is an interface to interactively build a contract out of components from OpenZeppelin Contracts. Select the kind of contract that you want (current support for ERC20 and ERC721), set your parameters and desired features (token name, symbol, premint amount, access control, etc.), and Wizard will generate all of the code necessary.

Due to the new built-in overflow checks in Solidity 0.8, which mark the end of the `SafeMath` era, this release of OpenZeppelin Contracts is a new major version of the library.

Today we are announcing the release of a new app, called Sentinels, to help prevent ongoing attacks and exploits in the DeFi space. The app is part of the OpenZeppelin Defender platform, a security operations suite for Ethereum already being used by leading DeFi and NFT teams such as Opyn, Synthetix, TheGraph, PoolTogether, Yearn.Finance, Foundation Labs, and dYdX.

We are excited to bring you many new Defender features this month that add powerful functionality to your security operations - all fully included in your Defender account. We built Defender to provide you with a comprehensive platform to automate your smart contract operations, and with these updates you will be able to ship products faster than ever before with built-in security.

OpenZeppelin Contracts 3.4 includes an ERC777 security fix for potential reentrancy issues in custom ERC777 extension, virtual view functions, ERC20 permit in drafts, Beacon proxy, and a Minimal Proxy (Clones) library.

Ship faster with lower risk. Automate your Ethereum operations to deliver high-quality products faster with less risk to users.

The State of Smart Contract Upgrades - 2020 edition
A survey of the different Ethereum smart contract upgrade patterns and strategies from a technical viewpoint, plus a set of good practices and recommendations for upgrades management and governance.

We have partnered with Truffle, Nomic Labs (buidler) and Gnosis Safe to release two plugins and a new app to securely deploy and manage upgradeable smart contracts.