OceanProtocolEnterprise / ocean-node

Apache License 2.0
0 stars 0 forks source link

Perform audit of the smart contracts #23

Open MBadea17 opened 1 month ago

MBadea17 commented 1 month ago

To be compliant with the Data Act, art 36(2) : "The vendor of a smart contract or, in the absence thereof, the person whose trade, business or profession involves the deployment of smart contracts for others in the context of executing an agreement or part of it, to make data available shall perform a conformity assessment with a view to fulfilling the essential requirements laid down in paragraph 1 and, on the fulfilment of those requirements, issue an EU declaration of conformity."

Art 36(1): ... shall ensure that those smart contracts comply with the following essential requirements of: a) robustness and access control, to ensure that the smart contract has been designed to offer access control mechanisms and a very high degree of robustness to avoid functional errors and to withstand manipulation by third parties; b) safe termination and interruption, to ensure that a mechanism exists to terminate the continued execution of transactions and that the smart contract includes internal functions which can reset or instruct the contract to stop or interrupt the operation, in particular to avoid future accidental executions; c) data archiving and continuity, to ensure, in circumstances in which a smart contract must be terminated or deactivated, there is a possibility to archive the transactional data, smart contract logic and code in order to keep the record of operations performed on the data in the past (auditability); d) access control, to ensure that a smart contract is protected through rigorous access control mechanisms at the governance and smart contract layers; and e) consistency, to ensure consistency with the terms of the data sharing agreement that the smart contract executes.