register / unregister tokens for the user requires a 1 yN deposit to prevent access keys whitelisted tokens.
swap function supports 0 attached deposit, but all tokens must be already registered or globally whitelisted.
Note: this still allows potential issues with trading over pools that have 100% of fee as smart contract allows to trade on any pool that has whitelisted tokens.
Is this still an issue? Should there be a list of whitelisted pools for access key? Or alternatively can just add a limit on the fee that access key can trade with?
Two changes:
swapfunction supports 0 attached deposit, but all tokens must be already registered or globally whitelisted.Note: this still allows potential issues with trading over pools that have 100% of fee as smart contract allows to trade on any pool that has whitelisted tokens.
Is this still an issue? Should there be a list of whitelisted pools for access key? Or alternatively can just add a limit on the fee that access key can trade with?