Smart Contract Reference

​

IGMTokenManager

​

Buying GM Tokens

1. User gets a signed quote (off‑chain)
   • The attestation service prepares a Quote whose side is BUY, signs its EIP‑712 digest, and returns the quote and signature to the user
   • Price is expressed in USD with 18 decimals (e.g., $12.34 →12340000000000000000)
   • Quantity is the number of GM tokens the user wishes to receive
2. User pre‑authorizes USDon or USDC/USDT
   • GMTokenManager must have a sufficient allowance of USDon, USDC (Ethereum) or USDT (BNB Chain) before the call
   • Allowance ≥ price × quantity

     🚧 Notes on USDon

     • USDon will be Ondo’s permissionless ERC20 stablecoin representing USD held in Ondo’s brokerage account (which buys equities/ETFs backing GM tokens). Users can convert stablecoins to USDon with zero slippage by specifying it as the deposit token below.
     • We accept USDC on Ethereum, and USDT on BNB Chain.
     • If you would like to convert stablecoins to USDon directly, outside of a GM token swap, reach out to us and we can provide instructions for our USDonConverter contract.

3. User calls mintWithAttestation(quote, signature, depositToken, depositTokenAmount), which will atomically: Verify the quote
   • Re‑computes the EIP‑712 digest and verifies the signature against the attestation signer
   • Confirm that the caller is whitelisted and their stored userID matches the one received in the quote
   • Ensures the attestationId has not been used and that block.timestamp ≤ expiration
   • Confirms side == BUY
   • Ensure the value of the transaction is greater than minimumDepositUSD but does not exceed per-user and per-token rate limits
   Settle the tokens
   • If the depositToken specified is not USDon, first swap depositTokenAmount for USDon
   • Burns price × quantity of USDon (either after receiving from msg.sender or swapping)
   • Mints quantity of GM tokens to msg.sender
   • Refund USDon to the user if any is leftover
   Post‑process the quote
   • Marks attestationId as consumed to prevent replay
   Return the tokens received
   • receivedGmTokenAmount equals quantity

​

Selling GM Tokens

1. User gets a signed quote (off‑chain)
   • Attestation service issues a Quote whose side is SELL, signs it, and returns quote and signature
   • Price still uses 18‑decimal USD format
   • Quantity is the GM amount the user will sell
2. User pre‑authorizes GM tokens
   • GMTokenManager must have allowance ≥ quantity of the specific GM token (asset) described in the quote
3. User calls redeemWithAttestation(quote, signature, receiveToken, minimumReceiveAmount), which will atomically: Verify the quote
   • Same as subscribe, but checks that side == SELL instead and that the transaction value is greater than minimumRedemptiUSDon
   Settle the tokens
   • Transfers quantity of GM tokens from user to manager and burns them
   • Mints out price × quantity of USDon to the GMTokenManager
   • If the caller specifies a non-USDon token as the receiveToken, it will swap all the USDon received for the receiveToken (note: the call will revert if the swap doesn’t result in >= minimumReceiveAmount being received)
   • All tokens received are transferred to the caller
   Post‑process the quote
   • Marks attestationId as used
   Return the tokens received
   • receivedUSDonAmount equals price × quantity

​

Functions

​

mintWithAttestation

function mintWithAttestation(
    Quote calldata quote,
    bytes memory signature,
    address depositToken,
    uint256 depositTokenAmount
) public override whenMintingNotPaused(quote.asset) returns (uint256);

​

redeemWithAttestation

function redeemWithAttestation(
    Quote calldata quote,
    bytes memory signature,
    address receiveToken,
    uint256 minimumReceiveAmount
) public override whenRedeemNotPaused(quote.asset) returns (uint256);

​

Structs

​

Quote

struct Quote {
    uint256 chainId;
    uint256 attestationId;
    bytes32 userId;
    address asset;
    uint256 price;
    uint256 quantity;
    uint256 expiration;
    QuoteSide side;
    bytes32 additionalData;
}

​

Enums

​

QuoteSide

enum QuoteSide {
    BUY,
    SELL
}

​

IPortfolioTokenManager

​

Buying Portfolio Tokens

1. User gets a signed quote off-chain
   • The attestation service prepares a BUY quote, signs its EIP-712 digest, and returns the quote and signature
   • Price and quantity use 18 decimals
   • Quotes are only available when the full underlying basket is open for trading
2. User pre-authorizes the stablecoin
   • PortfolioTokenManager uses USDC on Ethereum and USDT on BNB Chain, as returned by stablecoin()
   • The manager does not accept USDon or other deposit tokens
   • The allowance must cover ceil((quantity × price / 1e18) / 10^(18 - stablecoin decimals))
   • Mint charges round up to the stablecoin’s native decimals
3. User calls mintWithAttestation(quote, signature), which will atomically: Verify the quote
   • Verifies the EIP-712 signature, caller, userId, chain ID, side, and expiration
   • Confirms the attestationId is unused
   • Confirms the portfolio token is registered, minting is active, and the price passes the oracle check
   • Enforces minimums and rate limits
   Settle the tokens
   • Transfers the stablecoin charge through the token router
   • Mints quote.quantity portfolio tokens to the caller
   Post-process the quote
   • Marks the attestationId as consumed
   Return the tokens received
   • Returns quote.quantity

​

Selling Portfolio Tokens

1. User gets a signed quote off-chain
   • The attestation service prepares a SELL quote, signs its EIP-712 digest, and returns the quote and signature
   • Price and quantity use 18 decimals
   • Quotes are only available when the full underlying basket is open for trading
2. User pre-authorizes the portfolio tokens
   • PortfolioTokenManager must have an allowance of at least quote.quantity for the portfolio token
3. User calls redeemWithAttestation(quote, signature), which will atomically: Verify the quote
   • Verifies the EIP-712 signature, caller, userId, chain ID, side, and expiration
   • Confirms the attestationId is unused
   • Confirms the portfolio token is registered, redemption is active, and the price passes the oracle check
   • Enforces the minimum redemption value and rate limits
   Settle the tokens
   • Transfers quote.quantity portfolio tokens from the caller and burns them
   • Pays the chain’s stablecoin through the token router
   • Rounds the payment down to the stablecoin’s native decimals
   Post-process the quote
   • Marks the attestationId as consumed
   Return the tokens received
   • Returns the stablecoin amount paid in its native decimals

​

Functions

​

mintWithAttestation

function mintWithAttestation(
    Quote calldata quote,
    bytes memory signature
) external override nonReentrant whenMintingNotPaused(quote.asset) returns (uint256);

​

redeemWithAttestation

function redeemWithAttestation(
    Quote calldata quote,
    bytes memory signature
) external override nonReentrant whenRedeemNotPaused(quote.asset) returns (uint256);

​

Structs

​

Quote

bytes32 public constant QUOTE_TYPEHASH = keccak256(
    "Quote(uint256 chainId,uint256 attestationId,bytes32 userId,address asset,uint256 price,uint256 quantity,uint256 expiration,uint8 side,bytes32 additionalData)"
);

​

Enums

​

QuoteSide

​

Contract Addresses