Dev Board
🎖️

Dev Board

Stack

Smart Contracts
Solidity, Hardhat
Backend
NodeJS, Express, TypeScript
Frontend
React, TypeScript

Repositories

Architecture & Design

NFT Mints - Interface
Front end feedback
SMS Wallet Interface

Discussion

SMS

Does Harmony have a preferred SMS sending app? I have experience with SNS but happy to learn/integrate another platform if preferred.

A little confused on where the SMS interface starts and ends. How much can the user do via SMS? Are there limits?

What does the migration from SMS-only to SMS + web look like?

Security

Need to discuss security considerations, especially if sending private key (or reference thereof) via SMS. What does user flow look like if SMS has only reference to private key? How do they access their account?

Where is the private key stored? Hard to do SMS onboarding in conjunction with client-side generation — since the SMS is ultimately server-side by design. Also not entirely comfortable sending private key (that may form the foundation of a wallet that stores many other tokens/etc) over such an insecure channel.

Multisig

Does this need to be a generic multisig or only handle the NFT dapp? If only our app, it can be built into the NFT smart contract template.

Note that most exchanges have issues receiving ONE from smart contracts (originally brought up during call with Aaron).

Claiming / Wallet Creation

Option 1 we generate a wallet for each user. Essentially send the private key to them via text, and send the NFT to corresponding address. We then save that public address in our database associated with a phone number. I don't like this because one way or another the actual private key is sent over sms (insecure and probably logged somewhere) and if they start using that wallet we created for other things.... Weird to me.

Option two, it's stored in a smart contract. We issue a claim code. If they get into crypto, they can use the claim code and our website to move the NFT from smart contract to their address. I like this better because we never took ownership of creating a wallet -- all user driven. Never responsible for more than the NFT.

Would work kinda like tornado cash -- where you enter a specific "note" to claim your NFT. Anyone with the note can claim the NFT.

Process Flow - Minting through SMS (open for discussion)
  • SMS - API - Gateway : sending SMS to user (receive SMS?)
  • Minter - API - Gateway : minting token to user when payment hook received from Stripe
  • Web App - web socket to receive mint status notifications
  • Minter > SMS to notify users’ on successful mint
image
7/27 Meeting
  • Do we allow re-listing and selling
  • “Profile page” is not a profile, just gallery listing until a future listing