Solidity Cheatsheet and Best practices

Motivation

This document is a cheatsheet for Solidity that you can use to write Smart Contracts for Ethereum based blockchain.

This guide is not intended to teach you Solidity from the ground up, but to help developers with basic knowledge who may struggle to get familiar with Smart Contracts and Blockchain because of the Solidity concepts used.

Note: If you have basic knowledge in JavaScript, it is more easy to learn Solidity.

Table of contents

• Solidity Cheatsheet
  • Motivation
  • Table of contents
  • Version pragma
  • Import files
  • Types
    • Boolean
    • Integer
    • Address
      • balance
      • transfer and send
      • call
      • delegatecall
      • callcode
    • Array
    • Fixed byte arrays
    • Dynamic byte arrays
    • Enum
    • Struct
    • Mapping
  • Expressions and Control Structures
  • Functions
    • Structure
    • Access modifiers
    • Function type
    • Function Modifier
    • View or Constant Functions
    • Pure Functions
    • Payable Functions
    • Fallback Function
  • Abstract Contracts
  • Interface
  • Events
  • Library
  • Using - For
  • Error Handling
  • Global variables
    • Block variables
    • Transaction variables
    • Mathematical and Cryptographic Functions
    • Contract Related
• Security
• Best practices

Version pragma

pragma solidity ^0.4.18; will compile with a compiler version > 0.4.0 and < 0.5.0.

Import files

import "filename";

import * as symbolName from "filename"; or import "filename" as symbolName;

import {symbol1 as alias, symbol2} from "filename";

Types

Boolean

bool : true or false

Operators:

• Logical : ! (logical negation), && (AND), || (OR)
• Comparisons : == (equality), != (inequality)

Integer

Unsigned : uint8 | uint16 | uint32 | uint64 | uint128 | uint256(uint)

Signed : int8 | int16 | int32 | int64 | int128 | int256(uint)

Operators:

• Comparisons: <=, <, ==, !=, >= and >
• Bit operators: &, |, ^ (bitwise exclusive or) and ~ (bitwise negation)
• Arithmetic operators: +, -, unary -, unary +, *, /, %, ** (exponentiation), << (left shift) and >> (right shift)

Address

address: Holds an Ethereum address (20 byte value).

Operators:

• Comparisons: <=, <, ==, !=, >= and >

Methods:

balance

• <address>.balance (uint256): balance of the Address in Wei

transfer and send

• <address>.transfer(uint256 amount): send given amount of Wei to Address, throws on failure
• <address>.send(uint256 amount) returns (bool): send given amount of Wei to Address, returns false on failure

call

• <address>.call(...) returns (bool): issue low-level CALL, returns false on failure

delegatecall

• <address>.delegatecall(...) returns (bool): issue low-level DELEGATECALL, returns false on failure

Delegatecall uses code of the target address and all other aspects (storage, balance, ...) are taken from the calling contract. The purpose of delegatecall is to use library code which is stored in another contract. The user has to ensure that the layout of storage in both contracts is suitable for delegatecall to be used.

contract A {
  uint value;
  address public sender;
  address a = "0x"; // address of contract B
  function makeDelegateCall(uint _value) {
    a.delegatecall(bytes4(keccak256("setValue(uint)")), _value); // Value of A is modified
  }
}

contract B {
  uint value;
  address public sender;
  setValue(uint _value) {
    value = _value;
    sender = msg.sender; // msg.sender is preserved in delegatecall. It was not available in callcode.
  }
}

gas() option is available for call, callcode and delegatecall. value() option is not supported for delegatecall.

callcode

• <address>.callcode(...) returns (bool): issue low-level CALLCODE, returns false on failure

Prior to homestead, only a limited variant called callcode was available that did not provide access to the original msg.sender and msg.value values.

Array

Arrays can have fixed size or they can be dynamic.

uint[] dynamicSizeArray;

uint[7] fixedSizeArray;

Fixed byte arrays

bytes1(byte), bytes2, bytes3, ..., bytes32.

Operators:

Comparisons: <=, <, ==, !=, >=, > (evaluate to bool) Bit operators: &, |, ^ (bitwise exclusive or), ~ (bitwise negation), << (left shift), >> (right shift) Index access: If x is of type bytesI, then x[k] for 0 <= k < I returns the k th byte (read-only).

Members

• .length : read-only

Dynamic byte arrays

bytes: Dynamically-sized byte array. It is similar to byte[], but it is packed tightly in calldata. Not a value-type!

string: Dynamically-sized UTF-8-encoded string. It is equal to bytes but does not allow length or index access. Not a value-type!

Enum

Enum works just like every other language.

enum ActionChoices { 
  GoLeft, 
  GoRight, 
  GoStraight, 
  SitStill 
}

ActionChoices choice = ActionChoices.GoStraight;

Struct

New types can be declared using struct.

struct Funder {
    address addr;
    uint amount;
}

Funder funders;

Mapping

Declared as mapping(_KeyType => _ValueType)

Mappings can be seen as hash tables which are virtually initialized such that every possible key exists and is mapped to a value.

key can be almost any type except for a mapping, a dynamically sized array, a contract, an enum and a struct. value can actually be any type, including mappings.

Expressions and Control Structures

comming soon

Functions

Structure

function (<parameter types>) {internal|external|public|private} [pure|constant|view|payable] [returns (<return types>)]

Access modifiers

• public - Accessible from this contract, inherited contracts and externally
• private - Accessible only from this contract
• internal - Accessible only from this contract and contracts inheriting from it
• external - Cannot be accessed internally, only externally. Recommended to reduce gas. Access internally with this.f.

Function type

Pass function as a parameter to another function. Similar to callbacks and delegates

pragma solidity ^0.4.18;

contract Oracle {
  struct Request {
    bytes data;
    function(bytes memory) external callback;
  }
  Request[] requests;
  event NewRequest(uint);
  function query(bytes data, function(bytes memory) external callback) {
    requests.push(Request(data, callback));
    NewRequest(requests.length - 1);
  }
  function reply(uint requestID, bytes response) {
    // Here goes the check that the reply comes from a trusted source
    requests[requestID].callback(response);
  }
}

contract OracleUser {
  Oracle constant oracle = Oracle(0x1234567); // known contract
  function buySomething() {
    oracle.query("USD", this.oracleResponse);
  }
  function oracleResponse(bytes response) {
    require(msg.sender == address(oracle));
  }
}

Function Modifier

Modifier can automatically check a condition prior to executing the function.

modifier onlyOwner {
    require(msg.sender == owner);
    _;
}

function close() onlyOwner {
    selfdestruct(owner);
}

View or Constant Functions

Functions can be declared view or constant in which case they promise not to modify the state.

function f(uint a) view returns (uint) {
    return a * b;
}

The compiler does not enforce yet that a view method is not modifying state.

Pure Functions

Functions can be declared pure in which case they promise not to read from or modify the state.

function f(uint a) pure returns (uint) {
    return a * 42;
}

Payable Functions

Functions that receive Ether are marked as payable function.

Fallback Function

A contract can have exactly one unnamed function. This function cannot have arguments and cannot return anything. It is executed on a call to the contract if none of the other functions match the given function identifier (or if no data was supplied at all).

function() {
  // Do something
}

Abstract Contracts

Contracts that contains implemented and non-implemented functions. Such contracts cannot be compiled, but they can be used as base contracts.

pragma solidity ^0.4.0;

contract A {
    function C() returns (bytes32);
}

contract A is B {
    function C() returns (bytes32) { return "c"; }
}

Interface

Interfaces are similar to abstract contracts, but they have restrictions:

• Cannot have any functions implemented.
• Cannot inherit other contracts or interfaces.
• Cannot define constructor.
• Cannot define variables.
• Cannot define structs.
• Cannot define enums.

pragma solidity ^0.4.11;

interface Token {
    function transfer(address recipient, uint amount);
}

Events

Events allow the convenient usage of the EVM logging facilities, which in turn can be used to “call” JavaScript callbacks in the user interface of a dapp, which listen for these events.

Up to three parameters can receive the attribute indexed which will cause the respective arguments to be searched for

All non-indexed arguments will be stored in the data part of the log.

pragma solidity ^0.4.0;

contract ClientReceipt {
    event Deposit(
        address indexed _from,
        bytes32 indexed _id,
        uint _value
    );

    function deposit(bytes32 _id) payable {
        Deposit(msg.sender, _id, msg.value);
    }
}

Library

Libraries are similar to contracts, but their purpose is that they are deployed only once at a specific address.

Using - For

Comming soon

Error Handling

• assert(bool condition): throws if the condition is not met - to be used for internal errors.
• require(bool condition): throws if the condition is not met - to be used for errors in inputs or external components.
• revert(): abort execution and revert state changes

Global variables

Block variables

• block.blockhash(uint blockNumber) returns (bytes32): hash of the given block - only works for 256 most recent blocks excluding current
• block.coinbase (address): current block miner’s address
• block.difficulty (uint): current block difficulty
• block.gaslimit (uint): current block gaslimit
• block.number (uint): current block number
• block.timestamp (uint): current block timestamp as seconds since unix epoch
• now (uint): current block timestamp (alias for block.timestamp)

Transaction variables

• msg.data (bytes): complete calldata
• msg.gas (uint): remaining gas
• msg.sender (address): sender of the message (current call)
• msg.sig (bytes4): first four bytes of the calldata (i.e. function identifier)
• msg.value (uint): number of wei sent with the message
• tx.gasprice (uint): gas price of the transaction
• tx.origin (address): sender of the transaction (full call chain)

Mathematical and Cryptographic Functions

• addmod(uint x, uint y, uint k) returns (uint): compute (x + y) % k where the addition is performed with arbitrary precision and does not wrap around at 2**256.
• mulmod(uint x, uint y, uint k) returns (uint): compute (x * y) % k where the multiplication is performed with arbitrary precision and does not wrap around at 2**256.
• keccak256(...) returns (bytes32): compute the Ethereum-SHA-3 (Keccak-256) hash of the (tightly packed) arguments
• sha256(...) returns (bytes32): compute the SHA-256 hash of the (tightly packed) arguments
• sha3(...) returns (bytes32): alias to keccak256
• ripemd160(...) returns (bytes20): compute RIPEMD-160 hash of the (tightly packed) arguments
• ecrecover(bytes32 hash, uint8 v, bytes32 r, bytes32 s) returns (address): recover the address associated with the public key from elliptic curve signature or return zero on error (example usage)

Contract Related

• this (current contract’s type): the current contract, explicitly convertible to Address
• selfdestruct(address recipient): destroy the current contract, sending its funds to the given Address
• suicide(address recipient): alias to selfdestruct. Soon to deprecate.

Security

comming soon

Best practices

comming soon