Synopsis
Learn about what the token Transfer module isWhat is the Transfer module?
Transfer is the Cosmos SDK implementation of the ICS-20 protocol, which enables cross-chain fungible token transfers.Concepts
Acknowledgements
ICS20 uses the recommended acknowledgement format as specified by ICS 04. A successful receive of a transfer packet will result in a Result Acknowledgement being written with the value[]byte{byte(1)}
in the Response
field.
An unsuccessful receive of a transfer packet will result in an Error Acknowledgement being written
with the error message in the Response
field.
Denomination trace
The denomination trace corresponds to the information that allows a token to be traced back to its origin chain. It contains a sequence of port and channel identifiers ordered from the most recent to the oldest in the timeline of transfers.When using transfer with IBC v2 connecting to e.g. Ethereum, the source
channel identifier will be the source client identifier instead.
transfer/channelToA/uatom
will be displayed
as ibc/7F1D3FCF4AE79E1554D670D1AD949A9BA4E4A3C76C63093E17E446A46061A7A2
. The human readable denomination
is stored using x/bank
module’s denom metadata
feature. You may display the human readable denominations by querying balances with the --resolve-denom
flag, as in:
UX suggestions for clients
For clients (wallets, exchanges, applications, block explorers, etc) that want to display the source of the token, it is recommended to use the following alternatives for each of the cases below:Direct connection
If the denomination trace contains a single identifier prefix pair (as in the example above), then the easiest way to retrieve the chain and light client identifier is to map the trace information directly. In summary, this requires querying the channel from the denomination trace identifiers, and then the counterparty client state using the counterparty port and channel identifiers from the retrieved channel. A general pseudo algorithm would look like the following:- Query the full denomination trace.
- Query the channel with the
portID/channelID
pair, which corresponds to the first destination of the token. - Query the client state using the identifiers pair. Note that this query will return a
"Not Found"
response if the current chain is not connected to this channel. - Retrieve the client identifier or chain identifier from the client state (eg: on Tendermint clients) and store it locally.
ibc/7F1D3FCF4AE79E1554D670D1AD949A9BA4E4A3C76C63093E17E446A46061A7A2
stored on chainB
:
GET /ibc/apps/transfer/v1/denom_traces/7F1D3FCF4AE79E1554D670D1AD949A9BA4E4A3C76C63093E17E446A46061A7A2
->{"path": "transfer/channelToA", "base_denom": "uatom"}
GET /ibc/apps/transfer/v1/channels/channelToA/ports/transfer/client_state"
->{"client_id": "clientA", "chain-id": "chainA", ...}
GET /ibc/apps/transfer/v1/channels/channelToA/ports/transfer"
->{"channel_id": "channelToA", port_id": "transfer", counterparty: {"channel_id": "channelToB", port_id": "transfer"}, ...}
GET /ibc/apps/transfer/v1/channels/channelToB/ports/transfer/client_state" -> {"client_id": "clientB", "chain-id": "chainB", ...}
uatom
denomination would be: chainA
-> chainB
.
Multiple hops
The multiple channel hops case applies when the token has passed through multiple chains between the original source and final destination chains. The IBC protocol doesn’t know the topology of the overall network (i.e connections between chains and identifier names between them). For this reason, in the multiple hops case, a particular chain in the timeline of the individual transfers can’t query the chain and client identifiers of the other chains. Take for example the following sequence of transfersA -> B -> C
for an IBC token, with a final prefix path (trace info) of transfer/channelChainC/transfer/channelChainB
. What the paragraph above means is that even in the case that chain C
is directly connected to chain A
, querying the port and channel identifiers that chain B
uses to connect to chain A
(eg: transfer/channelChainA
) can be completely different from the one that chain C
uses to connect to chain A
(eg: transfer/channelToChainA
).
Thus the proposed solution for clients that the IBC team recommends are the following:
- Connect to all chains: Connecting to all the chains in the timeline would allow clients to perform the queries outlined in the direct connection section to each relevant chain. By repeatedly following the port and channel denomination trace transfer timeline, clients should always be able to find all the relevant identifiers. This comes at the tradeoff that the client must connect to nodes on each of the chains in order to perform the queries.
- Relayer as a Service (RaaS): A longer term solution is to use/create a relayer service that
could map the denomination trace to the chain path timeline for each token (i.e
origin chain -> chain #1 -> ... -> chain #(n-1) -> final chain
). These services could provide merkle proofs in order to allow clients to optionally verify the path timeline correctness for themselves by running light clients. If the proofs are not verified, they should be considered as trusted third parties services. Additionally, client would be advised in the future to use RaaS that support the largest number of connections between chains in the ecosystem. Unfortunately, none of the existing public relayers (in Golang and Rust), provide this service to clients.
The only viable alternative for clients (at the time of writing) to tokens
with multiple connection hops, is to connect to all chains directly and
perform relevant queries to each of them in the sequence.
Locked funds
In some exceptional cases, a client state associated with a given channel cannot be updated. This causes that funds from fungible tokens in that channel will be permanently locked and thus can no longer be transferred. To mitigate this, a client update governance proposal can be submitted to update the frozen client with a new valid header. Once the proposal passes the client state will be unfrozen and the funds from the associated channels will then be unlocked. This mechanism only applies to clients that allow updates via governance, such as Tendermint clients. In addition to this, it’s important to mention that a token must be sent back along the exact route that it took originally in order to return it to its original form on the source chain (eg: the Cosmos Hub for theuatom
). Sending a token back to the same chain across a different channel will
not move the token back across its timeline. If a channel in the chain history closes before the
token can be sent back across that channel, then the token will not be returnable to its original
form.
Security considerations
For safety, no other module must be capable of minting tokens with theibc/
prefix. The IBC
transfer module needs a subset of the denomination space that only it can create tokens in.