Enhancing DeFi: Temporary ERC-20 Approvals for Improved Security and Cost Efficiency

The decentralized finance (DeFi) landscape is poised for a transformative shift with the introduction of temporary ERC-20 approvals, a new mechanism aimed at enhancing security and lowering transaction costs. This innovation, enabled by Ethereum's recent Cancun upgrade, leverages transient storage to offer a safer and more cost-effective approach to DeFi transactions, according to circle.com.

Understanding Temporary ERC-20 Approvals

Temporary Approve, or ERC-7674, is a proposed extension to the ERC-20 token standard, designed to address security vulnerabilities and high gas fees prevalent in current DeFi practices. Traditional ERC-20 approvals often leave users' balances exposed to potential exploits, as approvals remain active until explicitly revoked. In contrast, temporary approvals are valid for a single transaction, significantly reducing exposure to approved contracts.

The Role of Transient Storage

The Cancun upgrade, implemented on March 13, 2024, introduced transient storage opcodes, namely "TSTORE" and "TLOAD." These opcodes function similarly to their persistent counterparts but discard storage values at the transaction's end. This temporary nature not only enhances security but also makes transient storage considerably cheaper, with gas costs reduced to a fraction of traditional storage methods.

Challenges with Existing ERC-20 Approvals

Current ERC-20 approvals, governed by the standard protocol, persist beyond the initial transaction, posing significant risks. Historical data from revoke.cash indicates that approximately $417 million has been stolen since 2020 due to token approval exploits. In addition to security concerns, the need for multiple transactions in DeFi actions contributes to inefficiencies in user experience.

Innovations and Alternatives

In response to these challenges, ERC-1363 was proposed to streamline DeFi transactions by integrating token transfers with contract calls. However, its adoption requires significant changes to both ERC-20 tokens and DeFi contracts, limiting its immediate applicability. Temporary Approve, on the other hand, offers compatibility with existing protocols while mitigating security risks and reducing approval costs.

Implementation and Future Prospects

Currently, Temporary Approve is primarily accessible to smart contract accounts, with future potential for externally owned accounts (EOAs) through EIP-7702. This upcoming enhancement aims to enable EOAs to perform multiple operations within a single transaction, aligning with the goals of temporary approvals. Once integrated into Ethereum's Pectra hard fork, this feature promises to further streamline DeFi interactions.

The blockchain community is invited to contribute to the ongoing development of ERC-7674. Developers and token issuers interested in integrating temporary approvals are encouraged to participate in discussions and provide feedback on the Ethereum Magicians forum.