Common Pitfalls

This page aggregates known pitfalls called out in the tests.

• AccessControlGrants

  • should still allow decrypting previously obtained ciphertext after revocation

• AntiPatternMissingAllowThis

  • should fail when reusing a handle without allowThis

• AntiPatternMissingUserAllow

  • fails to decrypt when FHE.allow(user) is missing

• AntiPatternViewOnEncrypted

  • returns an encrypted handle even in a view call

• EncryptedAgeVerification

  • should revert when granting access before computing a result

  • should not allow verifier to decrypt without explicit grant

  • should not allow public decrypt before publishing

• ERC7984ERC20WrapperExample

  • should reject wrapping for non-KYC users

  • should not allow public decrypt of confidential balances

• ERC7984KycRestricted

  • should reject minting to non-KYC accounts

  • should revert transfers to non-KYC recipients

• ERC7984ObserverAccessExample

  • should not grant future access after observer removal, but old ciphertext stays decryptable

• InputProofsExplained

  • rejects a proof bound to a different sender

  • rejects a proof bound to a different contract

• PublicDecryptSingleValue

  • should not allow public decrypt before publishing

• SwapERC7984ToERC20

  • should revert swap if operator approval is missing

  • should revert when omitting allowTransient for the token

• SwapERC7984ToERC7984

  • should revert if operator approval is missing

  • should revert if omitting allowTransient for the toToken

  • should revert if omitting allowTransient for the fromToken

• TransientAccessControl

  • should revert when the registry does not grant transient permission

  • should show that cached handles outlive transient permissions