Coinbase Listing - enderphan94/solidity-pentest GitHub Wiki

Steps:

  1. Determine if your coin meets Coinbase's digital asset framework: Coinbase has a strict set of criteria for listing new digital assets on its platform. Your coin should meet these requirements to be considered for listing. Some of these criteria include security, compliance, and market demand.
  2. Apply to Coinbase for listing: If you believe that your coin meets Coinbase's digital asset framework, you can apply to Coinbase for listing. You'll need to provide detailed information about your coin, including its technical specifications, market data, and legal compliance.
  3. Wait for Coinbase to review your application: Coinbase receives a large number of requests for listing, so it may take several weeks or even months to review your application. Coinbase will evaluate your application based on its digital asset framework and other factors.
  4. Provide additional information if requested: Coinbase may request additional information from you during the review process. It's important to respond to these requests promptly and thoroughly.
  5. Complete any necessary legal and regulatory requirements: If Coinbase approves your application, you'll need to complete any necessary legal and regulatory requirements before your coin can be listed. This may include registering with relevant regulatory agencies or obtaining legal opinions.
  6. Launch on Coinbase: Once you've completed all the necessary steps, your coin will be launched on Coinbase.

Adds-on

  1. Building a strong community: Coinbase pays attention to the strength of a coin's community. Coins with active and engaged communities are more likely to be listed on Coinbase. This can be achieved through social media engagement, marketing efforts, and building partnerships.
  2. Demonstrating use case and value: Coins that have a clear use case and provide value to users are more likely to be listed on Coinbase. This can be demonstrated through partnerships with businesses or adoption by individuals. Positive reputation: Coins with a positive reputation are more likely to be listed on Coinbase. This can be achieved by maintaining transparency and communication with the community, avoiding scams, and following industry best practices.
  3. Legal compliance: Coins that comply with legal regulations and have a clear legal status are more likely to be listed on Coinbase. Coins that are seen as being potentially illegal or associated with illegal activities are less likely to be listed.

Best practices

Category Things to avoid Solutions
Investment or profit The developer or issuer team has made claims about the asset being an investment or a security, or that users or holders will see a rise in price or return on investment in the asset
Initial tokens were distributed in a sales or offering event to users (in exchange for fiat or other crypto).
The platform associated with the asset lacks a real or supportable use.
The application doesn’t include information on UBOs (Ultimate Beneficial Owners), executives, or key individuals associated with the project.
Information on sources and fundraising methods in the application is limited or conflicting.
The project has close association with prohibited categories of businesses as defined in Appendix 1 of our User Agreement. (https://www.coinbase.com/legal/user_agreement/united_states)
Superuser privileges Many assets implement privileged roles that have the ability to unilaterally take administrative actions, such as arbitrarily changing network functionality or seizing user funds. If misused, many of these privileges threaten Coinbase’s ability to safely custody customers’ assets, lowering the likelihood that Coinbase would list the token. Coinbase prefers to see asset issuers follow the principle of “least privilege,” where privileged roles are scoped as narrowly as possible to the minimum required functionality. This includes situations where asset issuers renounce privileges that are no longer critical. In cases where these privileges cannot be eliminated, we prefer that asset issuers provide detailed policies and procedures for quorum-based key management and use, especially for actions that impact user balances. Ideally, keys would be held by a qualified custodian that can certify that the quorum is met before the role is able to take action.
Degree of centralization The network has centrally controlled nodes or validators that can collude to influence the state of the blockchain.
A central team is in control of enabling or maintaining the platform’s functionality or code, with few to no contributions from unaffiliated third-party developers.
The keys necessary to perform privileged actions like pausing transactions, modifying token balances, or completely changing the token’s logic are controlled by a single individual or held in a single system.
The project’s core team owns a significant percentage of the asset which can be used in community governance to force a vote decision. Similarly, too much of the asset share controlled by one party in a proof-of-stake blockchain will increase the risk of that party tampering with mined blocks. This could result in censorship or double spending.
Novel and unverified code The source code is private or, for Ethereum projects, not verifiable through Etherscan. Without access to source code, an auditor or security engineer cannot easily analyze the token’s behavior, precluding high-confidence reviews and causing significant delays.
The asset never received a security audit from a reputable auditing firm, especially if the code is complex or novel
The source code does not use industry standards. Whenever possible, favor well-vetted standards such as OpenZeppelin’s vast repository of smart contracts. If implementing a special feature, such as off-chain signing or transaction hooks, use EIPs as guidance.

Smart contracts requirements

https://docs.google.com/spreadsheets/d/1Kr1Kq3wQWAZXFjwgdrPd-ggtGUIs7NiEdvJcbwLs61o/edit#gid=405702120