Security and stability of Upgradeable ERC20?

[abcoathup]

Hi @Hiep_Tran,

Welcome to the community

Just to add to @Skyge's excellent answers (thanks as always @Skyge )

@Hiep_Tran

Is there any large/popular token those are using upgrades plugin? I’m worry about security/stability.

I recommend reading how USDC did their upgrade: https://blog.coinbase.com/usdc-v2-upgrading-a-multi-billion-dollar-erc-20-token-b57cd9437096

Also the current state of upgrades

The State of Smart Contract Upgrades - OpenZeppelin blog

@Skyge

Emmmm, I am not sure, but I think yes, cause you need to call an extra opcode delegatecall , what do you think of it? @abcoathup If I am wrong, please correct me.

Yes there is a gas fee overhead using a proxy. I recommend testing this yourself on a public testnet to see the difference.

Please note this condition: OpenZeppelin upgradeable contracts affected by Istanbul hardfork

@Hiep_Tran

Etherscan source code submit: my deployed contract on testnet is automatically verified and I can’t re-submit the code. I don’t know can I re-submit on Etherscan mainnet?

The proxy and the ProxyAdmin contracts should be already verified, your implementation contract won't be verified.

Etherscan supports proxy contracts.

And Finally…. Proxy Contract Support on Etherscan.

I wasn't sure what you meant?

@Hiep_Tran

Any downsides, disadvantages of upgrades plugin?

Aside from a gas overhead, you have an administrator account that you need to keep secure and your community need to trust the management of.

See: https://docs.openzeppelin.com/learn/preparing-for-mainnet#set-admin

You may want to use a multi-sig such as Gnosis Safe and use OpenZeppelin Defender to administer (see: https://docs.openzeppelin.com/defender/admin).