Advanced Security with Permit2
Cryios leverages the Uniswap Permit2 protocol to provide a modern, secure, and gas-efficient checkout experience. This represents the gold standard for ERC20 token interactions.
The Problem with Traditional Approvals
Standard ERC20 payments usually require two steps:
1. Approve: An on-chain transaction giving a contract permission to spend your tokens.
2. Transfer: The actual payment transaction.
This is slow, expensive (double gas), and often leads to "infinite approvals" that leave user wallets vulnerable to exploits.
The Permit2 Solution
Permit2 allows users to sign a cryptographically secure message (off-chain) that grants the checkout contract permission to transfer tokens for a specific transaction and time-frame.
Security
Approvals are scoped to specific amounts and expire quickly. There is no "infinite approval" risk.
Efficiency
By bundling approvals into signatures, we reduce the number of on-chain interactions required from the customer.
How Cryios Implements It
When a customer uses a Cryios checkout link:
1. Our frontend checks if they have already granted Permit2 access to Cryios.
2. If not, they sign a one-time approval.
3. For the payment, they sign a PermitTransferFrom message.
4. Cryios submits this signature to our payment splitter contract, which validates it via Permit2 and distributes the funds.
Trustless Infrastructure
Because Permit2 is a highly audited, immutable protocol from the Uniswap team, customers can trust that their signatures are only used for the intended payment and nothing more. Cryios never has access to your private keys or unauthorized wallet access.
Developer Note
Our contracts are deployed across Ethereum, Base, and Polygon, pointing to the official Permit2 singleton at `0x000000000022d473030f116ddee9f6b43ac78ba3`.