Before you start
- Connect your tooling to Arc Testnet. See Connect to Arc.
- Have your contract source and its test suite ready.
- Get testnet USDC from the Circle Faucet to pay for gas and fund test transfers.
Steps
Audit balance and decimal assumptions
Search your contract for places that read
balanceOf or address.balance
and for any logic that compares or combines the two.- Convert before comparing: the ERC-20 view uses 6 decimals and the native view uses 18 for the same balance.
- Treat the ERC-20
balanceOfas inexact. It truncates anything below 1×10⁻⁶ USDC, so0.0000001USDC reads as0and100.0000001USDC reads as100. AbalanceOfof0does not mean the native balance is0.
Audit value transfers
Find every native send and every path that forwards value.
- Handle reverts: a native transfer can revert even with a sufficient balance, for example a transfer to the zero address, a transfer to or from a blocklisted address, or any transfer that would burn value.
- Don’t assume a call to a contract that forwards native value will succeed.
- Don’t transfer to
address(0); the transfer reverts with"Zero address not allowed".
Audit approvals and sweeps
Review allowances and any “sweep” logic.
- If a contract is meant to hold USDC only as an ERC-20 token and not to act on native value, don’t let it sweep its native balance. Native USDC and the ERC-20 USDC interface are the same asset, so a native sweep also moves the users’ ERC-20 USDC balance.
- Don’t pair “native” against the ERC-20 USDC interface in a liquidity pool. Both legs are the same asset, so the pairing is meaningless.
Audit SELFDESTRUCT usage
If your contract uses
SELFDESTRUCT, confirm it doesn’t depend on burning,
on sending value to a destructed account, or on retaining USDC afterward.- A contract’s USDC is its native balance, so self-destructing transfers that USDC to the beneficiary. On other chains the ERC-20 USDC balance would remain in the token contract.
- Self-destructing to yourself with a balance, to the zero address with a balance, to a blocklisted address, or to an already self-destructed account all revert.
- A non-zero-value call to a contract after it self-destructs reverts on Arc, even though it succeeds on Ethereum.
Test against an Arc RPC endpoint
Run your test suite against Arc Testnet, not a local EVM simulator. Tools
like Foundry’s
anvil run a standard EVM and cannot reproduce Arc’s
precompiles, EIP-7708 Transfer events, or USDC blocklist enforcement.Exercise the revert paths
Confirm your contract handles a blocklist revert gracefully using the seeded
blocklisted test address on the contract
addresses
page. A value transfer to or from it reverts at runtime, including when it is
the beneficiary of a
SELFDESTRUCT.