Automatic Token Migration with Deadline and Burning

We design and develop full-cycle blockchain solutions: from smart contract architecture to launching DeFi protocols, NFT marketplaces and crypto exchanges. Security audits, tokenomics, integration with existing infrastructure.
Showing 1 of 1All 1305 services
Automatic Token Migration with Deadline and Burning
Medium
~3-5 days
Frequently Asked Questions

Blockchain Development Services

Blockchain Development Stages

Latest works

  • image_website-b2b-advance_0.webp
    B2B ADVANCE company website development
    1356
  • image_web-applications_feedme_466_0.webp
    Development of a web application for FEEDME
    1248
  • image_websites_belfingroup_462_0.webp
    Website development for BELFINGROUP
    953
  • image_ecommerce_furnoro_435_0.webp
    Development of an online store for the company FURNORO
    1187
  • image_logo-advance_0.webp
    B2B Advance company logo design
    644
  • image_crm_enviok_479_0.webp
    Development of a web application for Enviok
    925

Imagine: you've deployed a new ERC-20 token with improved tokenomics or fixed a critical vulnerability in an old contract. Now you need all holders to switch to the new token. Without a deadline mechanism, some users never migrate—old tokens remain in circulation, the protocol must hold liquidity forever, and the market suffers from parallel circulation of two assets. We develop migration systems that solve this problem completely: automatic migration with deadline and burning. Across 50+ projects, we've developed a standard architecture covering 90% of scenarios. Gas optimization can save holders up to $0.50 per transaction and the project up to $2,000 on contract architecture. Evaluate your project in one day—just contact us.

How the Migration System Works: Contract Architecture

The system consists of three participants: OldToken — the existing ERC-20, NewToken — the new token with a mint function or sufficient supply, and MigrationContract — an intermediary contract managing the swap, deadline, and burning.

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.24;

import "@openzeppelin/contracts/token/ERC20/IERC20.sol";
import "@openzeppelin/contracts/access/Ownable2Step.sol";
import "@openzeppelin/contracts/utils/ReentrancyGuard.sol";

contract TokenMigration is Ownable2Step, ReentrancyGuard {
    IERC20 public immutable oldToken;
    IERC20 public immutable newToken;
    
    uint256 public immutable migrationDeadline;
    uint256 public immutable migrationRatio; // новых токенов за 1 старый (18 decimals)
    
    uint256 public totalMigrated;
    bool public unmigatedBurned;
    
    event Migrated(address indexed user, uint256 oldAmount, uint256 newAmount);
    event UnmigratedBurned(uint256 amount);
    
    constructor(
        address _oldToken,
        address _newToken,
        uint256 _deadline,    // Unix timestamp
        uint256 _ratio        // 1e18 = 1:1, 2e18 = 2 новых за 1 старый
    ) Ownable2Step(msg.sender) {
        require(_deadline > block.timestamp + 30 days, "Deadline too soon");
        oldToken = IERC20(_oldToken);
        newToken = IERC20(_newToken);
        migrationDeadline = _deadline;
        migrationRatio = _ratio;
    }
    
    function migrate(uint256 amount) external nonReentrant {
        require(block.timestamp < migrationDeadline, "Migration closed");
        require(amount > 0, "Zero amount");
        
        uint256 newAmount = amount * migrationRatio / 1e18;
        require(newAmount > 0, "Below minimum");
        
        totalMigrated += amount;
        
        // Получаем старые токены от пользователя
        oldToken.transferFrom(msg.sender, address(this), amount);
        
        // Выдаём новые токены
        newToken.transfer(msg.sender, newAmount);
        
        emit Migrated(msg.sender, amount, newAmount);
    }
}

Why Ownable2Step Is Important for Migration Contracts?

Regular Ownable allows transferring ownership in one step: transferOwnership(newOwner). If you mis-enter the address, the contract is lost forever. Ownable2Step (OpenZeppelin documentation) requires the new owner to accept rights in a separate transaction. According to OpenZeppelin docs, two-step ownership prevents accidental loss of control. For a contract managing token migration with a deadline, this is critical—a mistake could cost control over the entire migration.

Burn Mechanism After Deadline

After the deadline expires, all unmigrated old tokens that have accumulated on the contract must be burned. Also, unused new tokens should be returned or burned.

function burnUnmigrated() external onlyOwner {
    require(block.timestamp >= migrationDeadline, "Deadline not reached");
    require(!unmigatedBurned, "Already burned");
    
    unmigatedBurned = true;
    
    // Сжигаем старые токены, которые пришли через migrate()
    uint256 oldBalance = oldToken.balanceOf(address(this));
    if (oldBalance > 0) {
        IBurnable(address(oldToken)).burn(oldBalance);
        // Если старый токен не имеет burn() — отправляем на dead address
        // oldToken.transfer(address(0xdead), oldBalance);
    }
    
    // Возвращаем нераспределённые новые токены в treasury
    uint256 newBalance = newToken.balanceOf(address(this));
    if (newBalance > 0) {
        newToken.transfer(owner(), newBalance);
    }
    
    emit UnmigratedBurned(oldBalance);
}

What if the Old Token Doesn't Have a burn() Function?

Most legacy tokens lack a burn function. Options:

  1. Send to 0x000...dEaD — unofficial burn address, tokens permanently inaccessible.
  2. Send to address(0) — only if the token allows transfer to zero address (many check to != address(0)).
  3. Custom burn function in MigrationContract via IUpgradeableToken(oldToken).burnFrom() — only if the migration contract has BURNER_ROLE.

Comparison of Burning Options for Tokens Without burn

Method Reversibility Address Risks
Transfer to dead address No 0x000...dEaD Unofficial, could be cleared
Transfer to address(0) No 0x000...000 Many contracts check != 0
Call burnFrom with role Yes, if role revoked Internal burn Requires role setup

Comparison of Migration Methods

Method Gas for User Approve Required? Deadline Risk Suitable For
Direct (transferFrom) High (2 tx) Yes Stale tokens remain with user Simple cases, ERC-20 with burn
Snapshot + Merkle Proof Low (1 tx) No Tokens not withdrawn, trust required Post-hacks, upgrades without time window
Burning via dead address Medium (1 tx) No Irreversible When no burn function

How Snapshot Migration Works (Merkle Proof)

If migration is based on a snapshot (balances at a specific block before deploying the new contract), users do not send old tokens—they prove entitlement to new tokens via Merkle Proof. This reduces gas costs by 40-60% compared to direct migration. Direct migration with transferFrom requires two transactions—approve and migrate. Snapshot migration with Merkle Proof is 2x faster, needing only one claim transaction, and gas costs are reduced 2-3x. We use the OpenZeppelin library MerkleProof for verification.

contract SnapshotMigration is Ownable2Step {
    bytes32 public immutable merkleRoot;
    mapping(address => bool) public claimed;
    
    constructor(bytes32 _merkleRoot, uint256 _deadline) {
        merkleRoot = _merkleRoot;
        migrationDeadline = _deadline;
    }
    
    function claim(uint256 amount, bytes32[] calldata proof) external {
        require(block.timestamp < migrationDeadline, "Expired");
        require(!claimed[msg.sender], "Already claimed");
        
        bytes32 leaf = keccak256(abi.encodePacked(msg.sender, amount));
        require(MerkleProof.verify(proof, merkleRoot, leaf), "Invalid proof");
        
        claimed[msg.sender] = true;
        newToken.transfer(msg.sender, amount);
        
        emit Claimed(msg.sender, amount);
    }
}

Generate the Merkle Tree off-chain using @openzeppelin/merkle-tree or a custom script based on a balance snapshot. The snapshot is taken via The Graph subgraph or archival node query.

How Tokens in Vesting Contracts Are Handled During Migration

If old tokens are held in vesting contracts, they cannot be migrated directly by users. Options:

  1. A special admin function that migrates tokens directly from the vesting contract (requires integration with the specific vesting contract).
  2. Automatic migration via Tenderly Web3 Actions or a keeper after vesting expires.

User Notifications and Progress Monitoring

The contract should emit events with sufficient information to build a dashboard:

event MigrationProgress(
    uint256 totalMigrated,
    uint256 totalOldSupply,
    uint256 deadline,
    uint256 timestamp
);

A subgraph on The Graph indexes events and provides a GraphQL API for the frontend: percentage of migration completed, number of unique addresses migrated, kinetics over time.

An important practical point: large holders (>1% supply) need to be notified directly before the public migration launch. Exchanges, protocols, funds—they may have internal processes that take time. The deadline should allow at least 90 days even for simple migrations.

What We Deliver: Full Package

The work includes:

  • Development of migration smart contracts (Solidity 0.8.x, OpenZeppelin).
  • Integration with the existing token (OldToken) and deployment of the new one (NewToken).
  • Configuration of deadline and burning mechanism.
  • Development of snapshot-based migration (Merkle Proof) if needed.
  • Subgraph for monitoring and frontend dashboard (React + The Graph).
  • Contract audit with report (in partnership with certified auditors).
  • Post-migration support for 30 days.
  • Documentation for users and integration instructions.

Timelines and Cost

Development timelines: 3-5 business days for a basic migration system, 7-10 days for snapshot-based with Merkle Proof and subgraph. Cost is calculated individually—request a commercial proposal. Evaluate your project for free—our engineers with 10+ years of experience in blockchain development will analyze your architecture and suggest the optimal solution. Request a consultation right now.

Smart Contract Development

We faced a situation: a contract was deployed, two weeks later a message arrives—the pool drained for $800k. Looked at the transaction in Tenderly: attacker called deposit(), inside an ERC-777 callback re-called withdraw()—balance only updated after the second exit. Classic reentrancy, but not via ETH transfer—through an ERC-777 hook. ReentrancyGuard was only on withdraw().

Such cases are not rare. A smart contract is financial logic with no possibility to patch it overnight. Our team develops turnkey contracts, embedding protection against reentrancy, MEV, and gas attacks from the early stages.

How We Develop Smart Contracts Turnkey

We start with business logic audit and stack selection. Solidity 0.8.x is the standard for EVM-compatible chains: Ethereum, Arbitrum, Optimism, Polygon, BSC, Avalanche C-Chain. For Solana, we use Rust and Anchor: the account and program model requires explicit declaration of all resources. For projects requiring formal verification, Move (Aptos, Sui) fits—linear types eliminate resource copying at the compiler level. Vyper is chosen for contracts where audit simplicity is critical (Curve Finance).

Language Execution Model Typical Domain Risks
Solidity 0.8.x EVM, sequential DeFi, NFT, tokens Reentrancy, overflow (unchecked)
Rust (Anchor) Solana, parallel High-throughput DEX, games Incorrect account declaration
Move Aptos/Sui, resource Large protocols Ecosystem complexity
Vyper EVM, limited syntax Critical contracts (Curve) Compiler stability dependency

Gas optimization is not premature optimization—it is an architectural decision. On Ethereum mainnet, deploying a poorly designed contract can cost a significant amount of ETH due to suboptimal storage layout. Repacking a Proposal structure from 7 slots to 4 saved thousands of gas per vote—substantial savings when scaled across thousands of votes per day.

Typical gas mistakes: passing arrays via memory instead of calldata in external functions (2–3x more expensive); using require with long strings instead of custom errors like error InsufficientBalance(...). Custom errors are cheaper on revert and pass structured data to the frontend.

Why Smart Contract Audit Is Critical for Security

Audit is not a one-time check—it is a built-in development stage. We use three levels:

  1. Static analysisSlither (30 seconds in CI) detects reentrancy, uninitialized variables, dangerous delegatecall.
  2. Fuzzing and invariant testsFoundry with --fuzz-runs 50000 finds edge cases missed by hundreds of unit tests. Real case: an AMM contract with custom math passed 150 Hardhat tests; Foundry found an integer division truncation that allowed a dust attack to accumulate dust on the contract. Echidna checks invariants ("sum of all balances ≤ totalSupply").
  3. Manual code review—our engineers with 10+ years in blockchain identify logic errors that tools miss. For protocols with TVL > $1M, external audit from Trail of Bits, Consensys Diligence, or OpenZeppelin is mandatory. Timeline: 2–4 weeks.

Any upgradeable protocol must have a timelock. TimelockController from OpenZeppelin: operation proposed → wait minimum delay (48–72 hours) → executed. Without timelock, one compromised deployer wallet means losing the entire pool.

What Upgrade Patterns Do We Choose?

Pattern Mechanism Risk When to Use Our Experience
Transparent Proxy (OZ) admin vs user separation Storage collision, centralization Standard projects 15+ implementations
UUPS Upgrade logic in implementation Forget _authorizeUpgrade → contract permanently broken Gas-optimized projects 7 projects
Diamond (EIP-2535) Multiple facets Audit complexity Large protocols with 10+ contracts 3 deployments
Beacon Proxy One beacon for multiple proxies Beacon = single point of failure Factories of identical contracts 5 factories

Storage collision is the main danger of proxies. Implementation v2 must not add variables before existing ones. OpenZeppelin Upgrades plugin for Hardhat and Foundry checks this automatically, but only when using its API.

How to Protect a Contract from MEV and Front-Running

On Ethereum mainnet, transactions in the mempool are visible to all. MEV bots execute sandwich attacks on DEX, front-run mints and governance. Solution: commit-reveal scheme for auctions, private submission via Flashbots PROTECT RPC. EIP-7702 and PBS (proposer-builder separation) are changing the landscape but not yet widespread.

What Is the Development Process?

  1. Analysis—functional specification, call diagram, edge case analysis. Without this, coding starts in vain.
  2. Development—Solidity/Rust with tests in parallel. Test → code → refactoring. Use Foundry for fuzz and invariant tests.
  3. Internal audit—Slither + Echidna + manual code review. Foundry invariant tests for protocol invariants.
  4. External audit—for projects with real money. Timeline: 2–4 weeks.
  5. Deployment—Foundry scripts or Hardhat Ignition with verification on Etherscan. Gnosis Safe for ownership transfer immediately after deployment.
  6. Monitoring—Tenderly alerts, OpenZeppelin Defender, Forta Network.

What Is Included

  • Architecture documentation and contract specification (NatSpec).
  • Source code with repository and CI (Slither, Foundry, coverage).
  • Deployed contract with verification on blockchain explorer.
  • Audit results (internal and external upon request).
  • Access to monitoring and management (Gnosis Safe).
  • Code warranty: critical bug fixes within one month after deployment.
  • Consultation on web integration (wagmi, RainbowKit).

Estimated Timelines

  • ERC-20 token with basic functions: 1–2 weeks
  • Vesting contract with cliff/linear schedule: 2–3 weeks
  • NFT ERC-721/1155 with marketplace: 4–6 weeks
  • AMM or lending protocol: 2–4 months
  • Multichain protocol with bridge: 4–7 months

Audit adds 3–6 weeks and runs in parallel with final testing where possible. Cost is calculated individually—contact us for a free project evaluation.

Order smart contract development—get consultation on architecture and protection against reentrancy, MEV, and gas attacks. Want to discuss details? Write to us—we will select the optimal stack for your task.