A Step-by-Step Guide to Building Secure Oracles with Oasis ROFL

Oracles are critical components of blockchain networks, bridging the gap between onchain and off-chain worlds by fetching real-world data for use in smart contracts. When building oracles, security is important, and Oasis Runtime Offchain Logic (ROFL) offers an exciting new way to build them, leveraging confidentiality and powerful off-chain capabilities. ROFL is commonly used for oracles, but it is also capable of much more. It enables off-chain services to work with blockchains while keeping data safe and handling complex tasks that would be too slow or costly to do onchain. So, beyond oracles, ROFL can handle private data analysis, run big calculations more efficiently, and connect safely to outside systems or APIs. In this guide, we'll explore how to build a secure oracle using the ROFL framework and Sapphire, the Oasis Network's confidential Ethereum Virtual Machine (EVM). We'll cover what makes ROFL and Sapphire uniquely suited to this task and provide a hands-on walkthrough to set up an oracle using the Oasis SDK and ROFL. By the end, you will have a deep understanding of the steps needed to build secure and efficient oracles for decentralized applications. Let's get started! What is Oasis ROFL? Before we jump into the development details, let's take a closer look at what makes ROFL special. Runtime Offchain Logic is a framework designed to extend the capabilities of runtime environments like Sapphire, the confidential EVM-compatible environment from the Oasis Network. ROFL allows for off-chain computations that are verified by the blockchain, providing flexibility and scalability without compromising security. ROFL essentially provides a secure way for smart contracts to interact with external data sources. The framework works by ensuring that all off-chain data is processed within a Trusted Execution Environment (TEE). This guarantees that no third party can tamper with or alter the data before it reaches the blockchain. It also allows the blockchain to leverage the computational power of off-chain environments, thus making complex operations more feasible without burdening the network itself. Key Features of Sapphire and ROFL Sapphire is the world's only confidential EVM network, and it offers several features that make it attractive for developers building decentralized applications (dApps): Confidentiality: Sapphire allows developers to create confidential smart contracts. The contract state is encrypted, and the transaction call data can be end-to-end encrypted, which is a powerful advantage in protecting user data. This feature is helpful for applications that handle sensitive information, such as financial or personal user data. Scalability and Efficiency: The network boasts hundreds of transactions per second, with transaction fees that are 99% lower than those of Ethereum. It also features multichain interoperability, making it easy to build cross-chain solutions. This scalability ensures that your dApps remain responsive and efficient, even as they grow. Runtime Offchain Logic extends the capabilities of Oasis Sapphire by enabling off-chain components to interact with smart contracts securely. This flexibility allows you to build an oracle that can access off-chain data sources such as web APIs and bring that data on-chain. With TEEs, ROFL ensures that off-chain computations are not only efficient but also trustworthy. These features make ROFL ideal for building secure oracles, decentralized exchanges, gaming platforms, and more. Getting Started with ROFL and Sapphire In this section, we'll walk you through the steps required to set up an oracle using Oasis ROFL. By the end of this guide, you should be able to create an oracle that fetches data from Binance and posts it on-chain. The process involves setting up your development environment, writing both on-chain and off-chain code, and testing everything on a local Sapphire instance. Prerequisites To begin, ensure you have the following: Rust: Install the latest version of Rust, ideally via rustup to easily manage versions. You can install Rust by running: Code Oasis CLI: This guide uses the Oasis CLI for easy interaction with ParaTimes like Sapphire. Install the CLI binary for the latest available version https://github.com/oasisprotocol/cli/releases This will help you deploy smart contracts, interact with nodes, and manage your ROFL applications. SGX Tools: If you're planning to deploy to a trusted execution environment, install Intel SGX tools to generate TEE-compatible binaries. Refer to the setup guide. In order to generate binaries suitable for use with Intel SGX, you also need to install the relevant utilities. You can do so as follows: Code Oasis SDK: The SDK contains all the essential tools and libraries for building and testing ROFL applications. Setting Up Your Development Environment Creating Your Oracle Project To start, we'll create a new project using Cargo, the Rust package manager: Code This creates a rofl-oracle directory with the boilerplate needed for a Rust project. You will then need to declare your dependencies in the Cargo.toml file. Since the Runtime SDK relies on a nightly version of the Rust toolchain, you must specify which version to use by creating a rust-toolchain.toml file with the following configuration: Code Furthermore, due to upstream dependencies, Cargo must be configured to always build with specific CPU platform features (namely AES-NI and SSE3). To do this, create a .cargo/config.toml file with the following settings:\ Code For this tutorial, You can install the following dependencies Code You can use the debug-mock-sgx feature to enable the use of a mock SGX environment during non-SGX builds for testing and debugging purposes by adding the following in Cargo.toml file Code With the dependencies declared, it's time to start implementing the core logic of our oracle. This logic will involve setting up both the smart contract component and the off-chain component. Developing Your ROFL Oracle Your oracle will be split into two main components: the smart contract running on Sapphire and the off-chain code running inside the ROFL TEE. The smart contract will serve as the destination for our price data, while the off-chain code will fetch the data from Binance and send it to the contract. You can refer to the example repository for demonstration code. Writing the Solidity Smart Contract Create a Solidity smart contract to hold the fetched data. The contract will store price observations submitted by the ROFL app: Code The PriceOracle contract stores observations submitted by the ROFL oracle. Only the ROFL application (identified by the roflApp address) can call submitObservation. This ensures that the data is only modified by the trusted ROFL app, maintaining the integrity of the oracle data. Writing the ROFL Application in Rust Next, implement the off-chain component of the oracle in Rust. This code will run inside the ROFL environment, which provides a secure enclave for off-chain logic. In the src/main.rs file with the following code: Code This code connects to Binance to fetch the current price of the ROSE/USDT pair, multiplies it by one million to convert it to an integer (since Ethereum smart contracts don't handle floating-point operations), and submits it to the smart contract. The async design ensures that the heavy computation does not block the runtime, allowing other parts of the app to continue running smoothly. By making use of the ROFL utilities, the data fetched is kept secure, and no one can tamper with the communication between Binance and the smart contract. The ROFL App ID can be kept as it is for local testing. When you want to deploy it, then you can generate an App ID by registering your app with the Oasis Network. Test your Oracle Locally After developing the ROFL app, it's time to test it. Spin up a local instance of the Sapphire network and deploy your contract: Empty Your consensus_trust_root() Compile ROFL in Unsafe Mode Code Spin Up a Local Sapphire Instance Code This command runs the Sapphire localnet and automatically launches your ROFL application. Running a local instance helps you simulate real-world scenarios without spending gas fees on a public Testnet or Mainnet. Test the Oracle: Use the Web3-compatible interface like Remix to interact with the deployed contract. Verify that the observations are being updated as expected. This step will validate whether the data from Binance is being correctly fetched and recorded on-chain. We can also verify the contract on the sapphire-localnet network. First, set up the PRIVATE_KEY for your deployment account and the identifier for the ROFL app. Then, you can deploy the contract by running the following command: Code Checking the Oracle's working: To make sure the oracle is working correctly, you can use the oracle-query command in the Hardhat project. Simply run:Code If all works good then You should see something like this as output: Resources Oasis Protocol Website ROFL Documentation Oasis SDK GitHub Repository Deploying a Smart Contract on Sapphire Tutorial Oracles are critical components of blockchain networks, bridging the gap between onchain and off-chain worlds by fetching real-world data for use in smart contracts. When building oracles, security is important, and Oasis Runtime Offchain Logic (ROFL) offers an exciting new way to build them, leveraging confidentiality and powerful off-chain capabilities. Oasis Runtime Offchain Logic (ROFL) ROFL is commonly used for oracles, but it is also capable of much more. It enables off-chain services to work with blockchains while keeping data safe and handling complex tasks that would be too slow or costly to do onchain. So, beyond oracles, ROFL can handle private data analysis, run big calculations more efficiently, and connect safely to outside systems or APIs. In this guide, we'll explore how to build a secure oracle using the ROFL framework and Sapphire, the Oasis Network's confidential Ethereum Virtual Machine (EVM). We'll cover what makes ROFL and Sapphire uniquely suited to this task and provide a hands-on walkthrough to set up an oracle using the Oasis SDK and ROFL. By the end, you will have a deep understanding of the steps needed to build secure and efficient oracles for decentralized applications. Let's get started! Oasis SDK What is Oasis ROFL? Before we jump into the development details, let's take a closer look at what makes ROFL special. Runtime Offchain Logic is a framework designed to extend the capabilities of runtime environments like Sapphire, the confidential EVM-compatible environment from the Oasis Network . ROFL allows for off-chain computations that are verified by the blockchain, providing flexibility and scalability without compromising security. Runtime Offchain Logic Oasis Network ROFL essentially provides a secure way for smart contracts to interact with external data sources. The framework works by ensuring that all off-chain data is processed within a Trusted Execution Environment (TEE). This guarantees that no third party can tamper with or alter the data before it reaches the blockchain. It also allows the blockchain to leverage the computational power of off-chain environments, thus making complex operations more feasible without burdening the network itself. Key Features of Sapphire and ROFL Sapphire is the world's only confidential EVM network, and it offers several features that make it attractive for developers building decentralized applications (dApps): Sapphire Confidentiality: Sapphire allows developers to create confidential smart contracts. The contract state is encrypted, and the transaction call data can be end-to-end encrypted, which is a powerful advantage in protecting user data. This feature is helpful for applications that handle sensitive information, such as financial or personal user data. Confidentiality : Sapphire allows developers to create confidential smart contracts. The contract state is encrypted, and the transaction call data can be end-to-end encrypted, which is a powerful advantage in protecting user data. This feature is helpful for applications that handle sensitive information, such as financial or personal user data. Confidentiality Scalability and Efficiency: The network boasts hundreds of transactions per second, with transaction fees that are 99% lower than those of Ethereum. It also features multichain interoperability, making it easy to build cross-chain solutions. This scalability ensures that your dApps remain responsive and efficient, even as they grow. Scalability and Efficiency : The network boasts hundreds of transactions per second, with transaction fees that are 99% lower than those of Ethereum. It also features multichain interoperability, making it easy to build cross-chain solutions. This scalability ensures that your dApps remain responsive and efficient, even as they grow. Scalability and Efficiency Runtime Offchain Logic extends the capabilities of Oasis Sapphire by enabling off-chain components to interact with smart contracts securely. This flexibility allows you to build an oracle that can access off-chain data sources such as web APIs and bring that data on-chain. Runtime Offchain Logic With TEEs, ROFL ensures that off-chain computations are not only efficient but also trustworthy. These features make ROFL ideal for building secure oracles, decentralized exchanges, gaming platforms, and more. Getting Started with ROFL and Sapphire In this section, we'll walk you through the steps required to set up an oracle using Oasis ROFL. By the end of this guide, you should be able to create an oracle that fetches data from Binance and posts it on-chain. The process involves setting up your development environment, writing both on-chain and off-chain code, and testing everything on a local Sapphire instance. Prerequisites To begin, ensure you have the following: Rust: Install the latest version of Rust, ideally via rustup to easily manage versions. Rust : Install the latest version of Rust, ideally via rustup to easily manage versions. Rust You can install Rust by running: Code Code Code Code Oasis CLI: This guide uses the Oasis CLI for easy interaction with ParaTimes like Sapphire. Oasis CLI: This guide uses the Oasis CLI for easy interaction with ParaTimes like Sapphire. Oasis CLI : This guide uses the Oasis CLI for easy interaction with ParaTimes like Sapphire. Oasis CLI Install the CLI binary for the latest available version https://github.com/oasisprotocol/cli/releases https://github.com/oasisprotocol/cli/releases This will help you deploy smart contracts, interact with nodes, and manage your ROFL applications. SGX Tools: If you're planning to deploy to a trusted execution environment, install Intel SGX tools to generate TEE-compatible binaries. Refer to the setup guide. SGX Tools: If you're planning to deploy to a trusted execution environment, install Intel SGX tools to generate TEE-compatible binaries. Refer to the setup guide. SGX Tools : If you're planning to deploy to a trusted execution environment, install Intel SGX tools to generate TEE-compatible binaries. Refer to the setup guide . SGX Tools setup guide In order to generate binaries suitable for use with Intel SGX, you also need to install the relevant utilities. You can do so as follows: Code Code Code Oasis SDK: The SDK contains all the essential tools and libraries for building and testing ROFL applications. Oasis SDK : The SDK contains all the essential tools and libraries for building and testing ROFL applications. Oasis SDK Setting Up Your Development Environment Creating Your Oracle Project To start, we'll create a new project using Cargo, the Rust package manager: Code Code Code Code This creates a rofl-oracle directory with the boilerplate needed for a Rust project. You will then need to declare your dependencies in the Cargo.toml file. Since the Runtime SDK relies on a nightly version of the Rust toolchain, you must specify which version to use by creating a rust-toolchain.toml file with the following configuration: Code Code Code Code Furthermore, due to upstream dependencies, Cargo must be configured to always build with specific CPU platform features (namely AES-NI and SSE3). To do this, create a .cargo/config.toml file with the following settings:\ Code Code Code Code For this tutorial, You can install the following dependencies Code Code Code Code You can use the debug-mock-sgx feature to enable the use of a mock SGX environment during non-SGX builds for testing and debugging purposes by adding the following in Cargo.toml file debug-mock-sgx Cargo.toml Code Code Code Code With the dependencies declared, it's time to start implementing the core logic of our oracle. This logic will involve setting up both the smart contract component and the off-chain component. Developing Your ROFL Oracle Your oracle will be split into two main components: the smart contract running on Sapphire and the off-chain code running inside the ROFL TEE. The smart contract will serve as the destination for our price data, while the off-chain code will fetch the data from Binance and send it to the contract. You can refer to the example repository for demonstration code. smart contract off-chain code example repository Writing the Solidity Smart Contract Create a Solidity smart contract to hold the fetched data. The contract will store price observations submitted by the ROFL app: Code Code Code Code The PriceOracle contract stores observations submitted by the ROFL oracle. Only the ROFL application (identified by the roflApp address) can call submitObservation . This ensures that the data is only modified by the trusted ROFL app, maintaining the integrity of the oracle data. PriceOracle roflApp submitObservation Writing the ROFL Application in Rust Next, implement the off-chain component of the oracle in Rust. This code will run inside the ROFL environment, which provides a secure enclave for off-chain logic. In the src/main.rs file with the following code: src/main.rs Code Code Code Code This code connects to Binance to fetch the current price of the ROSE/USDT pair, multiplies it by one million to convert it to an integer (since Ethereum smart contracts don't handle floating-point operations), and submits it to the smart contract. The async design ensures that the heavy computation does not block the runtime, allowing other parts of the app to continue running smoothly. By making use of the ROFL utilities, the data fetched is kept secure, and no one can tamper with the communication between Binance and the smart contract. The ROFL App ID can be kept as it is for local testing. When you want to deploy it, then you can generate an App ID by registering your app with the Oasis Network. registering your app Test your Oracle Locally After developing the ROFL app, it's time to test it. Spin up a local instance of the Sapphire network and deploy your contract: Empty Your consensus_trust_root() Empty Your consensus_trust_root() Empty Your consensus_trust_root() Compile ROFL in Unsafe Mode Code Compile ROFL in Unsafe Mode Code Compile ROFL in Unsafe Mode Code Code Spin Up a Local Sapphire Instance Spin Up a Local Sapphire Instance Spin Up a Local Sapphire Instance Code Code Code Code This command runs the Sapphire localnet and automatically launches your ROFL application. Running a local instance helps you simulate real-world scenarios without spending gas fees on a public Testnet or Mainnet. Test the Oracle: Use the Web3-compatible interface like Remix to interact with the deployed contract. Verify that the observations are being updated as expected. This step will validate whether the data from Binance is being correctly fetched and recorded on-chain. We can also verify the contract on the sapphire-localnet network. First, set up the PRIVATE_KEY for your deployment account and the identifier for the ROFL app. Then, you can deploy the contract by running the following command: Test the Oracle: Use the Web3-compatible interface like Remix to interact with the deployed contract. Verify that the observations are being updated as expected. This step will validate whether the data from Binance is being correctly fetched and recorded on-chain. We can also verify the contract on the sapphire-localnet network. First, set up the PRIVATE_KEY for your deployment account and the identifier for the ROFL app. Then, you can deploy the contract by running the following command: Test the Oracle : Use the Web3-compatible interface like Remix to interact with the deployed contract. Verify that the observations are being updated as expected. This step will validate whether the data from Binance is being correctly fetched and recorded on-chain. Test the Oracle We can also verify the contract on the sapphire-localnet network. First, set up the PRIVATE_KEY for your deployment account and the identifier for the ROFL app. Then, you can deploy the contract by running the following command: Code Code Code Checking the Oracle's working: To make sure the oracle is working correctly, you can use the oracle-query command in the Hardhat project. Simply run:Code Checking the Oracle's working: To make sure the oracle is working correctly, you can use the oracle-query command in the Hardhat project. Simply run: Code Code Code Code If all works good then You should see something like this as output: Resources Oasis Protocol Website ROFL Documentation Oasis SDK GitHub Repository Deploying a Smart Contract on Sapphire Tutorial Oasis Protocol Website Oasis Protocol Website ROFL Documentation ROFL Documentation Oasis SDK GitHub Repository Oasis SDK GitHub Repository Deploying a Smart Contract on Sapphire Tutorial Deploying a Smart Contract on Sapphire Tutorial