Update ERC-7943: Move to Last Call

Merged by EIP-Bot.

Author: xaler5

ERCS/erc-7943.md

@@ -2,9 +2,10 @@
 eip: 7943
 title: uRWA - Universal Real World Asset Interface
 description: Interfaces for common base tokens defining compliance checks, transfer controls, and enforcement actions for Real World Assets (RWAs).
-author: Dario Lo Buglio (@xaler5)
+author: Dario Lo Buglio (@xaler5), Tino Martinez Molina (@tinom9), Mihai Colceriu (@mihaic195)
 discussions-to: https://ethereum-magicians.org/t/erc-universal-rwa-interface/23972
-status: Review
+status: Last Call
+last-call-deadline: 2026-01-30
 type: Standards Track
 category: ERC
 created: 2025-06-10
@@ -74,15 +75,15 @@ interface IERC7943Fungible is IERC165 {
     /// @param from The address from which `amount` is taken.
     /// @param to The address that receives `amount`.
     /// @param amount The amount to force transfer.
-    /// @return result True if the transfer executed correctly, false otherwise.
+    /// @return result True if the transfer executed correctly. Reverts on failure.
     function forcedTransfer(address from, address to, uint256 amount) external returns(bool result);
 
     /// @notice Changes the frozen status of `amount` tokens belonging to `account`.
     /// This overwrites the current value, similar to an `approve` function.
     /// @dev Requires specific authorization. Frozen tokens cannot be transferred by the account.
     /// @param account The address of the account whose tokens are to be frozen.
     /// @param amount The amount of tokens to freeze. It can be greater than account balance.
-    /// @return result True if the freezing executed correctly, false otherwise.
+    /// @return result True if the freezing executed correctly. Reverts on failure.
     function setFrozenTokens(address account, uint256 amount) external returns(bool result);
 
     /// @notice Checks if a specific account is allowed to transact according to token rules.
@@ -140,7 +141,7 @@ interface IERC7943NonFungible is IERC165 {
     /// @param from The address from which `tokenId` is taken.
     /// @param to The address that receives `tokenId`.
     /// @param tokenId The ID of the token being transferred.
-    /// @return result True if the transfer executed correctly, false otherwise.
+    /// @return result True if the transfer executed correctly. Reverts on failure.
     function forcedTransfer(address from, address to, uint256 tokenId) external returns(bool result);
 
     /// @notice Changes the frozen status of `tokenId` belonging to an `account`.
@@ -149,7 +150,7 @@ interface IERC7943NonFungible is IERC165 {
     /// @param account The address of the account whose tokens are to be frozen.
     /// @param tokenId The ID of the token to freeze.
     /// @param frozenStatus Whether `tokenId` is being frozen or not. 
-    /// @return result True if the freezing executed correctly, false otherwise.
+    /// @return result True if the freezing executed correctly. Reverts on failure.
     function setFrozenTokens(address account, uint256 tokenId, bool frozenStatus) external returns(bool result);
 
     /// @notice Checks if a specific account is allowed to transact according to token rules.
@@ -213,7 +214,7 @@ interface IERC7943MultiToken is IERC165 {
     /// @param to The address that receives `amount`.
     /// @param tokenId The ID of the token being transferred.
     /// @param amount The amount to force transfer.
-    /// @return result True if the transfer executed correctly, false otherwise.
+    /// @return result True if the transfer executed correctly. Reverts on failure.
     function forcedTransfer(address from, address to, uint256 tokenId, uint256 amount) external returns(bool result);
 
     /// @notice Changes the frozen status of `amount` of `tokenId` tokens belonging to an `account`.
@@ -222,7 +223,7 @@ interface IERC7943MultiToken is IERC165 {
     /// @param account The address of the account whose tokens are to be frozen.
     /// @param tokenId The ID of the token to freeze.
     /// @param amount The amount of tokens to freeze. It can be greater than account balance.
-    /// @return result True if the freezing executed correctly, false otherwise.
+    /// @return result True if the freezing executed correctly. Reverts on failure.
     function setFrozenTokens(address account, uint256 tokenId, uint256 amount) external returns(bool result);
 
     /// @notice Checks if a specific account is allowed to transact according to token rules.
@@ -259,7 +260,8 @@ These provide views into the implementing contract's compliance, transfer policy
 - The `canTransfer` 
     - MUST validate that the `amount` being transferred doesn't exceed the unfrozen amount (which is the difference between the current balance and the frozen balance).
     - MUST perform a `canTransact` check on the `from` and `to` parameters. An important documentation note is that [ERC-3643](./eip-3643.md) doesn't perform a `canTransact` check within `canTransfer` as required.
-    - MUST return false in general, if any permissioned rule will would prevent a given transfer from succeeding. A transfer refers to any operation that emits the token’s canonical transfer event. A permissioned check can be a pausing mechanism, a call to `canTransact` or anything else that requires privileged actors.
+    - MUST return false in general, if any permissioned rule would prevent a given transfer from succeeding. A transfer refers to any operation that emits the token’s canonical transfer event. A permissioned check can be a pausing mechanism, a call to `canTransact` or anything else that requires privileged actors.
+    
 - `getFrozenTokens` will return the absolute frozen amount, which MAY exceed the account's current balance. In [ERC-721](./eip-721.md) tokens, it MAY return true even if the account does not hold the token.
 
 ### `forcedTransfer`
@@ -271,10 +273,11 @@ This function provides a standard mechanism for forcing a transfer from a `from`
 - MUST perform necessary validation checks (e.g., sufficient balance/ownership of a specific token).
 - MUST emit both the standard transfer event (from the base standard) and the `ForcedTransfer` event.
 - In single-party permissioned contexts:
-    - It MAY bypass the `canTransfer` checks. If this happens, it MUST unfreeze the assets first and emit a `Frozen` event before the underlying base token transfer event reflecting the change. Having the unfrozen amount changed before the actual transfer is critical for tokens that might be susceptible to reentrancy attacks doing external checks on recipients as it is the case for [ERC-721](./eip-721.md) and [ERC-1155](./eip-1155.md) tokens.
+    - It MAY bypass the `canTransfer` checks. If this happens, and the transfer involves tokens that are currently counted as frozen, it MUST unfreeze the assets first and emit a `Frozen` event before the underlying base token transfer event reflecting the change. Having the unfrozen amount changed before the actual transfer is critical for tokens that might be susceptible to reentrancy attacks doing external checks on recipients as it is the case for [ERC-721](./eip-721.md) and [ERC-1155](./eip-1155.md) tokens.
     - It SHOULD at least perform a `canTransact` check on the `to` parameter to ensure compliance. 
 - In multi-party permissioned contexts:
-    - It MUST perform the `canTransfer` checks.
+    - It SHOULD perform the `canTransfer` checks and SHOULD NOT bypass the frozen constraints.
+- MUST revert in cases where validations and/or `canTransact` checks return false or fail.
 
 ### `setFrozenTokens`
 
@@ -283,6 +286,7 @@ It provides a way to freeze or unfreeze assets held by a specific account. This
 - MUST emit the `Frozen` event.
 - MUST be restricted in access.
 - MUST allow freezing more assets than those held. This allows for future balances withholding.
+- MUST revert in cases of logical issues or validation checks failure.
 
 ### Additional Specifications
 
@@ -291,7 +295,7 @@ The contract MUST implement the [ERC-165](./eip-165.md) `supportsInterface` func
 - `0xa8fdc849` for the non-fungible interface.
 - `0x5627c61a` for the multi token interface.
 
-Implementations of these interfaces MUST implement the necessary functions of their chosen base standard (e.g., [ERC-20](./eip-20.md) for the fungible interface, [ERC-721](./eip-721.md) for the non fungible interface and [ERC-1155](./eip-1155.md) for the multi token interface) and MUST also restrict access to sensitive functions like `forcedTransfer` and `setFrozenTokens` using an appropriate access control mechanism (e.g., `onlyOwner`, Role-Based Access Control). The specific mechanism is NOT mandated by this interface standard.
+Implementations of these interfaces MUST implement the necessary functions of their chosen base standard (e.g., [ERC-20](./eip-20.md) for the fungible interface, [ERC-721](./eip-721.md) for the non-fungible interface and [ERC-1155](./eip-1155.md) for the multi token interface) and MUST also restrict access to sensitive functions like `forcedTransfer` and `setFrozenTokens` using an appropriate access control mechanism (e.g., `onlyOwner`, Role-Based Access Control). The specific mechanism is NOT mandated by this interface standard.
 
 Implementations MUST ensure their transfer methods exhibit the following behavior:
 

assets/erc-7943/contracts/interfaces/IERC7943.sol

@@ -37,15 +37,15 @@ interface IERC7943Fungible is IERC165 {
     /// @param from The address from which `amount` is taken.
     /// @param to The address that receives `amount`.
     /// @param amount The amount to force transfer.
-    /// @return result True if the transfer executed correctly, false otherwise.
+    /// @return result True if the transfer executed correctly. Reverts on failure.
     function forcedTransfer(address from, address to, uint256 amount) external returns(bool result);
 
     /// @notice Changes the frozen status of `amount` tokens belonging to `account`.
     /// This overwrites the current value, similar to an `approve` function.
     /// @dev Requires specific authorization. Frozen tokens cannot be transferred by the account.
-    /// @param account The address of the account whose tokens are to be frozen/unfrozen.
+    /// @param account The address of the account whose tokens are to be frozen.
     /// @param amount The amount of tokens to freeze. It can be greater than account balance.
-    /// @return result True if the freezing executed correctly, false otherwise.
+    /// @return result True if the freezing executed correctly. Reverts on failure.
     function setFrozenTokens(address account, uint256 amount) external returns(bool result);
 
     /// @notice Checks if a specific account is allowed to transact according to token rules.
@@ -61,7 +61,7 @@ interface IERC7943Fungible is IERC165 {
     function getFrozenTokens(address account) external view returns (uint256 amount);
 
     /// @notice Checks if a transfer is currently possible according to token rules. It enforces validations on the frozen tokens.
-    /// @dev This may involve checks like allowlists, blocklists, transfer limits and other policy-defined restrictions.
+    /// @dev This can involve checks like allowlists, blocklists, transfer limits and other policy-defined restrictions.
     /// @param from The address sending tokens.
     /// @param to The address receiving tokens. 
     /// @param amount The amount being transferred.
@@ -95,24 +95,24 @@ interface IERC7943NonFungible is IERC165 {
 
     /// @notice Error reverted when a transfer is attempted from `account` with a `tokenId` which has been previously frozen.
     /// @param account The address holding the token with `tokenId`.
-    /// @param tokenId The Id of the token being frozen and unavailable to be transferred. 
+    /// @param tokenId The ID of the token being frozen and unavailable to be transferred. 
     error ERC7943InsufficientUnfrozenBalance(address account, uint256 tokenId);
 
     /// @notice Takes `tokenId` from one address and transfers it to another.
     /// @dev Requires specific authorization. Used for regulatory compliance or recovery scenarios.
     /// @param from The address from which `tokenId` is taken.
     /// @param to The address that receives `tokenId`.
     /// @param tokenId The ID of the token being transferred.
-    /// @return result True if the transfer executed correctly, false otherwise.
+    /// @return result True if the transfer executed correctly. Reverts on failure.
     function forcedTransfer(address from, address to, uint256 tokenId) external returns(bool result);
 
     /// @notice Changes the frozen status of `tokenId` belonging to an `account`.
     /// This overwrites the current value, similar to an `approve` function.
     /// @dev Requires specific authorization. Frozen tokens cannot be transferred by the account.
-    /// @param account The address of the account whose tokens are to be frozen/unfrozen.
-    /// @param tokenId The ID of the token to freeze/unfreeze.
+    /// @param account The address of the account whose tokens are to be frozen.
+    /// @param tokenId The ID of the token to freeze.
     /// @param frozenStatus Whether `tokenId` is being frozen or not. 
-    /// @return result True if the freezing executed correctly, false otherwise.
+    /// @return result True if the freezing executed correctly. Reverts on failure.
     function setFrozenTokens(address account, uint256 tokenId, bool frozenStatus) external returns(bool result);
 
     /// @notice Checks if a specific account is allowed to transact according to token rules.
@@ -129,7 +129,7 @@ interface IERC7943NonFungible is IERC165 {
     function getFrozenTokens(address account, uint256 tokenId) external view returns (bool frozenStatus);
 
     /// @notice Checks if a transfer is currently possible according to token rules. It enforces validations on the frozen tokens.
-    /// @dev This may involve checks like allowlists, blocklists, transfer limits and other policy-defined restrictions.
+    /// @dev This can involve checks like allowlists, blocklists, transfer limits and other policy-defined restrictions.
     /// @param from The address sending tokens.
     /// @param to The address receiving tokens. 
     /// @param tokenId The ID of the token being transferred.
@@ -165,7 +165,7 @@ interface IERC7943MultiToken is IERC165 {
 
     /// @notice Error reverted when a transfer is attempted from `account` with an `amount` of `tokenId` less than or equal to its balance, but greater than its unfrozen balance.
     /// @param account The address holding the `amount` of `tokenId` tokens.
-    /// @param tokenId The Id of the token being transferred. 
+    /// @param tokenId The ID of the token being transferred. 
     /// @param amount The amount of `tokenId` tokens being transferred.
     /// @param unfrozen The amount of tokens that are unfrozen and available to transfer.
     error ERC7943InsufficientUnfrozenBalance(address account, uint256 tokenId, uint256 amount, uint256 unfrozen);
@@ -176,16 +176,16 @@ interface IERC7943MultiToken is IERC165 {
     /// @param to The address that receives `amount`.
     /// @param tokenId The ID of the token being transferred.
     /// @param amount The amount to force transfer.
-    /// @return result True if the transfer executed correctly, false otherwise.
+    /// @return result True if the transfer executed correctly. Reverts on failure.
     function forcedTransfer(address from, address to, uint256 tokenId, uint256 amount) external returns(bool result);
 
     /// @notice Changes the frozen status of `amount` of `tokenId` tokens belonging to an `account`.
     /// This overwrites the current value, similar to an `approve` function.
     /// @dev Requires specific authorization. Frozen tokens cannot be transferred by the account.
-    /// @param account The address of the account whose tokens are to be frozen/unfrozen.
-    /// @param tokenId The ID of the token to freeze/unfreeze.
+    /// @param account The address of the account whose tokens are to be frozen.
+    /// @param tokenId The ID of the token to freeze.
     /// @param amount The amount of tokens to freeze. It can be greater than account balance.
-    /// @return result True if the freezing executed correctly, false otherwise.
+    /// @return result True if the freezing executed correctly. Reverts on failure.
     function setFrozenTokens(address account, uint256 tokenId, uint256 amount) external returns(bool result);
 
     /// @notice Checks if a specific account is allowed to transact according to token rules.
@@ -202,7 +202,7 @@ interface IERC7943MultiToken is IERC165 {
     function getFrozenTokens(address account, uint256 tokenId) external view returns (uint256 amount);
 
     /// @notice Checks if a transfer is currently possible according to token rules. It enforces validations on the frozen tokens.
-    /// @dev This may involve checks like allowlists, blocklists, transfer limits and other policy-defined restrictions.
+    /// @dev This can involve checks like allowlists, blocklists, transfer limits and other policy-defined restrictions.
     /// @param from The address sending tokens.
     /// @param to The address receiving tokens. 
     /// @param tokenId The ID of the token being transferred.