function allocate(

address userAddress,

uint256 amount,

bytes calldata data

) external override nonReentrant xTokenOnly {

(address poolAddress, uint256 tokenId) = abi.decode(data, (address, uint256));

_allocate(userAddress, poolAddress, tokenId, amount);

// allocated xToken is added (as boost points) to spNFT

INFTPool(poolAddress).boost(tokenId, amount);

}

/**

* Deallocates "userAddress" user's "amount" of xToken from this usage contract

* "data" should contain tokenId and poolAddress

*

* Can only be called by xToken contract, which is trusted to verify amounts

*/

function deallocate(

address userAddress,

uint256 amount,

bytes calldata data

) external override nonReentrant xTokenOnly {

(address poolAddress, uint256 tokenId) = abi.decode(data, (address, uint256));

_deallocate(userAddress, poolAddress, tokenId, amount);

// should only be called if spNFT has not been burned, to avoid having stuck xToken on it

if (INFTPool(poolAddress).exists(tokenId)) {

// allocated xToken is removed (as boost points) from the spNFT

INFTPool(poolAddress).unboost(tokenId, amount);

}

}

Audit Certificate

Disclaimer