rs-order-utils

🦀 Rust implementation of Polymarket CLOB (Central Limit Order Book) order utilities with EIP-712 typed data signatures.

This library provides a complete Rust port of the TypeScript clob-order-utils package, enabling you to create and sign Polymarket exchange orders using EIP-712 standard.

Installation

Add this to your Cargo.toml:

[dependencies]
rs_order_utils = "0.4.2"
alloy-primitives = "1"
alloy-signer-local = "1"
tokio = { version = "1.0", features = ["full"] }

V2 protocol support — 0.3.0 adds a v2 module (additive, non-breaking) that mirrors the 11-field V2 CTF Exchange order struct and the Poly1271 smart-contract signature type. V1 consumers require no code changes. See the V2 Quick Start below.

Release history lives in CHANGELOG.md.

Quick Start

use alloy_primitives::{address, U256};
use alloy_signer_local::PrivateKeySigner;
use rs_order_utils::{ExchangeOrderBuilder, OrderData, Side};

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    // Create a signer
    let signer = PrivateKeySigner::random();
    let maker = signer.address();

    // Create order builder
    let builder = ExchangeOrderBuilder::new(
        address!("4bFb41d5B3570DeFd03C39a9A4D8dE6Bd8B8982E"), // Contract address
        137, // Polygon chain ID
        signer,
        None, // Use default salt generator
    );

    // Create order data
    let order_data = OrderData {
        maker,
        taker: address!("0000000000000000000000000000000000000000"),
        token_id: U256::from(123456),
        maker_amount: U256::from(1_000_000),
        taker_amount: U256::from(950_000),
        side: Side::Buy,
        fee_rate_bps: U256::from(100),
        nonce: U256::from(1),
        signer: None,
        expiration: None,
        signature_type: None,
    };

    // Build and sign the order
    let signed_order = builder.build_signed_order(order_data).await?;
    
    println!("Order signed! Signature: {}", signed_order.signature);
    Ok(())
}

V2 Quick Start

use alloy_primitives::{address, U256};
use alloy_signer_local::PrivateKeySigner;
use rs_order_utils::v2::{ExchangeOrderBuilder, OrderData};
use rs_order_utils::Side;

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    let signer = PrivateKeySigner::random();
    let maker = signer.address();

    let builder = ExchangeOrderBuilder::new(
        address!("4bFb41d5B3570DeFd03C39a9A4D8dE6Bd8B8982E"),
        137,
        signer,
        None,
    );

    let order_data = OrderData {
        maker,
        signer: None,           // defaults to maker
        token_id: U256::from(123456u64),
        maker_amount: U256::from(1_000_000u64),
        taker_amount: U256::from(950_000u64),
        side: Side::Buy,
        signature_type: None,   // defaults to EOA
        timestamp: None,        // defaults to Date.now() equivalent
        metadata: None,         // defaults to bytes32(0)
        builder: None,          // defaults to bytes32(0)
        expiration: None,       // defaults to 0 (no expiration)
    };

    let signed_order = builder.build_signed_order(order_data).await?;
    println!("V2 signature: {}", signed_order.signature);
    Ok(())
}

Key V2 differences (vs V1):

11-field signed struct (dropped taker, nonce, feeRateBps; expiration moved to un-signed payload only)
Domain version bumped to "2"
SignatureType::Poly1271 added for EIP-1271 smart-contract wallets
side serialized as "BUY"/"SELL" in API payload (V1 uses "0"/"1")

V2 signatures are cross-validated byte-for-byte against the official TypeScript @polymarket/clob-client-v2 SDK for the EOA, PolyProxy, and PolyGnosisSafe signature types. Poly1271 is excluded from cross-language parity until the TS SDK adopts the ERC-7739 nested TypedDataSign wrapping that the deposit wallet's on-chain isValidSignature requires (see CHANGELOG.md). See tests/v2_cross_language_vectors.rs.

Usage

# Run examples
cargo run --example basic_order

# Run tests
cargo test

# Run tests with output
cargo test -- --nocapture

Security Considerations

🔒 Private Keys: Never hardcode private keys. Use environment variables or secure key management
🔐 EIP-712: All orders are signed using EIP-712 to prevent phishing attacks
✅ Signer Verification: The builder verifies that the signer matches the wallet address
🛡️ Domain Separation: Orders are bound to specific chain and contract addresses

Notice

⚠️ AI-Generated Code: This library was generated with AI assistance. While it has been tested, users should:

Review the code thoroughly before using in production
Conduct their own security audits
Test extensively with their specific use cases
Use at their own risk

License

MIT

Acknowledgments

Original TypeScript implementation: Polymarket clob-order-utils
Built with Alloy - the modern Ethereum Rust library

Made with 🦀 by the Polymarket community

rs_order_utils 0.4.2