An extensive collection of examples is available in the GitHub repository. Below we discuss a few of these examples in more details. These examples focus mainly on the use of the SDK, while the Examples page in the language section focuses more on the CashScript syntax.

Transfer With Timeout

The idea of this smart contract is explained on the Language Examples page. The gist is that it allows you to send an amount of BCH to someone, but if they don't claim the sent amount, it can be recovered by the sender.

contract TransferWithTimeout(pubkey sender, pubkey recipient, int timeout) {
function transfer(sig recipientSig) {
require(checkSig(recipientSig, recipient));
function timeout(sig senderSig) {
require(checkSig(senderSig, sender));
require(tx.time >= timeout);

Now to put this smart contract in use in a JavaScript application we have to use the CashScript SDK in combination with the BITBOX library. We use BITBOX to generate public/private keys for the smart contract participants, and then we use the CashScript SDK to call the smart contract functions and send transactions to the network.

import { BITBOX } from 'bitbox-sdk';
import { Contract, SignatureTemplate } from 'cashscript';
async function run() {
// Initialise BITBOX and generate an HD Node from a mnemonic
const bitbox = new BITBOX();
const rootSeed = bitbox.Mnemonic.toSeed('candy maple cake sugar ...');
const hdNode = bitbox.HDNode.fromSeed(rootSeed, network);
// Create Alice and Bob's key pairs
const alice = bitbox.HDNode.toKeyPair(bitbox.HDNode.derive(hdNode, 0));
const bob = bitbox.HDNode.toKeyPair(bitbox.HDNode.derive(hdNode, 1));
// Derive Alice and Bob's public keys
const alicePk = bitbox.ECPair.toPublicKey(alice);
const bobPk = bitbox.ECPair.toPublicKey(bob);
// Compile the TransferWithTimeout Contract
const TWT = Contract.compile('transfer_with_timeout.cash', 'mainnet');
// Instantiate a new TransferWithTimeout contract with constructor arguments:
// { sender: alicePk, recipient: bobPk, timeout: 9000000 } // timeout in future
// timeout value can only be block number, not timestamp
const instance = TWT.new(alicePk, bobPk, 900000);
// Display contract address and balance
console.log('contract address:', instance.address);
console.log('contract balance:', await instance.getBalance());
// Call the transfer function with Bob's signature
// i.e. Bob claims the money that Alice has sent him
const txDetails = await instance.functions
.transfer(new SignatureTemplate(bob))
.to('bitcoincash:qrhea03074073ff3zv9whh0nggxc7k03ssh8jv9mkx', 10000)
// Call the timeout function with Alice's signature
// i.e. Alice recovers the money that Bob has not claimed
// But because the timeout has not passed yet, the function fails and
// we call the meep function so the transaction can be debugged instead
const meepStr = await instance.functions
.timeout(new SignatureTemplate(alice))
.to('bitcoincash:qqeht8vnwag20yv8dvtcrd4ujx09fwxwsqqqw93w88', 10000)

Memo.cash Announcement

Memo.cash is a Twitter-like social network based on Bitcoin Cash. It uses OP_RETURN outputs to post messages on-chain. By using a covenant we can create an example contract whose only job is to post Isaac Asimov's first law of smart contracts to Memo.cash. Just to remind its fellow smart contracts.

This contract expects a hardcoded transaction fee of 1000 satoshis. This is necessary due to the nature of covenants (See the Licho's Mecenas example for more information on this). The remaining balance after this transaction fee might end up being lower than 1000 satoshis, which means that the contract does not have enough leftover to make another announcement.

To ensure that this leftover money does not get lost in the contract, the contract performs an extra check, and adds the remainder to the transaction fee if it's too low.

pragma cashscript ^0.4.0;
// This contract enforces making an announcement on Memo.cash and sending the
// remaining balance back to the contract.
contract Announcement() {
function announce(pubkey pk, sig s) {
// The transaction can be signed by anyone, because the contract can only
// make an announcement
require(checkSig(s, pk));
// Create the memo.cash announcement output
bytes announcement = new OutputNullData([
bytes('A contract may not injure a human being or, '
+ 'through inaction, allow a human being to come to harm.')
// Use a hardcoded miner fee
int minerFee = 1000;
// Calculate leftover money after fee (1000 sats)
int remainder = int(bytes(tx.value)) - minerFee;
if (remainder >= minerFee) {
// Send remainder back to the contract if there's enough
// left for another announcement
bytes32 change = new OutputP2SH(bytes8(remainder), hash160(tx.bytecode));
require(tx.hashOutputs == hash256(announcement + change));
} else {
// Don't send the remainder back if there's not enough left
// (i.e. add the remainder to the miner fee)
require(tx.hashOutputs == hash256(announcement));

The CashScript code above ensures that the smart contract can only be used in the way specified in the code. But the transaction needs to be created by the SDK, and to ensure that it complies with the rules of the smart contract, we need to use some of the more advanced options of the SDK. We exclude some of the boilerplate BITBOX code that was present in the example above, just for brevity.

import { BITBOX } from 'bitbox-sdk';
import { Contract, SignatureTemplate } from 'cashscript';
import { alice, alicePk } from './somewhere';
export async function run(){
// Compile the Announcement contract
const Announcement = Contract.compile('./announcement.cash', 'mainnet');
// Instantiate a new Announcement contract
const instance = Announcement.new();
// Display contract address, balance, opcount, and bytesize
console.log('contract address:', instance.address);
console.log('contract balance:', await instance.getBalance());
console.log('contract opcount:', instance.opcount);
console.log('contract bytesize:', instance.bytesize);
// Create the announcement string. Any other announcement will fail because
// it does not comply with the smart contract.
const str = 'A contract may not injure a human being or, '
+ 'through inaction, allow a human being to come to harm.';
// Send the announcement transaction
const txDetails = await instance.functions
.announce(alicePk, new SignatureTemplate(alice))
// Add the announcement string as an OP_RETURN output
.withOpReturn(['0x6d02', str])
// Hardcodes the transaction fee (like the contract expects)
// Only add a "change" output if the remainder is higher than 1000