Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
I would take on this task if possible? |
|
@gnart33 let us finish kodiak first please |
|
@yvesbou I would like to work on this if it's available. Can i know more info on this? |
|
Hi @varshith257 Thank you for your interest, the review is yours if you confirm. You have I've updated the template to the latest version just now. Go through the contracts table, run them with the permission scanner. Fill out the permission table with the functions that are restricted/permissioned. While doing that, figure out the smart contract architecture, draw a diagram showing key user interactions + permissioned function calls. This should help contextualise the report and the mentioned contracts and permissions. The ratings section should name concrete centralization vectors (upgrading, stealing funds, withholding fees/incentives etc.). The protocol analysis section should explain the diagram(s) and can be more technical, mention concrete functions etc. The permission table (contract | function | impact | owner) should also be technical. Regarding autonomy/dependency, this is for assessing the risk of dependencies that could break and what's the effect on the studied defi protocol (in this case euler v2). Dependencies are strictly outside, so a multisig of the team is not considered for the category of dependency. For a borrow lending platform, price oracles are the obvious dependency that have centralizing effect on their autonomy Generally, when speaking about risk: high risk -> users can suffer loss of deposited funds all these risks are induced through |
|
Thanks for detailed info. I will work on this and join discord |
|
@varshith257 here is the excalidraw which you should use to draw the diagram |
|
Here is the permission scanner repo: https://github.com/deficollective/permission-scanner |
|
@varshith257 can you give us an update where the report stands atm? |
|
@yvesbou Will be drafting PR |
|
@varshith257 can you report your progress? |
|
@yvesbou Done with analysis and writing report just left with minor tweaks and a diagram I will draft my work by EOD |
|
@varshith257 It does not have to be perfect, but we want to see the progress, if it's on track to improve. Otherwise we make it available again. |
|
@yvesbou Got it. I had initially planned to draft and push the update by EOD as mentioned earlier assuming my laptop service would be complete that day. I have already completed the DeFi scanner analysis and filled the relevant info into the template for the linked PR but the files are still on my desktop and haven’t been pushed to Git yet due to the ongoing repair. The service will be completed by tomorrow and I will push the progress as soon as I am back on my system. Appreciate your patience and apologies for the delay. |
Please have also a look at
https://github.com/euler-xyz/euler-interfaces/blob/master/addresses/1/OracleAdaptersAddresses.csv
and determine the different adapters used. Insights from this research will determine the autonomy/dependency risk for the report.