HackerOne User Finds Critical Bug in MakerDAO Upgrade

MakerDAO has fixed a critical bug that could have resulted in a complete loss of funds for all Dai users thanks to HackerOne user lucash-dev. 

Bug Bounty Hunter 

Lucash-dev took part in MakerDao’s bug bounty program and made the first critical finding in MakerDao’s planned Multi-Collateral Dai (MCD) upgrade. In a report submitted on Oct. 1st, lucash-dev wrote that the bug could have enabled an attacker to steal all collateral store on the MCD system, potentially in one fell swoop. 

From the report, lucash-dev cites a complete lack of access control in a MakerDao smart contract as the bug-enabler. Quoted from the report, “A lack of validation in the method of flip.kick allows an attacker to create and auction with a fake bid value. Since the end contract trusts that (fake-bid) value, it can be exploited to issue any amount of free Dai during liquidation. That Dai can then be immediately used to obtain all collateral storied in the end contract.” 

After identifying the security flaw, lucash-dev was awarded a $50,000 bounty. The bug was discovered during the testing phase of the MCD upgrade before general user-access had been granted.

Image via Shutterstock

Dai Stablecoin Reaches 100 Million in Debt Ceiling – An All-Time-High

The Dai (DAI) stablecoin reached the protocol’s built-in debt ceiling of 100 million as there have been 100 million Dai tokens minted. The nearly two-year-old stablecoin project had an original debt ceiling of 50 million, which was raised to 100 million in July 2018. 

Dai, created by MakerDAO, has a core function of allowing users to borrow or generate Dai by staking their cryptocurrencies as collateral. The MakerDao team and its community members are planning a governance vote on Nov. 8 to raise the debt ceiling by an additional 10-20 million. 

Unlike other stablecoins that are backed by fiat currencies or commodities, Dai is not supported by reserve currencies, but rather Ether generated collateralized debt position (CDP) smart contracts. 

Rune Christensen, CEO of the Maker Foundation, announced on Oct. 9 that the foundation would release a multi-collateral Dai (MCD) later this month. Changes to the nomenclature of its current asset will be made with the release of the new coin.  

The new user interface of the Maker Protocol after the release of MCD will label CDPs as “Vault.” MCD would allow users to stake assets as collateral, and Ether will be stored in an Ether vault, while Basic Attention Tokens (BAT) would be stored in a BAT vault. 

Image via Shutterstock

The Dapp of 2019? How MakerDAO Took Charge of the DeFi Field

The MakerDao project is the contemporary success story for decentralized finance (DeFi). The project went live in December 2017, with DAI as the USD stablecoin and MKR functioning as the governance token. In the world of decentralized finance, MakerDAO is by far the most popular application running on Ethereum and has been steadily increasing traction since its launch. After only a year and a half into production, MakerDao reached its all-time high market cap of $97M on July 9, 2019.

In part one of our interview with Gustav Arentoft, Business Development, Dai Speaker, MakerDAO, he offers Blockchain.News insight into the home-grown success of his organizations in terms of transparency, governance and the interesting use case of Maker in Spotify.

Steady growth of DAI despite dropping market dominance

According to DeFi Pulse, the total ether deposited in MakerDao represents just above 50 percent of the total value locked into DeFi protocols. While still dominant it marks a significant decrease from the 90 percent recorded at the start of the year. While the percentage has fallen, Arentoft believes, “It really depends on what you look at as dominating factors. Currently, the rankings are defined by the number of crypto assets locked into a DeFi protocol. We were one of the first projects that you could actually lock up Ethereum to print DAI against so of course, our market dominance was much higher previously.” Commenting on the increased competition Arentoft said, “Fortunately some of these new players have come along, like Compound which has had a very strong performance over the last 12 months. There are also different protocols like Uniswap, but the incredible thing is these new protocols—they take DAI and actually one of their primary use cases in their system and protocols is using Dai. For example, Compound dominates the holding of DAI with 12.6M. So we may have lost market cap but that market cap went into other protocols that utilize Dai in efficient ways and even open up some very strong arbitrage opportunities.”  

Exhibit 1: DAI Locked in DeFi 2019

Source: DeFi Pulse

Due to the nature of the DeFi ecosystem, ultimately Maker’s lost market cap is benefiting the end consumers as the various protocols are interoperable (see Exhibit 1). Arentoft said, “The protocols continue to leverage each other’s technology and awesome products and services are being created for end-users, so we are not overly concerned about the perceived loss in dominance because Dai will still be the stable value in these systems.” He concluded, “If you look at us from just a crypto perspective, we might continue to appear shoulder to shoulder against these very competitive and good products but if you look from the outside, I believe we will be one of the first projects to bring legacy world collateral into the smart contract-based systems.”

Bringing liquidity to Spotify’s artists

Turning to use cases and partnerships, Arentoft discussed a Maker’s collaboration with Paperchain—an extremely efficient data analytics provider which leverages data which can be publicly viewed on platforms such as Spotify.

Arentoft said, “The problem that we’re solving is that currently the artists streamed on Spotify have to wait a long time before they actually receive their royalties and payments, so we’ve created an extremely efficient and accurate data analytics tool to basically predict the amount owed down to a 1% difference. This creates an alternative asset that traditional institutions are not used to serving, however, it is an asset that’s actually relatively easy to price.”

On the Spotify project, Maker has been working with an open-source framework from Centrifuge, Arentoft said, ‘’We basically can take these individual royalties which are converted into NFTs and then you can actually create a standardized version of the collateral, which we didn’t aim to use in multi-collateral Dai.” He explained, “That basically means that U.S. and Spotify artists can predict their future income. They can leverage the blockchain and the MakerDao protocol to actually gain an advance payment on the royalties that the artist will be getting. It is a new way of bringing liquidity to artists basically.”

Maker’s Transparency and Decentralized Governance

Maker’s enjoys an unmatched degree of popularity among the DeFi community. Arentoft believes that this can be attributed to the very high degree of transparency within the organization. He said, “I think we have one of the only projects that has verifiable revenue directly on the blockchain, enhancing the transparency of fees coming to us and the overall movement of capital in the blockchain. If you want to check it out, you can go to the website called Makerburn.com which in real-time and  shows everything going through the system.”

On Maker’s governance as a decentralized autonomous organization, Arentoft commented, “We have been live with the ability to execute on-chain governance since 2017. In the future, governance is going to be a little bit more tricky because there’ll be a lot more different kinds of decisions to make regarding the structure.” He continued, “But the governance of Maker was something which started out in many ways as an experiment and now with a proven track record, we have shown that this is something that actually works.”

MakerDAO’s Popularity: Behind the scenes

Arentoft believes that there are many different factors that have contributed to the success of Maker’s decentralized autonomous governance. He elaborated, “We have had very strong support within the Ethereum community and I think we have one of the first strong use cases has managed to manifest itself, which in turn has created a sphere of people who wants to participate.”

Maker has also been very open and transparent about issues within their protocol such as the common pain point of scalability but has continued to engage their community throughout the process of addressing these issues. Arentoft couples this enhanced transparency with Maker’s strategy to attach themselves to projects that have the greatest growth potential as further indications of the economic communities’ interest and patronage. Arentoft divulged, “We truly project that we can go out and change the lives of everyday people right, at tremendous scale. I think people want to join that movement and the future prospect and at the same time, the Maker project has drawn the attention of the people who tend to hang around in macroeconomics circles. We have some strong followers, both from central banks and prestigious academic communities so I think there’s a lot of different elements that when combined make Maker a pretty interesting and quite outstanding project.” 

Stay tuned for Part 2 and 3 of MakerDAO’s interview.

How Does MakerDAO Stay Compliant on over 400 Global Partnerships?

Exclusive Interview with Gustav Arentoft of MakerDAO (Link: Part 1 and Part 2)
 

MakerDao is the protocol behind Dai, the world’s first decentralized stablecoin and the contemporary success story for decentralized finance (DeFi). The project went live in December 2017, with Dai as the USD stablecoin and Maker functioning as the governance token. In the world of decentralized finance, MakerDao is by far the most popular DeFi protocol running on the Ethereum network and has been steadily increasing traction since its launch. After only a year and a half into production, MakerDao reached its all-time high market cap of $97M on July 9, 2019.  

In part three of our interview with Gustave Arentoft, Business Development, Dai Speaker, MakerDAO: he talks to Blockchain.News regarding the necessity for decentralized banking for the institutionally unbanked and regulatory requirements for operating across multiple jurisdictions.  

Regulating on the Edges 

Maker has users in over 120 separate and specifically financially regulated jurisdictions across the globe. To regulate a truly decentralized entity, such as Bitcoin or Ethereum, at its core to satisfy every local financial compliance protocol is basically “not possible” according to Arentoft. “We regulate where the lending protocols meet the jurisdiction. So with a decentralized product you don’t regulate the core but you regulate on the edges, the edges which meet the specific local jurisdiction.” 

Maker has more than 400 different partnerships globally. These partners are already using DAI and collateralized debt positions (CDP), Arentoft stated that every single time a project is tied to any legal jurisdiction, compliance with local regulation must be made but he explained this process is often simplified by their active partners’ foothold in that particular jurisdiction. He said, “For example, one of our partners is Wirex, which is a debit card company, and they have an e-money license in the UK to operate—so that’s one way Maker becomes regulated in regards to the UK’s jurisdiction as that company uses our product within the local regulatory guidelines. Regulation is something that we’re really on the forefront with and we try to ensure that we won’t get ourselves or any of our partners in trouble with regulators.”  

Education is the Key 

In regards to regulators, Arentoft believes that they have been labeled as having fairly negative approaches to crypto and token regulation, whereas he feels it is more a matter of education at this point and that it is a necessity for developers to be a part of the growing conversation. On meeting the regulators at the Singapore FinTech Festival, he said, “I felt that they really wanted to learn and explore this space not just reject it.”   

Maker were invited to present on the future of sustainable finance by the Asian Development Bank a week prior to the Singapore FinTech Festival. Arentoft again highlighted that there is an outsider perception that DeFi organizations are met with nothing but vitriol from the central banks who are perceived as only viewing the technology as a threat to their traditional institutions. He stated, “41 central banks were present and what they actually are focused on is that we have the ability to serve people that banks had previously deemed too unprofitable to service. For banks to set up an affiliate abroad is a very expensive process compared to downloading an app on your smartphone.” He added, “If you look at the predicted increasing smartphone adoption rate for the next few years, it will allow us to work together with these banks in areas that require our operations to bank the unbanked—our mission is to help these people after all.”  

Can MakerDAO Survive the Coronavirus Pandemic?

The coronavirus pandemic and growing macroeconomic uncertainties have seriously dampened the cryptocurrency market, which Bitcoin once dipped below $4000. The “Red Sea” has expanded across the market of decentralized finance (DeFi), where the total value locked (USD) for the DeFi market dropped from $649M to $246M.

Widespread Concerns over MakerDAO community

The share plunge of the cryptocurrency market has severely hit MakerDAO, the leader in the DeFi ecosystem. Maker (MKR) resulted in a massive drop to $246M, compared to $889M a day ago. Such a sharp plunge of Maker’s market value led to widespread concern on the future of Maker. The community-initiated the thread in the MakerDAO forum, in particular, addressing the issue of whether MakerDAO will consider an Emergency Shutdown in the short term.

Per the “Black Thursday Response Thread” initiated by developer “LongForWisdom” on March 13, the community discussed the current actions are taken, the arrangement of regularly scheduled polls and a possible emergency shutdown in the short term. Apart from the forum discussion, Maker has published a blog post regarding the next steps to be taken amid a recent market crash.

Emergency Shutdown is not an Immediate Option

The official blogpost of Maker revealed that there is no planned emergency shutdown, with Ethereum developer Ryan Berckmans concluded a summary of Maker community call stating,

“An emergency shutdown (not happening now) would cause DAI holders to take a haircut, whereas the social contract of MakerDAO is that MKR tokens take a haircut in the event of system failure. Therefore, we should try and ensure that MKR holders take a hair cut by avoiding emergency shutdown if possible. I heard that an emergency shutdown is not being considered as an immediate option.”

Key Changes to be Made

While Maker has no intention to an immediate shutdown, the Foundation agrees that the following issues need to be addressed:

1) DAI is off-peg

The cryptocurrency market has seen a wide “Red Sea”, except for stablecoins such as multi-collateral DAI (MCD). Following the global stock market crash, the price of multi-collateral DAI (MCD) lost the dollar peg and reached USD 1.07. To restore the pegging between MCD and USD, the MakerDAO community is proposing the reduction of DAI Saving Rate (DSR) which brings more DAI in circulation and thus moving the DAI price closer to the $1 peg. Another proposal is the reduction of global stability fee, an attempt to narrow the MCD/USD spread by opening more vaults (formerly known as collateralized debt positions) for arbitrage on the price of DAI.

2) How does MakerDAO settle 4.5M Debt?

With the 30% price drop in Ethereum, some vaults that use Ethereum to mint DAI can dip below the collateralization requirement of 150% and thus undercollateralized. The sharp plunge in the Ethereum price made a lot of vaults available for liquidation. When multiple users liquidated their contracts, this led to the congestion of the Ethereum network and the gas price surged significantly.

During the liquidation process, collateral is auctioned for DAI to repay any outstanding debts. When there is not enough liquidity for keepers to absorb all the liquidations, and one keeper bid $0 ETH with no competition. The lack of competition means bidders can win liquidation auctions without exchange of DAI. As a result, some vaults are liquidated without any DAI circulate back into the system, leading to a 4.5m outstanding under-collateralized debt owed in the MakerDAO system.

To settle the outstanding debts, Maker decided to conduct the first-ever debt auction. According to the official whitepaper, the protocol debt is covered by DAI in the Maker Buffer. The Maker protocol will trigger a debt auction if DAI in Maker Buffer is insufficient to cover the debt. In the debt auction, the system mints MKR token to increase the amount of MKR in circulation, and the minted MKR token will be sold to bidders of DAI.

Results of Executive Voting

The Maker Foundation Interim Governance Facilitator conducted the executive voting on “Adjust Multiple Risk Parameters”. Apart from the risk parameters to restore the peg and debt repayment, the proposal also included the reduction of the debt ceiling and adjustments in Flip and Flop auction. The proposal is passed on March 13 07:14 (UTC). The proposed adjustment of multiple risk parameters will be available for execution on March 14.

Image via Shutterstock

MakerDAO May Onboard USDC as DAI Collateral Support to Combat Mounting Liquidity Risk

The share plunge of the cryptocurrency market has severely hit MakerDAO, the leader in the decentralized finance (DeFi) ecosystem. Last week its market value fell sharply from 889M to $246M which brought together Maker’s developer community who have recently discussed adding support for Circle’s USDC as collateral to hedge against the liquidity risk.

MakerDao Foundation’s Developer Team hosted a public meeting this morning where the discussion focused on the code on the collateral adaptor for USDC.

According to the official thread, adding the stablecoin as collateral will help to create liquidity for Maker’s Dai stablecoin and push the Dai peg back towards $1 – “The mechanism of this looks like: Lock USDC -> Mint Dai -> Sell for USDC -> Repeat.”

The thread also states USDC collateral, “ Will allow Vault Holders to close their Vaults without eating the loss on the Dai peg being high against USD.”

Diluted DAI

First on the list of the author’s perceived negatives of adding USDC support would be the reduced decentralized purity of Maker’s Dai. Introducing a US dollar backed stablecoin could also hold a regulatory risk and may result in Circle blacklisting the locked up collateral due to KYC concerns.

During the call, a MakerDAO representative dismissed the Dai dilution argument stating, “ DAI is decentralized because there is no central authority that mints or custodies or approves people’s access to it. The individual does all of it for themselves, that’s why the community is driving the parameters of the systems (per the discussions in forum).”

The representative emphatically summarised, “To say that DAI is not decentralized because of some of the assets that might back it would be erroneous.”

Finding a New Peg for Dai

As reported by Blockchain.News on March 13, following the global stock market crash, the price of multi-collateral DAI (MCD) lost the dollar peg and reached USD 1.07.

To restore the pegging between MCD and USD, the MakerDAO community also has proposed the reduction of DAI Saving Rate (DSR) which brings more DAI in circulation and thus moving the DAI price closer to the $1 peg.

The Maker Foundation have confirmed that they are now making the technical preparations to onboard Circle’s USDC as collateral, but no strategy to restore Dai’s peg has received a confirmation vote yet from Maker’s governance council.

Image via Shutterstock

Will the Impact of Yearn Finance's yETH Vault on the DeFi Space Last Long?

Yearn.finance, a decentralized finance (DeFi) protocol, has recently launched yETH vault, its core product. The yETH vault enables the process of seeking the best returns for yield farmers, pooling funds to reduce Ethereum gas fees. 

Yield farming in the DeFi space has been seeing a growth in popularity, as crypto whales have been leveraging DeFi protocols to generate high rates of return. Although DeFi enables an ecosystem of decentralized applications to have access to financial products including cryptocurrencies, yield farming is most profitable only to crypto whales, who are able to have a high amount of crypto locked up in DeFi. 

yETH was launched as a part of Yearn.finance’s yVault strategies, which are a set of predefined actions that allow users to deposit funds and automatically send them to liquidity pools. This will then enable high-yield interest where more token rewards are earned by the user. 

The yETH vault strategy involves four steps. Ether (ETH) is first deposited and used as collateral to acquire MakerDAO’s DAI at a 200 percent collateralization rate. Interested would then be earned and the DAI will then be sent to DeFi stablecoin liquidity protocol, Curve Finance (CRV).

After the DAI is sent to Curve Finance, DAI is locked and interest from extra CRV tokens are received, which is then sent to Ether, back to the yETH vault. An analyst recently explained that MakerDAO’s collateralized debt positions (CDPs) are used as a bridge for ETH to be used for yield farming on DeFi. 

What does this mean for DeFi tokens?

According to the analyst, yETH “demonstrates how composable protocols within Ethereum’s ecosystem have become.” He added that yETH accelerates the productivity of idle Ether. 

As the yETH vault strategy involves some of the DeFi tokens, the process would then be bullish for Ethereum (ETH), MakerDAO (DAI), and Yearn.finance (YFI). However, Curve Finance (CRV)’s price would be driven down, as CRV is sold to buy ETH, adding the selling pressure to the token. The analyst added:

“It’s pretty impressive to see how much ETH has already been locked up. yETH’s impact on the space will be long-lasting.”

The Yearn.finance token has already seen multiple all-time highs in the past month, reaching $39,600 recently, more than three times the value of Bitcoin. Analysts and the crypto community previously suspected that the anticipated launch of yETH will drive a bull run in the Ether market.

Pickle Finance DeFi Protocol Loses $19.7 Million In DAI Stablecoin in “Massive” Hack

Pickle Finance announced that its DeFi protocol was hacked and attackers drained $19.7 million worth of DAI stablecoin from a Pickle wallet. 

Shortly after the security breach and loss of nearly $20 million in DAI, Pickle’s administrators engaged with cybersecurity specialists to tackle the situation. The first step that the team took was to reverse-engineer the transaction and to see if they can write the code to replicate the attack. After several hours, the team finally figured out the transaction and how the hackers made the execution. The team said that the hacking was an extremely complicated attack and involved several components of the Pickle protocol.

Unlike several other DeFi attacks recently witnessed, this particular exploit did not involve flash loan attacks.  The attacker instead swapped funds between a malicious copycat contract and Pickle cDAI Jar (Pickle’s yield-bearing vault) thus leading to the loss of funds.

The security specialists said that the hacker created “evil jars” smart contracts that have the same interface as original jars to do the evil. Then the hacker swapped funds between the “evil jar” and the traditional cDAI Jar, thus stealing the $19.7 million in deposits. 

Although the team has taken measures to mitigate further attacks, the security specialists advised the team not to publish any details of the actual attack yet in order not to do something that is risky.

The incident caused the price of Pickle’s native token (PICKLE) to decline from $50.12 to $10.17, but rebounded to about $12.60.

Pickle Finance is a yield farming protocol that aims to reward users with interest payments and provide liquidity into the DeFi’s four largest stablecoins (sUSD, DAI, USDT, and USDC). The decentralized finance project shifts customers’ funds around DeFi protocols to maximize returns.

Scams Tarnishing the Image of DeFi Market

With DeFi scams continue to rise day by day, industry stakeholders urge users to prioritize due diligence before making investments in any project. Individuals familiar with the decentralized finance landscape know that a day hardly goes by without an incident of a project or another “exit scamming” its customers.

Although DeFi is meant to assist in democratizing access to global finance, the emerging market niche has become a perfect environment where malicious actors constantly siphon funds from innocent victims and investors are falling into scams. 

Maker Hits a New All-Time High Close to the $5,000 Mark

Maker is the first Ethereum-based smart contract system to launch an automated cryptocurrency lending platform. 

Maker provides the first decentralized basic stable currency Dai (which can be compared and analyzed as the U.S. dollar on Ethereum) and a derivative financial system, promoting the prosperity of decentralized finance (DeFi).

Dai is issued through a full mortgage guarantee of digital assets. Since its launch in 2017, Dai has always remained anchored to the U.S. dollar with a 1:1 ratio.

On April 19, members of the MakerDAO community began to vote on MIP45, a proposal aimed at upgrading the liquidation system of the Maker protocol and maintaining the stability of Dai pegged to the U.S. dollar.

If approved, the liquidation 2.0 system will provide higher security, predictability, and decentralization, and provide community members with more opportunities to participate in collateral auctions through Auction Keeper software and a more conventional interface. This will promote the participation of the Maker community and the entire DeFi department.

According to data from DeFi Pulse, Maker, the largest DeFi agreement with system collateral of $965 million, dominates 16.44% of the entire DeFi market.

The holders of the Maker (MKR) tokens of the project have received a 64.23% price increase reward in the past week. According to CoinMarketCap, Maker with a market cap of $4,817,105,553, ranks as the 30th largest cryptocurrency.

The token has grown nearly eight-fold since the beginning of this year, rising from $587 to $4,652,  It hit a record high of $4,995 today, breaking the $4,500 marks in one clean swoop.

Maker (MKR) Price Analysis

Source: MKR/USD 4-hour via TradingView

Judging from the 4-hour candlestick chart, MKR has successfully broken through its previous high of $4,118, and the rapidly expanding trading volume has resulted in $4,118 being flipped from a resistance to a support level.

The transaction price of MKR/USD is higher than the Exponential Moving Average (EMA) ribbon. Both the upward moving average and the bullish MACD index indicate that the bulls are currently dominating the market.

However, the Relative Strength Index stepping into the overbought zone is gradually levelling off, which suggests that MKR is encountering relatively strong selling pressure after touching its all-time high of $4,995 today. The MKR’s price will therefore experience a slight retracement, and it is likely to trade sideways for a period of time around $4,400-$4,600 before resuming its upward momentum.

If MKR’s price can stabilize above $4,200, then the upward trend of Maker may open a faster upward channel. As Maker hit a new high, this will mean that the altcoin will not encounter strong selling pressure on its way up. If the entire crypto market emerges from its current slump, it is highly likely that Maker breaks through $5,500 in the short term.

Conversely, a surge in the number of sell orders will push MKR below the $4118 support level and may trigger a more severe correction to the 20-day Exponential Moving Average of $3,795.

Celsius Repays Compound Finance $10m Worth of DAI

Crypto lender Celsius Network has repaid interest-yielding DeFi service Compound Finance with $10 million worth of the DAI stablecoin, according to a report from Crypto Briefing.

The payment is likely to be an attempt to re-establish solvency following a recent episode of suspension of withdrawals, swaps and transfers, which resulted in rumours of insolvency. Currently, those services are still under suspension.

Crypto Briefing reported that Celsius has made a number of other repayments over the past week. Celsius has paid $53.6 million DAI in a series of transactions to its vault with Oasis Protocol, a yield-bearing DeFi platform.

According to Gemini, DAI is an algorithmic stablecoin issued by Ethereum-based protocol MakerDAO, which seeks to maintain an exact ratio of one-to-one with the US dollar.

Celsius, an Etherscan block explorer, uses DeFi protocols to generate interest for its clients.

Although the $10 million payment is only a small fraction of Celsius’ activity, this step is likely a move towards solvency. The payment is also a potential move to close positions with clients to regain liquidity and re-open withdrawals.

Celsius’ repayment comes shortly after the company confirmed through a blog that the suspension of withdrawals, transactions and swaps will continue.

“Our objective continues to be stabilising our liquidity and operations,” the firm wrote on June 19. It added that this “will take time” and that it will “continue to work around the clock.”

Celsius has also stated that it will cooperate with regulators and officials in investigating the company’s suspension of services.

Celsius further confirmed that it would pause Twitter activities and AMAs to prioritise resolving the current situation.

Exit mobile version