4 ms·
The so-called DeFi is full of centralized choke points, such as stablecoins and other centrally issued securities
by joyfylbanana 4y ago
The so-called DeFi is full of centralized choke points, such as stablecoins and other centrally issued securities
- therein 4y agoNot to mention the use of `ProxyContracts` that obfuscate changes to the actual contract implementation. When you interact with a certain contract, you are likely interacting with the ProxyContract which relays your calls to the actual contract. The proxycontract is often under lock or has multiple signatories to amending but the "origin" contract doesn't. So many DeFi projects get "audited by Certik" actually just get their proxy contracts audited and there is nothing in there but a single line per function, calling the origin contract.
- cryptoboy2283 4y agoCare to share an example?
- therein 4y agoMMF was one of many. I reckon the recent SafeMoon incident was also under a similar cover of "audited but not audited". https://twitter.com/CertiKAlert/status/1640974656696991745?cxt=HHwWgoC-nbHw9MUtAAAA https://twitter.com/CertiKAlert/status/1640974656696991745?c... `This upgrade was not within the scope of our audit.`
- arbol 4y agoProxy contracts are necessary to perform upgrades to functionality over time. However auditing the proxy only is shady