No interaction with funds.

APR used for stateless recommend() function. Can be used to change the recommended provider. The owner could replace the existing contract to a controlled contract that could suggest a specific lending provider.

set_new_COMPOUND ⚠️

Could access funds via malicious lending contract.

Sets the downstream address for Compound. The owner could replicate the compound mint() function call and force the APR change (with the vector mentioned in set_new_APR) and withdraw funds.

This method is implemented to allow adding Compound if they support the underlying token.

set_new_DTOKEN ✅

No interaction with funds.

Can only update the ID at dydx, no way to influence any other action.

This method is implemented to allow adding dYdX if they support the underlying token.

set_new_FULCRUM ⚠️

As per set_new_COMPOUND

yTUSDv2

set_new_APR ✅
set_new_COMPOUND ⚠️
set_new_DTOKEN ✅

Utility Contracts

Contract

ABI

Address

APROracle

UniswapROI

UniswapAPR

APRWithPoolOracle

IEarnAPRWithPool

IEarnAPRWithPool

No interaction with funds.

APR used for stateless recommend() function. Can be used to change the recommended provider. The owner could influence the calculation to a specific lending provider.

addAToken ✅
addAUniToken ✅
addCToken ✅
addDToken ✅
addIToken ✅
addPool ✅
addYToken ✅
set_new_APR ✅
set_new_UNI ✅
set_new_UNIAPR ✅
set_new_UNIROI ✅

APRWithPoolOracle

No interaction with funds.

APR used for stateless recommend() function. Can be used to change the recommended provider. The owner could influence the calculation to a specific lending provider.

set_new_AAVE ✅
set_new_DDEX ✅
set_new_DYDX ✅
set_new_Modifier ✅
set_new_Ratio ✅
set_new_blocksPerYear ✅

UniswapROI

None ✅

UniswapAPR

No interaction with funds.

set_new_blocksPerYear ✅

Lending Providers

PreviousMisc Resources NextSmart Contract API

Last updated 5 years ago