Skip to content

Latest commit

 

History

History
129 lines (89 loc) · 4.99 KB

adminpolicy.md

File metadata and controls

129 lines (89 loc) · 4.99 KB

Admin Access Policy

{% hint style="info" %} These docs are still being worked on. {% endhint %}

v2 Yield Tokens

Contract ABI Address
yDAIv2 JSON ydaiv2.iearn.eth
yUSDCv2 JSON yusdcv2.iearn.eth
yUSDTv2 JSON yusdtv2.iearn.eth
yTUSDv2 JSON ytusdv2.iearn.eth

yDAIv2

None ✅

yUSDCv2

None ✅

yUSDTv2

  • set_new_APR ✅
No interaction with funds.

APR used for stateless recommend() function. Can be used to change the recommended provider. The owner could replace the existing contract to a controlled contract that could suggest a specific lending provider.
  • set_new_COMPOUND ⚠️
Could access funds via malicious lending contract.

Sets the downstream address for Compound. The owner could replicate the compound mint() function call and force the APR change (with the vector mentioned in set_new_APR) and withdraw funds.

This method is implemented to allow adding Compound if they support the underlying token.
  • set_new_DTOKEN ✅
No interaction with funds.

Can only update the ID at dydx, no way to influence any other action.

This method is implemented to allow adding dYdX if they support the underlying token.
  • set_new_FULCRUM ⚠️
As per set_new_COMPOUND

yTUSDv2

  • set_new_APR ✅
  • set_new_COMPOUND ⚠️
  • set_new_DTOKEN ✅

Utility Contracts

Contract ABI Address
APROracle JSON apr.iearn.eth
UniswapROI JSON uniroi.iearn.eth
UniswapAPR JSON uniapr.iearn.eth
APRWithPoolOracle JSON apradj.iearn.eth
IEarnAPRWithPool JSON iapradj.iearn.eth

IEarnAPRWithPool

No interaction with funds.

APR used for stateless recommend() function. Can be used to change the recommended provider. The owner could influence the calculation to a specific lending provider.
  • addAToken ✅
  • addAUniToken ✅
  • addCToken ✅
  • addDToken ✅
  • addIToken ✅
  • addPool ✅
  • addYToken ✅
  • set_new_APR ✅
  • set_new_UNI ✅
  • set_new_UNIAPR ✅
  • set_new_UNIROI ✅

APRWithPoolOracle

No interaction with funds.

APR used for stateless recommend() function. Can be used to change the recommended provider. The owner could influence the calculation to a specific lending provider.
  • set_new_AAVE ✅
  • set_new_DDEX ✅
  • set_new_DYDX ✅
  • set_new_Modifier ✅
  • set_new_Ratio ✅
  • set_new_blocksPerYear ✅

UniswapROI

None ✅

UniswapAPR

No interaction with funds.
  • set_new_blocksPerYear ✅

Lending Providers