Furucombo (COMBO)
Basics
- Started in / Announced on:
- Mainnet release: 4-2020
- Based in:
- Furucombo, a drag-and-drop flash loan UI.
"As a DeFi aggregator, Furucombo connects different DeFi protocols, such as Uniswap, Compound, and Aave, in one place.
History
Token
Launch
Token allocation
Utility
- Launched a governance token (28-12-2020).
Token Details
Stablecoin
Technology
- Whitepaper can be found [insert here].
- Code can be viewed [insert here].
- Built on:
- Programming language used:
Transaction Details
How it works
Mining
Staking
Liquidity Mining
Layer Two
Different Implementations
Interoperability
Other Details
Privacy Method being used
Compliance
Oracle Method being used
Their Other Projects
DEX
Governance
DAO
Treasury
Upgrades
Roadmap
- Can be found [Insert link here].
Audits
- Bug bounty program can be found [insert here].
Bugs/Hacks
"In what is known as an “evil contract” exploit, the attacker made the Furucombo proxy contract think that Aave V2 had a new implementation.
The new implementation was, of course, malicious, and had the ability to transfer all approved tokens to addresses controlled by the attacker, as users had approved the Furucombo contracts to use their tokens on their behalf.
Summary:
- FC proxy made caller-specified delegatecalls to trusted handlers, letting its storage be modified
- a handler made caller-specified delegatecalls to an address read from storage
- the handler exposed a function for setting that address
What have we learnt:
- a "trust list" is useful but not a guarantee
- developers should audit how a delegatecallee's functions can affect the caller's storage
- consider restricting functions or parameters of callees
- be wary of user-supplied inputs
It wasn’t just individuals who lost out, even Cream Finance suffered a loss, as the attacker “borrowed” directly from their treasury."
Usage
Projects that use or built on it
Competition
"Projects like 1inch and Yearn Finance also provide aggregation platforms, but Furucombo is different from both, CEO Hsuan-Ting Chu told The Block.
1inch only aggregates decentralized exchanges, while Furucombo aggregates all kinds of DeFi protocols, said Chu. As for Yearn Finance, he said, the protocol requires writing smart contracts to build a yield farming strategy. With Furucombo, everything is "permissionless."
"With Yearn Finance's yVault, you need to know how to communicate with the community, get their votes on your strategy, and wait for some engineer to help you with smart contract building on your strategy. Our strategies are not smart contracts, which means more secure and more efficient...no vote needed, no coding skill needed," said Chu."
Coin Distribution
Pros and Cons
Pros
Cons
Team, Funding, Partnerships, etc.
Team
"The project plans to double its team of 12 to around 24 in the coming months."
Funding
- From The Block (7-1-2021):
"Raised $1.85 million in seed funding. The round was backed by SevenX Ventures, Defiance Capital, 1kx, Multicoin Capital, and Aave founder Stani Kulechov, among others."
