Difference between revisions of "Alpha Finance (ALPHA)"

From CryptoWiki

m (1 revision imported)
Line 5: Line 5:
* [[Mainnet]] release:
* [[Mainnet]] release:
* [https://ethhub.substack.com/p/ethhub-weekly-134?token=eyJ1c2VyX2lkIjoxMzk3OTAwLCJwb3N0X2lkIjo2OTA5OTI4LCJfIjoiYzl4Um4iLCJpYXQiOjE2MDIwNzc3MjMsImV4cCI6MTYwMjA4MTMyMywiaXNzIjoicHViLTM5MTAiLCJzdWIiOiJwb3N0LXJlYWN0aW9uIn0.k_ojYreKprb79X8EPS7zxvVxWcsoALuAARXWzIhzmmI From] [[EthHub]] #34 (5-10-2020):
* [https://ethhub.substack.com/p/ethhub-weekly-134?token=eyJ1c2VyX2lkIjoxMzk3OTAwLCJwb3N0X2lkIjo2OTA5OTI4LCJfIjoiYzl4Um4iLCJpYXQiOjE2MDIwNzc3MjMsImV4cCI6MTYwMjA4MTMyMywiaXNzIjoicHViLTM5MTAiLCJzdWIiOiJwb3N0LXJlYWN0aW9uIn0.k_ojYreKprb79X8EPS7zxvVxWcsoALuAARXWzIhzmmI From] [[EthHub]] #34 (5-10-2020):
''"Alpha Homora is a protocol for leveraging your position in [[yield farming]] pools, or "[[dYdX]] for yield farming on [[Uniswap]].""''
''"[[Alpha]] Homora is a protocol for leveraging your position in [[yield farming]] pools, or "[[dYdX]] for yield farming on [[Uniswap]].""''


== History ==
== History ==
Line 15: Line 15:
*Scored [https://docs.defisafety.com/master/alpha-homora-v2-process-quality-review 26%] on [[DeFi Safety]] (9-12-2021):
*Scored [https://docs.defisafety.com/master/alpha-homora-v2-process-quality-review 26%] on [[DeFi Safety]] (9-12-2021):


''"[[Smart Contract (SC)|Contracts]] could not be found in either the docs or the [[Github|GitHub]]. No audits specify the [[address]] of the contracts. Despite [https://alphafinancelab.gitbook.io/alpha-homora-v2/ibeth-alpha/audit-reports three audits] no listed contracts mean we cannot award points for them as per guidance.''
''"[[Smart Contract (SC)|Contracts]] could not be found in either the docs or the [[Github|GitHub]]. No audits specify the [[address]] of the [[contracts]]. Despite [https://alphafinancelab.gitbook.io/alpha-homora-v2/ibeth-alpha/audit-reports three audits] no listed contracts mean we cannot award points for them as per guidance.''


''There is software function documentation. No tests for code coverage were seen, but it's clear that this protocol has undergone testing. No formal verification has been undertaken. No [[testnet]] deployment was documented."''
''There is software function documentation. No tests for code coverage were seen, but it's clear that this protocol has undergone testing. No formal verification has been undertaken. No [[testnet]] deployment was documented."''
Line 23: Line 23:
*[https://www.blockthreat.io/p/blockthreat-week-42-2021?token=eyJ1c2VyX2lkIjoxMzk3OTAwLCJwb3N0X2lkIjo0MzQ2MTU5MywiXyI6IkZBQ3M5IiwiaWF0IjoxNjM2MDAyMjE1LCJleHAiOjE2MzYwMDU4MTUsImlzcyI6InB1Yi04MTA1Iiwic3ViIjoicG9zdC1yZWFjdGlvbiJ9.y6sFNNzKa43e3HHZQoxBV_L2BK9avA From] Blockthreat (4-11-2021):
*[https://www.blockthreat.io/p/blockthreat-week-42-2021?token=eyJ1c2VyX2lkIjoxMzk3OTAwLCJwb3N0X2lkIjo0MzQ2MTU5MywiXyI6IkZBQ3M5IiwiaWF0IjoxNjM2MDAyMjE1LCJleHAiOjE2MzYwMDU4MTUsImlzcyI6InB1Yi04MTA1Iiwic3ViIjoicG9zdC1yZWFjdGlvbiJ9.y6sFNNzKa43e3HHZQoxBV_L2BK9avA From] Blockthreat (4-11-2021):


''"Alpha Finance patched a [https://blog.alphafinance.io/mev-bots-uniswap-implicit-assumptions/ vulnerability] in its Alpha Homora V2 contract which allowed [[Miner Extractable Value (MEV)|MEV]] bots to arbitrage a significant slippage percentage."''
''"Alpha Finance patched a [https://blog.alphafinance.io/mev-bots-uniswap-implicit-assumptions/ vulnerability] in its [[Alpha Homora]] V2 [[contract]] which allowed [[Miner Extractable Value (MEV)|MEV]] bots to [[arbitrage]] a significant slippage percentage."''


*IronBank ($CREAM) was exploited for $37.5M (13-2-2021). [https://defiweekly.substack.com/p/so-what-actually-happened?token=eyJ1c2VyX2lkIjoxMzk3OTAwLCJwb3N0X2lkIjozMjUyMzAxMywiXyI6InFmb2Z2IiwiaWF0IjoxNjEzNjMwNDA2LCJleHAiOjE2MTM2MzQwMDYsImlzcyI6InB1Yi01NDAyIiwic3ViIjoicG9zdC1yZWFjdGlvbiJ9.DygNw2eeTw_IWw3GhdPeAEFf From] [[DeFi Weekly]]:
*IronBank ($[[CREAM]]) was exploited for $37.5M (13-2-2021). [https://defiweekly.substack.com/p/so-what-actually-happened?token=eyJ1c2VyX2lkIjoxMzk3OTAwLCJwb3N0X2lkIjozMjUyMzAxMywiXyI6InFmb2Z2IiwiaWF0IjoxNjEzNjMwNDA2LCJleHAiOjE2MTM2MzQwMDYsImlzcyI6InB1Yi01NDAyIiwic3ViIjoicG9zdC1yZWFjdGlvbiJ9.DygNw2eeTw_IWw3GhdPeAEFf From] [[DeFi Weekly]]:


#''"The attackers is the only user who is in the (announced) sUSD pool for Alpha Homora''
#''"The attackers is the only user who is in the (announced) [[sUSD]] pool for Alpha Homora''
#''The attacker borrows ETH from [[Cream Finance (CREAM)|Cream’s]] Ironbank by using the sUSD as collateral''
#''The attacker borrows ETH from [[Cream Finance (CREAM)|Cream’s]] Ironbank by using the sUSD as collateral''
#''The attacker then repay the debt accrued from borrowing the sUSD, however due to a very minor borrowing error he is able to profit a very tiny amount through this exploit''
#''The attacker then repay the debt accrued from borrowing the sUSD, however due to a very minor borrowing error he is able to profit a very tiny amount through this exploit''
#''The method to make this tiny profit is then re-executed multiple times in order to reach a size where the profit exceeds well into the 7 figure range''
#''The method to make this tiny profit is then re-executed multiple times in order to reach a size where the profit exceeds well into the 7 [[figure]] range''
#''The hacker has outstanding debt to the Ironbank via Alpha Homora but of course is never going to repay it''
#''The hacker has outstanding debt to the Ironbank via Alpha Homora but of course is never going to repay it''
#''Hacker starts washing funds through [[Tornado Cash (TORN)|Tornado]] and gives a friendly donation of 1,000 ETH to Alpha and Cream in the process''
#''Hacker starts washing funds through [[Tornado Cash (TORN)|Tornado]] and gives a friendly donation of 1,000 ETH to Alpha and Cream in the process''


''Important clarification: Cream lenders haven’t directly lost money but they have an outstanding loan from Alpha Homora that needs to be repaid. Alpha as a platform is a borrower on Cream similar to if the ALPHA token was used as collateral.''
''Important clarification: Cream lenders haven’t directly lost money but they have an outstanding loan from Alpha Homora that needs to be repaid. Alpha as a platform is a borrower on Cream similar to if the ALPHA [[token]] was used as collateral.''


''What’s interesting here is that Alpha received 2 audits and yet this exploit still happened. The exploit is so complex it took many researchers and developers hours to truly understand what really went down suggesting that even the existing audit capabilities we have don’t fully measure up."''
''What’s interesting here is that Alpha received 2 audits and yet this exploit still happened. The exploit is so complex it took many researchers and developers hours to truly understand what really went down suggesting that even the existing audit capabilities we have don’t fully measure up."''
Line 53: Line 53:
*[https://defiwatch.net/alpha-homora-v2-has-a-single-signer-admin-key/ From] [[DeFi Watch]] (31-5-2021):
*[https://defiwatch.net/alpha-homora-v2-has-a-single-signer-admin-key/ From] [[DeFi Watch]] (31-5-2021):


''"I recently [https://blog.openzeppelin.com/alpha-homora-v2/ discovered] that Alpha Homora v2 (currently around $700m [[Total Locked Value (TLV)|TVL]]) is fully upgradable by an EOA (externally owned account) admin key. An EOA is essentially a normal single-signer, non-[[Smart Contract (SC)|contract]] [[Ethereum (ETH)|Ethereum]] account with no ability to use [[Multi-Signature|multisig]] or [[timelock]] protections."''
''"I recently [https://blog.openzeppelin.com/alpha-homora-v2/ discovered] that Alpha Homora v2 (currently around $700m [[Total Locked Value (TLV)|TVL]]) is fully upgradable by an EOA (externally owned account) [[admin key]]. An EOA is essentially a normal single-signer, non-[[Smart Contract (SC)|contract]] [[Ethereum (ETH)|Ethereum]] account with no ability to use [[Multi-Signature|multisig]] or [[timelock]] protections."''


* The Alpha team [https://twitter.com/AlphaFinanceLab/status/1399378486087753728?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1399378486087753728%7Ctwgr%5E%7Ctwcon%5Es1_&ref_url=https%3A%2F%2Fdefiwatch.net%2Falpha-homora-v2-has-a-single-signer-admin-key%2F responded] with (31-5-2021):
* The Alpha team [https://twitter.com/AlphaFinanceLab/status/1399378486087753728?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1399378486087753728%7Ctwgr%5E%7Ctwcon%5Es1_&ref_url=https%3A%2F%2Fdefiwatch.net%2Falpha-homora-v2-has-a-single-signer-admin-key%2F responded] with (31-5-2021):


''"Hi @ChrisBlec, we're transitioning this to multisig and actually have been researching on a tool, which is developed by another great DeFi team, to achieve the best programmatic way to execute multisig transactions So definitely going to transition pretty soon once"''
''"Hi @ChrisBlec, we're transitioning this to [[multisig]] and actually have been researching on a tool, which is developed by another great [[Defi|DeFi]] team, to achieve the best programmatic way to execute multisig [[transactions]] So definitely going to transition pretty soon once"''


=== DAO ===
=== DAO ===
Line 63: Line 63:
* [https://yieldfarmer.substack.com/p/-farm-300-apr-on-usdc-with-bumper?token=eyJ1c2VyX2lkIjoxMzk3OTAwLCJwb3N0X2lkIjo0MDAxMzQ5NiwiXyI6IitrN3VtIiwiaWF0IjoxNjI5MDg1MDIzLCJleHAiOjE2MjkwODg2MjMsImlzcyI6InB1Yi0zODQ1MSIsInN1YiI6InBvc3QtcmVhY3Rpb24ifQ.woVT7qWz3SAcO From] [[DeFi Pulse|Yield Farmer]] (14-8-2021):
* [https://yieldfarmer.substack.com/p/-farm-300-apr-on-usdc-with-bumper?token=eyJ1c2VyX2lkIjoxMzk3OTAwLCJwb3N0X2lkIjo0MDAxMzQ5NiwiXyI6IitrN3VtIiwiaWF0IjoxNjI5MDg1MDIzLCJleHAiOjE2MjkwODg2MjMsImlzcyI6InB1Yi0zODQ1MSIsInN1YiI6InBvc3QtcmVhY3Rpb24ifQ.woVT7qWz3SAcO From] [[DeFi Pulse|Yield Farmer]] (14-8-2021):


''"Alpha Finance Labs announces plans to decentralize its ecosystem via the launch of Alpha [[Decentralised Autonomous Organisation (DAO)|DAO]]."''
''"Alpha Finance Labs announces plans to [[decentralize]] its ecosystem via the launch of Alpha [[Decentralised Autonomous Organisation (DAO)|DAO]]."''


=== Treasury ===
=== Treasury ===
Line 73: Line 73:
* From their [https://blog.alphafinance.io/announcing-the-alpha-tokenomics-staking-and-more/ blog] (23-3-2021):
* From their [https://blog.alphafinance.io/announcing-the-alpha-tokenomics-staking-and-more/ blog] (23-3-2021):


''"With the new ALPHA tokenomics, ALPHA token holders will be able to [[Proof-of-Stake (PoS)|stake]] ALPHA tokens to earn fees from the whole Alpha ecosystem regardless of which chains or [[Layer Two|layer-2]] solutions the Alpha products are built on. Once ALPHA tokens are staked, you will be able to ‘unlock’ unique features on the Alpha products when using those products as an ALPHA staker."''  
''"With the new ALPHA [[tokenomics]], ALPHA token holders will be able to [[Proof-of-Stake (PoS)|stake]] ALPHA [[tokens]] to [[earn]] [[fees]] from the whole Alpha ecosystem regardless of which chains or [[Layer Two|layer-2]] solutions the Alpha products are built on. Once ALPHA tokens are [[staked]], you will be able to ‘unlock’ unique features on the Alpha products when using those products as an ALPHA staker."''  


=== Token Details ===
=== Token Details ===
Line 90: Line 90:
=== Implementations ===
=== Implementations ===


* Built on: [[Ethereum]] and [[Binance Smart Chain]] ([https://cryptobriefing.com/alpha-finance-launching-on-binance-smart-chain/ 3-3-2021]).  [[Avalanche (AVAX)|Avalanche]] ([https://docs.defisafety.com/master/alpha-homora-v2-process-quality-review 12-2021])
* Built on: [[Ethereum]] and [[Binance Smart Chain]] ([https://cryptobriefing.com/alpha-finance-launching-on-binance-smart-chain/ 3-3-2021]).  [[Avalanche (AVAX)|Avalanche]] ([https://docs.defisafety.com/master/alpha-homora-v2-process-quality-review 12-2021]). [https://twitter.com/AlphaFinanceLab/status/1503712335424196610 Released] V2 on [[Fantom (FTM)|Fantom]] (15-3-2022).


=== How it works ===
=== How it works ===
Line 102: Line 102:
*[https://ethhub.substack.com/p/ethhub-weekly-166?token=eyJ1c2VyX2lkIjoxMzk3OTAwLCJwb3N0X2lkIjozNjQ5OTQ5OSwiXyI6ImlWNEhsIiwiaWF0IjoxNjIxNDkxNTkwLCJleHAiOjE2MjE0OTUxOTAsImlzcyI6InB1Yi0zOTEwIiwic3ViIjoicG9zdC1yZWFjdGlvbiJ9.h_Pld6HYik8wfyIT9yMhWdINavfm0TVfNrbRql4gBOM From] EthHub (18-5-2021):
*[https://ethhub.substack.com/p/ethhub-weekly-166?token=eyJ1c2VyX2lkIjoxMzk3OTAwLCJwb3N0X2lkIjozNjQ5OTQ5OSwiXyI6ImlWNEhsIiwiaWF0IjoxNjIxNDkxNTkwLCJleHAiOjE2MjE0OTUxOTAsImlzcyI6InB1Yi0zOTEwIiwic3ViIjoicG9zdC1yZWFjdGlvbiJ9.h_Pld6HYik8wfyIT9yMhWdINavfm0TVfNrbRql4gBOM From] EthHub (18-5-2021):


''"Alpha Homora V2 [https://twitter.com/AlphaFinanceLab/status/1392837155827843079 Live] on Ethereum. Get access to leveraged yield farming with Alpha Homora and partners including Cream Finance, Uniswap, SushiSwap, Curve and Balancer."''
''"Alpha Homora V2 [https://twitter.com/AlphaFinanceLab/status/1392837155827843079 Live] on Ethereum. Get access to leveraged yield farming with Alpha Homora and partners including [[Cream Finance]], Uniswap, SushiSwap, [[Curve]] and Balancer."''


* Alpha Homora V2 integration with [[Ethereum Push Notification Service (PUSH)|Ethereum Push Notifications Service (EPNS)]] is now [https://blog.alphafinance.io/announcing-liquidation-notifications-by-epns-for-alpha-homora-users/ live] (16-7-2021).
* Alpha Homora V2 integration with [[Ethereum Push Notification Service (PUSH)|Ethereum Push Notifications Service (EPNS)]] is now [https://blog.alphafinance.io/announcing-liquidation-notifications-by-epns-for-alpha-homora-users/ live] (16-7-2021).
Line 109: Line 109:
* [https://twitter.com/tansawit/status/1386989320133771271 From] their [[twitter]] (27-4-2021):
* [https://twitter.com/tansawit/status/1386989320133771271 From] their [[twitter]] (27-4-2021):


''"54,754,914.33 $ALPHA [[Proof-of-Stake (PoS)|staked]] - 879 [[Address|addresses]] currently staking - Stakers on average are staking over 98% of the $ALPHA in their [[wallet]].''
''"54,754,914.33 $ALPHA [[Proof-of-Stake (PoS)|staked]] - 879 [[Address|addresses]] currently [[staking]] - [[Stakers]] on average are staking over 98% of the $ALPHA in their [[wallet]].''


''Largest wallet staking over 9.5 million ALPHA - accounts for >75% of the wallet's $18M worth of assets based on what's trackable by @[[ZapperFi|zapper_fi]]"''
''Largest wallet staking over 9.5 million ALPHA - accounts for >75% of the wallet's $18M worth of assets based on what's trackable by @[[ZapperFi|zapper_fi]]"''
Line 119: Line 119:


* [https://medium.com/bandprotocol/alpha-finance-integrates-decentralized-price-oracles-from-band-protocol-through-alpha-oracle-5ac7ccad8a71 Integrated] with [[Band Protocol (BAND)|Band Protocol]] (10-5-2021).
* [https://medium.com/bandprotocol/alpha-finance-integrates-decentralized-price-oracles-from-band-protocol-through-alpha-oracle-5ac7ccad8a71 Integrated] with [[Band Protocol (BAND)|Band Protocol]] (10-5-2021).
*From the [https://blog.alphafinance.io/alpha-finance-launches-alpha-oracle-aggregator-with-data-from-band-protocol-and-chainlink/ announcement] of Alpha Oracle Aggregator (10-5-2021):
*From the [https://blog.alphafinance.io/alpha-finance-launches-alpha-oracle-aggregator-with-data-from-band-protocol-and-chainlink/ announcement] of Alpha [[Oracle]] Aggregator (10-5-2021):


''"Alpha Finance Lab is excited to announce the launch of Alpha Oracle Aggregator, with data from two of the largest data oracles providers, Band Protocol and [[Chainlink (LINK)|Chainlink]], to ensure scalability, flexibility, and security."''
''"Alpha Finance Lab is excited to announce the launch of Alpha Oracle Aggregator, with data from two of the largest data [[oracles]] providers, [[Band Protocol]] and [[Chainlink (LINK)|Chainlink]], to ensure scalability, flexibility, and security."''


== Privacy Method ==
== Privacy Method ==
Line 148: Line 148:
=== Projects that use or built on it ===
=== Projects that use or built on it ===


*From the yEarn [https://yearn.substack.com/p/yearn-finance-newsletter-17?token=eyJ1c2VyX2lkIjoxMzk3OTAwLCJwb3N0X2lkIjozMTIwOTAyOSwiXyI6ImM5eFJuIiwiaWF0IjoxNjEwMzU2MTE2LCJleHAiOjE2MTAzNTk3MTYsImlzcyI6InB1Yi05MjA2MSIsInN1YiI6InBvc3QtcmVhY3Rpb24ifQ.f_I44ceOGjllpttEEGvRRCjeS blog] (11-1-2021):
*From the [[yEarn]] [https://yearn.substack.com/p/yearn-finance-newsletter-17?token=eyJ1c2VyX2lkIjoxMzk3OTAwLCJwb3N0X2lkIjozMTIwOTAyOSwiXyI6ImM5eFJuIiwiaWF0IjoxNjEwMzU2MTE2LCJleHAiOjE2MTAzNTk3MTYsImlzcyI6InB1Yi05MjA2MSIsInN1YiI6InBvc3QtcmVhY3Rpb24ifQ.f_I44ceOGjllpttEEGvRRCjeS blog] (11-1-2021):


''"[[Yearn]] v2 will coincide with an update of C.R.E.A.M v2 (Iron Bank) and will enable Yearn yVaults to develop leveraged yield-farming strategies and cross-asset strategies utilizing Alpha Homora. Users will be able to deposit [[DAI]] and borrow an equivalent dollar amount of [[ETH]] via [[Cream Finance (CREAM)|C.R.E.A.M]] and enter [[SushiSwap]] liquidity pools utilizing Alpha Homora’s leveraged yield-farming product. Users will ultimately be able to obtain 90x leverage on stablecoins or 80x leverage on ETH to farm SUSHI, [[CRV]], ALPHA. If the user uses Yearn yVaults they will also potentially be eligible to earn [[Pickle Finance (PICKLE)|PICKLE]]."''
''"[[Yearn]] v2 will coincide with an update of C.R.E.A.M v2 (Iron Bank) and will enable Yearn yVaults to develop leveraged yield-farming strategies and cross-asset strategies utilizing Alpha Homora. Users will be able to deposit [[DAI]] and borrow an equivalent dollar amount of [[ETH]] via [[Cream Finance (CREAM)|C.R.E.A.M]] and enter [[SushiSwap]] [[liquidity pools]] utilizing Alpha Homora’s leveraged yield-farming product. Users will ultimately be able to obtain 90x leverage on [[stablecoins]] or 80x leverage on ETH to [[farm]] [[SUSHI]], [[CRV]], ALPHA. If the user uses Yearn yVaults they will also potentially be eligible to earn [[Pickle Finance (PICKLE)|PICKLE]]."''


== Competition ==
== Competition ==
Line 174: Line 174:
Making these free wiki pages is fun but takes a lot of effort and time.
Making these free wiki pages is fun but takes a lot of effort and time.


If you have enjoyed reading, tips are appreciated :) This will help us to keep expanding this archive of information.
If you have enjoyed reading, tips are appreciated :) This will help us to [[keep]] expanding this archive of information.


[[ETH]] tip [[address]]: 0x83460bE5F218b1520B69D702cE60A1DE37dD8E31
[[ETH]] tip [[address]]: 0x83460bE5F218b1520B69D702cE60A1DE37dD8E31


Also check out [https://cointr.ee/zeb CoinTr.ee] for more content.
Also check out [https://cointr.ee/zeb CoinTr.ee] for more content.

Revision as of 03:59, 21 March 2022

Basics

"Alpha Homora is a protocol for leveraging your position in yield farming pools, or "dYdX for yield farming on Uniswap.""

History

Audits & Exploits

"Contracts could not be found in either the docs or the GitHub. No audits specify the address of the contracts. Despite three audits no listed contracts mean we cannot award points for them as per guidance.

There is software function documentation. No tests for code coverage were seen, but it's clear that this protocol has undergone testing. No formal verification has been undertaken. No testnet deployment was documented."

Bugs/Exploits

  • From Blockthreat (4-11-2021):

"Alpha Finance patched a vulnerability in its Alpha Homora V2 contract which allowed MEV bots to arbitrage a significant slippage percentage."

  1. "The attackers is the only user who is in the (announced) sUSD pool for Alpha Homora
  2. The attacker borrows ETH from Cream’s Ironbank by using the sUSD as collateral
  3. The attacker then repay the debt accrued from borrowing the sUSD, however due to a very minor borrowing error he is able to profit a very tiny amount through this exploit
  4. The method to make this tiny profit is then re-executed multiple times in order to reach a size where the profit exceeds well into the 7 figure range
  5. The hacker has outstanding debt to the Ironbank via Alpha Homora but of course is never going to repay it
  6. Hacker starts washing funds through Tornado and gives a friendly donation of 1,000 ETH to Alpha and Cream in the process

Important clarification: Cream lenders haven’t directly lost money but they have an outstanding loan from Alpha Homora that needs to be repaid. Alpha as a platform is a borrower on Cream similar to if the ALPHA token was used as collateral.

What’s interesting here is that Alpha received 2 audits and yet this exploit still happened. The exploit is so complex it took many researchers and developers hours to truly understand what really went down suggesting that even the existing audit capabilities we have don’t fully measure up."

"Overall, there were some red flags raised by the two audits, less than a month before the exploit, which were all fixed. But the exploited vulnerable scenario was present in the audited contract and remained undiscovered because of the complex constraints under which it could be triggered.

The exploited scenario was not a common Solidity coding pitfall that could have been detected by automated tools checking for security best practices. It was a complex set of constraints particular to the exploited contract’s logic and its interaction with other protocols. It is hard to say if more/better design/code/security reviews could have caught this earlier. Although Quantstamp’s audit did call out the need for better specification and more testing given the complexity of features and interactions, that’s often true for most projects."

Governance

Admin Keys

"Admin Control information could not be found. Pause Control information could not be found."

"I recently discovered that Alpha Homora v2 (currently around $700m TVL) is fully upgradable by an EOA (externally owned account) admin key. An EOA is essentially a normal single-signer, non-contract Ethereum account with no ability to use multisig or timelock protections."

"Hi @ChrisBlec, we're transitioning this to multisig and actually have been researching on a tool, which is developed by another great DeFi team, to achieve the best programmatic way to execute multisig transactions So definitely going to transition pretty soon once"

DAO

"Alpha Finance Labs announces plans to decentralize its ecosystem via the launch of Alpha DAO."

Treasury

Token

Launch

Token allocation

Utility

  • From their blog (23-3-2021):

"With the new ALPHA tokenomics, ALPHA token holders will be able to stake ALPHA tokens to earn fees from the whole Alpha ecosystem regardless of which chains or layer-2 solutions the Alpha products are built on. Once ALPHA tokens are staked, you will be able to ‘unlock’ unique features on the Alpha products when using those products as an ALPHA staker."

Token Details

Stablecoin

Coin Distribution

Technology

Which is an interesting combination with the following:

"At 400 commits, Alpha Homora demonstrates a good commitment to strong documentation practises."

Implementations

How it works

Fee Mechanism

Upgrades

"New leverage yield farming pool includes WETH/YFI pool. New feature includes Bring-Your-Own-Token (BYOT) feature, a feature that allows yield farmers to supply another token that’s not ETH and can reduce slippage to 0% when opening a position."

  • From EthHub (18-5-2021):

"Alpha Homora V2 Live on Ethereum. Get access to leveraged yield farming with Alpha Homora and partners including Cream Finance, Uniswap, SushiSwap, Curve and Balancer."

Staking

"54,754,914.33 $ALPHA staked - 879 addresses currently staking - Stakers on average are staking over 98% of the $ALPHA in their wallet.

Largest wallet staking over 9.5 million ALPHA - accounts for >75% of the wallet's $18M worth of assets based on what's trackable by @zapper_fi"

Liquidity Mining

Scaling

Other Details

Oracle Method

"Alpha Finance Lab is excited to announce the launch of Alpha Oracle Aggregator, with data from two of the largest data oracles providers, Band Protocol and Chainlink, to ensure scalability, flexibility, and security."

Privacy Method

Their Projects

Alpha Homora

  • Leveraged yield farming product that captures the market gap in lending.

Alpha Oracle Aggregator

AlphaX

"AlphaX detailed, a decentralized, non-orderbook perpetual swap trading market. AlphaX will not only allow Alpha Homora users to hedge their leveraged yield farming/liquidity providing positions, but will also bring the DeFi space a new class of trading products previously unavailable on-chain."

Roadmap

  • Can be found here (7-7-2021).
  • Announced its V2 upgrade will be rolled out in Jan. 2021. Happened in May.

Usage

"Its token and TVL are soaring, with ALPHA climbing to join the top 100 coins by market cap, while it has attracted $600M of assets in just four months."

Projects that use or built on it

"Yearn v2 will coincide with an update of C.R.E.A.M v2 (Iron Bank) and will enable Yearn yVaults to develop leveraged yield-farming strategies and cross-asset strategies utilizing Alpha Homora. Users will be able to deposit DAI and borrow an equivalent dollar amount of ETH via C.R.E.A.M and enter SushiSwap liquidity pools utilizing Alpha Homora’s leveraged yield-farming product. Users will ultimately be able to obtain 90x leverage on stablecoins or 80x leverage on ETH to farm SUSHI, CRV, ALPHA. If the user uses Yearn yVaults they will also potentially be eligible to earn PICKLE."

Competition

Pros and Cons

Pros

Cons

Team, Funding, Partners

Team

  • Full team can be found here (9-12-2021).
  • Alpha Finance Lab

Funding

Partners 

"Alpha Finance Labs announced a partnership with Siam Commercial Bank, one of the largest commercial banks in Thailand to work towards bridging traditional banking and DeFi."

(:

Knowledge empowers all and will help us get closer to the decentralized world we all want to live in!

Making these free wiki pages is fun but takes a lot of effort and time.

If you have enjoyed reading, tips are appreciated :) This will help us to keep expanding this archive of information.

ETH tip address: 0x83460bE5F218b1520B69D702cE60A1DE37dD8E31

Also check out CoinTr.ee for more content.