Difference between revisions of "Ribbon Finance (RBN)"

From CryptoWiki

Line 1: Line 1:
==Basics==
== Basics ==
 
*Based in:
*Based in:
*Started in / Announced on:
*Started in / Announced on:
Line 12: Line 11:
==Audits & Exploits==
==Audits & Exploits==


*[[Bug bounty]] program can be found [insert here].
*[[Bug bounty]] program can be found [insert here]. Ribbon [https://www.defisafety.com/pqrs/175 offers] $50K with [[Immunefi]] (28-1-2022).
*Scored [https://www.defisafety.com/pqrs/175 63%] on [[DeFi Safety]] (28-1-2022):
"At over 10 [[transactions]] a week, this contract is relatively active. Major contract functions are covered. With a TtC of 777%, this protocol has clearly tested its code. No test report was found. Ribbon has not undergone formal verification. Ribbon V2 was [https://docs.ribbon.finance/developers/security audited] before and after launch by [[OpenZeppelin]] and [[ChainSafe Systems|ChainSafe]].
 
With the comment: ''"Although they scored highly in Code and Team as well as Documentation, the protocol had zilch documents provided on [[Oracles]], and almost nothing for [[Access Controls]]."''


===Bugs/Exploits===
===Bugs/Exploits===
* [https://www.defisafety.com/pqrs/175 From] [[DeFi Safety]] (28-1-2022):
''"$2.5m in Ribbon [[tokens]] were [https://www.coindesk.com/tech/2021/10/08/airdrop-ethics-vc-firm-draws-ire-following-25m-ribbon-finance-exploit/ taken] then returned in a [[Sybil Attack|Sybil attack]]."''
==Governance==
==Governance==


* From their blog (12-3-2021):
=== Admin Keys ===
 
* [https://www.defisafety.com/pqrs/175 From] [[DeFi Safety]] (28-1-2022):
 
''"Information is easily [https://docs.ribbon.finance/developers/security located]. No [[contracts]] are labelled as upgradeable/ [[immutable]]. No pause control was found. There was no [[timelock]] documentation found."''
*From their blog (12-3-2021):


''"As you can probably tell, there are a few pieces of this process that are more [[centralized]]:''
''"As you can probably tell, there are a few pieces of this process that are more [[centralized]]:''
Line 51: Line 64:
==Technology==
==Technology==


*[[Whitepaper]] can be found [insert here].
*[[Whitepaper]] can be found [https://docs.ribbon.finance/ here].
*Code can be viewed [insert here].
*Code can be viewed [https://github.com/ribbon-finance/ribbon-v1 here]. [https://www.defisafety.com/pqrs/175 From] [[DeFi Safety]] (28-1-2022):
''"At an astonishing 165 branches with 143 commits, Ribbon's development is clearly well [[wrapped]] and won't be getting cut short any time."''


===Implementations===
===Implementations===


*Built on: [[Ethereum (ETH)|Ethereum]], [[Solana (SOL)|Solana]] ([https://twitter.com/zetamarkets/status/1486370670259089408?s=21 26-1-2022])
*Built on: [[Ethereum (ETH)|Ethereum]], [[Solana (SOL)|Solana]] ([https://twitter.com/zetamarkets/status/1486370670259089408?s=21 26-1-2022]) and [[Avalanche (AVAX)|Avalanche]] ([https://www.defisafety.com/pqrs/175 28-1-2022])


===How it works===
===How it works===
Line 73: Line 87:
===Other Details===
===Other Details===
==Oracle Method==
==Oracle Method==
* [https://www.defisafety.com/pqrs/175 From] [[DeFi Safety]] (28-1-2022):
''"No [[oracle]] information was found. No mention of countermeasures [against front running and [[flash loan]] attacks] are documented."''
==Privacy Method==
==Privacy Method==
==Compliance==
==Compliance==
Line 98: Line 117:
* Contrary to the announcement, which already spoke about their 'first product', Ribbon Finance now says Theta Vaults are their first product (12-3-2021):
* Contrary to the announcement, which already spoke about their 'first product', Ribbon Finance now says Theta Vaults are their first product (12-3-2021):


''"The first product that Ribbon is creating is called a Theta Vault, which is a yield-focused strategy on ETH and [[WBTC]]. The first Theta Vault will run a [https://www.investopedia.com/terms/c/coveredcall.asp covered call] strategy, which earns yield on a weekly basis through writing out of the money covered calls and collecting the premiums. Theta Vaults in its present design relies on Opyn [[oTokens]]. oTokens are [[ERC20]] token representations of an options [[contract]], where each of them have a strike price and expiry. Owning oTokens is functionally equivalent to owning an options contract. This gives the oToken holder the right to redeem some amount of the underlying asset if the strike price is hit."''
''"The first product that Ribbon is creating is called a Theta Vault, which is a yield-focused strategy on ETH and [[WBTC]]. The first Theta Vault will run a [https://www.investopedia.com/terms/c/coveredcall.asp covered call] strategy, which earns yield on a weekly basis through writing out of the money covered calls and collecting the premiums. Theta Vaults in its present design relies on [[OPYN|Opyn]] [[oTokens]]. oTokens are [[ERC20]] token representations of an options [[contract]], where each of them have a strike price and expiry. Owning oTokens is functionally equivalent to owning an options contract. This gives the oToken holder the right to redeem some amount of the underlying asset if the strike price is hit."''


=== Ribbon Treasury ===
=== Ribbon Treasury ===
Line 105: Line 124:
==Roadmap==
==Roadmap==


*Can be found [Insert link here].
*Can be found [Insert [[LINK|link]] here].


==Usage==
==Usage==
Line 116: Line 135:
*Got into [[Twitter|CT]] news due to [[airdrop]] farming on a huge scale (9-10-2021). It first [https://twitter.com/gabagooldoteth/status/1446500164991082497?t=UXotvUDvobB_jrLWjZ6Abw&s=19 came to light] due to [[Ribbon Finance (RBN)|Ribbon Finance]]:
*Got into [[Twitter|CT]] news due to [[airdrop]] farming on a huge scale (9-10-2021). It first [https://twitter.com/gabagooldoteth/status/1446500164991082497?t=UXotvUDvobB_jrLWjZ6Abw&s=19 came to light] due to [[Ribbon Finance (RBN)|Ribbon Finance]]:


''"This @divdotvc analyst  @_bridgeharris has made 652 $[[Ethereum (ETH)|ETH]] and counting from @ribbonfinance [[airdrops]], quite impressive. finding [[wallets]] like their's and copytrading them is probably the best way to make it tbh. the strat was just deposit .1 eth in ribbon theta vault 140 days ago but across many many wallets"''
''"This @divdotvc analyst  @_bridgeharris has made 652 $[[Ethereum (ETH)|ETH]] and counting from @ribbonfinance [[airdrops]], quite impressive. finding [[wallets]] like their's and copytrading them is probably the best way to make it tbh. the strat was just deposit .1 eth in ribbon theta vault 140 days ago but across [[MANY|many]] many wallets"''


*Divergence quickly [https://twitter.com/hellzbellza/status/1446525661913440256?s=20 released] [[tweets]] saying they were in crypto for more than money, realized they went to far ([https://twitter.com/0xsisyphus/status/1446579768237887489?s=21 dumping] the farmed token directly into ETH) and that they would send the ETH to the Ribbon DAO.
*Divergence quickly [https://twitter.com/hellzbellza/status/1446525661913440256?s=20 released] [[tweets]] saying they were in crypto for more than money, realized they went to far ([https://twitter.com/0xsisyphus/status/1446579768237887489?s=21 dumping] the farmed token directly into ETH) and that they would send the ETH to the Ribbon DAO.
Line 125: Line 144:
*Full team can be found [here].
*Full team can be found [here].
*[[Julian Koh]]; co-founder & CEO
*[[Julian Koh]]; co-founder & CEO
*Two team members publicly identify [https://juliankoh.medium.com/ themselves], but this information is not listed anywhere and required additional research ([https://www.defisafety.com/pqrs/175 28-1-2022]).


===Funding===
===Funding===

Revision as of 08:14, 21 March 2022

Basics

"Ribbon finance is on mainnet with a strangle option strategy - an aggregator of Hegic and Opyn"

History

Audits & Exploits

"At over 10 transactions a week, this contract is relatively active. Major contract functions are covered. With a TtC of 777%, this protocol has clearly tested its code. No test report was found. Ribbon has not undergone formal verification. Ribbon V2 was audited before and after launch by OpenZeppelin and ChainSafe.

With the comment: "Although they scored highly in Code and Team as well as Documentation, the protocol had zilch documents provided on Oracles, and almost nothing for Access Controls."

Bugs/Exploits

"$2.5m in Ribbon tokens were taken then returned in a Sybil attack."

Governance

Admin Keys

"Information is easily located. No contracts are labelled as upgradeable/ immutable. No pause control was found. There was no timelock documentation found."

  • From their blog (12-3-2021):

"As you can probably tell, there are a few pieces of this process that are more centralized:

  1. Managers have sole discretion over strike selection
  2. Managers and selected market makers decide on option prices off-chain (OTC).
  3. We have whitelisted specific market makers who we are partnering with

Although we are starting with this, we plan to decentralize these functions over time once the vaults are more battle tested on mainnet. For example:

  1. We plan to decentralize the function of the manager to a group of strategists that are voted on by the community, including better incentive mechanisms for encouraging good management of the vault
  2. We plan to open up the option buying function to anyone in the community through an auction-like mechanism, and remove whitelists."

DAO

Treasury

Token

Launch

Token Allocation

Utility

"The RBN token aims to achieve the following goals: stewarding the development of the protocol, align incentives between Ribbon stakeholders, and unite all current and future Ribbon products under a single umbrella."

Other Details

Stablecoin

Coin Distribution

Technology

"At an astonishing 165 branches with 143 commits, Ribbon's development is clearly well wrapped and won't be getting cut short any time."

Implementations

How it works

Fees

Upgrades

"Ribbon Finance announces the details of its V2 protocol, which offers an optimized vault system and improved decentralization guarantees."

Staking

Liquidity Mining

Scaling

Interoperability

Other Details

Oracle Method

"No oracle information was found. No mention of countermeasures [against front running and flash loan attacks] are documented."

Privacy Method

Compliance

Their Projects

"We are focused on products to tackle four broad categories of opportunities:

  1. Volatility. Products that let users long or short volatility of various cryptoassets for speculation or hedging purposes
  2. Yield Enhancement. Active and passive products that let users earn high yields (3-digit APY) by stacking yield-bearing instruments with writing options
  3. Principal Protection. Investment products that guarantee the user will get their money back, plus potential upside. These can be constructed through a combination of fixed-income products and options
  4. Accumulation. Products that let users accumulate their favourite assets over time, through strategies such as automated put option selling & reinvesting the yield into accumulating more assets"

Strangle

"Today, we are launching Ribbon on mainnet, with the first product being a Strangle option, that lets users long ETH volatility. This product combines a put option and a call option at different strike prices, allowing investors to profit when the price of ETH goes above or beyond some thresholds.

To construct this Strangle, we source liquidity from the two foremost options protocols on EthereumHegic and Opyn. Ribbon finds the cheapest prices on both venues for the put and call option, then purchases the options on the users’ behalf and packages them within a smart contract. This is the first multi-protocol option construction on Ethereum."

Theta Vaults

  • Contrary to the announcement, which already spoke about their 'first product', Ribbon Finance now says Theta Vaults are their first product (12-3-2021):

"The first product that Ribbon is creating is called a Theta Vault, which is a yield-focused strategy on ETH and WBTC. The first Theta Vault will run a covered call strategy, which earns yield on a weekly basis through writing out of the money covered calls and collecting the premiums. Theta Vaults in its present design relies on Opyn oTokens. oTokens are ERC20 token representations of an options contract, where each of them have a strike price and expiry. Owning oTokens is functionally equivalent to owning an options contract. This gives the oToken holder the right to redeem some amount of the underlying asset if the strike price is hit."

Ribbon Treasury

  • Basically the same as the Theta Vaults, but then catered towards DAO treasuries (2-11-2021).

Roadmap

  • Can be found [Insert link here].

Usage

Projects that use or built on it

Competition

Pros and Cons

Pros

Cons

"This @divdotvc analyst @_bridgeharris has made 652 $ETH and counting from @ribbonfinance airdrops, quite impressive. finding wallets like their's and copytrading them is probably the best way to make it tbh. the strat was just deposit .1 eth in ribbon theta vault 140 days ago but across many many wallets"

  • Divergence quickly released tweets saying they were in crypto for more than money, realized they went to far (dumping the farmed token directly into ETH) and that they would send the ETH to the Ribbon DAO.

Team, Funding, Partners

Team

  • Full team can be found [here].
  • Julian Koh; co-founder & CEO
  • Two team members publicly identify themselves, but this information is not listed anywhere and required additional research (28-1-2022).

Funding

Partners

(:

Knowledge empowers all and will help us get closer to the decentralised world we all want to live in!

Making these free wiki pages is fun but takes a lot of effort and time.

If you have enjoyed reading, tips are appreciated :) This will help us to keep expanding this archive of information.

ETH tip address: 0x83460bE5F218b1520B69D702cE60A1DE37dD8E31

Also check out CoinTr.ee for more content.