Solidly Upgrade After careful consideration and a thorough investigation of all known bugs and issues with Solidly, we have come to the conclusion that it’s in the best interest of the community and the ecosystem as a whole to fix all existing issues -- culminating in a fork of the original Solidly code. Our goal is to maximize the value to all stakeholders of the current Solidly ecosystem and to transform Solidly into the #1 exchange in crypto. Additionally, Solidly will serve as a deep liquidity pool and as a secondary market for upcoming Deus Finance products, including forex pairs, derivatives, synthetics, futures, options and stocks. We have garnered support of both Solidex and 0xDAO, who support this upgrade in the strongest terms possible. The key issues with the current Solidly implementation that we are addressing are: - Claimable bribes and fees do not correspond to snapshot votes (they can be gamed) - In some cases the ability to claim SOLID, fees or bribes can stop working - It's possible to DoS Solidly to make claiming SOLID more expensive (and in some cases temporarily breaking integrating protocols) - There is an additional mechanism present that allows users to game fee earning There are a number of other fixes we are working on which we will disclose once our implementation is complete.
Last changed by  
 
c30
180

Read more

Solidly Test Cases

Liquidity [ ] Create new pair [ ] Add liquidity using two ERC20 tokens [ ] Add liquidity using FTM and ERC20 [ ] Withdraw liquidity using two ERC20 tokens [ ] Withdraw liquidity using FTM and ERC20 [x] Stake LP [x] Staked amount updates

11/22/2022
Remaining UI Work

[ ] Update all inputs to not be pitch black Not this Instead [ ]

11/10/2022
Update on Solidly v1 and Recent Attacks

What happened Over the past few days the Solidly v2 team has performed a series of attacks on Solidly v1 rendering various aspects of Solidly v1 and Solidex inoperable. That said Your funds are safe. The reason we've done this is to bring awareness to the fact that Solidly v1 and Solidex are susceptible to numererous attacks which anyone can perform. Developers of Soldily v2 have tried in the past discussing various attack vectors with both the Solidly v1 team and Solidex and have been met mostly with silence or denial. As such, we believe the most responsible course of action is to demonstrate the attacks ourselves, such that the issues with Solidly v1 and Solidex can no longer be ignored. We believe users of Soldily and Solidex deserve the straightforward truth: that many aspects of Solidly v1 and Solidex are broken beyond repair. The following attacks were performed

9/8/2022
Protocol classes (with forks)

Lending & Borrowing Compound (Cream, Scream, DOLA) Fixed forex Aave (Geist) Maker (Abra, Unit, Liquity) Not true 1:1 forks, but similar in spirit

6/4/2022
Read more from c30
Published on HackMD