# Risks Dashboard [TOC] ## Chains Onboard ### Criterions * Chains Review * Testnet Before Launch * Open Source After Launch * Bug Bounty ### Lists | Date | Name | TVL(Governance Token Excluded) | Top Dexes Liquidity | EVM Compatibility | Price Feed | Bridge(official) | Reporter | Reviewer | | ---------- | ------- | ------------------------------ | ------------------- | ----------------- | ---------- | ---------------- | --- | --- | | 2023-03-27 | Conflux | Text | | Text | | | | | ### Notes * Conflux * Moonbeam * zkSync Era * Base --- --- ## Assets Onboard ### Key Indicators * Token standard * Dex liquidity * Price feed * Audit report * Security Issues ### Assets List | Date | Assets | Chain | Address | Token Standard | Admin Right | Circulating Supply | Holders | Market Cap | Volumes | Dex Liquidity | Chainlink Feed | Audited | Security Issues | Accept or not | Reporter(P/D) | Reviewer | | ---------- | ------ | -------- | --------------------------------------------------------------------------------------- | ---------------------------------------------------------------------- | ---------------------------------------------- | ------------------ | ------- | -------------- | ------------ | ---------------------------- | ---------------------------------------------------------------------- | ------- | ------------------- | ------------- | ------------- | -------- | | 2023-03-29 | ARB | Arbitrum | [0x912c...6548](https://arbiscan.io/address/0x912ce59144191c1204e64559fe8253a0e49e6548) | Mint/Burn, Governor style, Upgradeable, Standard Arbitrum Bridge ERC20 | Arbitrum Foundation Multi-sig, threshold: 7/12 | 1,275,000,000 | 266,551 | $1,567,557,823 | $682,270,457 | traderjoe: $18m, uniV3: $55m | [ARB/USD](https://data.chain.link/arbitrum/mainnet/crypto-usd/arb-usd) | No | Not yet disclosured | Yes | Snow/Huimin | Liujun | ### Notes * Accept Type * Yes * ARB Token— * Parameters * LTV: 0.8 * Supply/Borrow Cap: 10,000,000/10,000,000 * Reserve Ratio: 0.15 * Comments * Critical: contract upgradeable, mintable controlled by Arbitrum Foundation, risk to infinite token minting. * Medium: the price feed of chainlink lives in a very short period. * Risk Parameters: suggest LTV is 0.7 to cover the total debt against total deposit. * (Skyge)Risk Parameters: suggest LTV is 0.6, maybe the LTV of the new asset can not exceed the lowest value in the protocol. --- --- ## Security Issues Review ### Check Lists | Date | Name | Content | Cause | Review Results | Reporter | Reviewer | | ---- | ---- | ------- | ----- | -------------- | -------- | -------- | | 09/04/2023 | Sushiswap RouteProcessor2 Exploit | [twitter](https://twitter.com/SlowMist_Team/status/1644936375924584449) [Ethereum address](https://etherscan.io/address/0x044b75f554b886A065b9567891e45c79542d7357)| 1.Unvalidated input parameters 2.The parameter "from" in transferFrom is passed from an external source. | ERC20 amm: There is no similar question trade aggregator: Input parameters are not checked; The "from" parameter of transferFrom cannot be customized, There is no similar question | LiuJun/ZhongMin| Snow/Huimin/Skyge | ### Notes 1. Sushiswap RouteProcessor2 Exploit ![](https://hackmd.io/_uploads/H1qj6UWMn.png) ![](https://hackmd.io/_uploads/HyjapUWG3.png) 2. --- --- ## Risk Parameters Adjustment