Try   HackMD

Automatic refilling of my Gnosis Pay account

I use a smart contract to claim, swap and forward my Gnosis chain validator rewards directly onto my Gnosis Pay account. With this I get a weekly top up into my account in EURe. As soon as I receive the card I will be able to directly spend these funds.

Basic Functionality

At the core of the setup sits a smart contract, which claims the Gnosis chain validator rewards. It then transfers these rewards to its own address and swaps it to EURe using a combination of Balancer and curve. And as a last step it transfers the EURe to the address stored for the given claim address.

This smart contract is then automatically executed in regular intervals using PowerPools infrastructure. Powerpool allows anyone to create jobs and let them execute them under specific conditions. I run the job once a week.

The source code of the contract can be found on github.

Details for Each Step

The contract has several distinct steps. Here I explain each step and the approach I have taken. If any of the steps below fail, the transaction is reverted and it is as if nothing happened.

  1. Claim: Anyone can call the 'claimWithdrawal' function from the official GBC Deposit contract for any of the Gnosis chain validators. This function then withdraws the rewards to the withdrawal address for the specific validator. My smart contract executes this function from the GBC Deposit Contract.
  2. Transfer GNO. The rewards from step 1. are then forwarded to the address of the smart contract. For this step the smart contract needs GNO token allowance from the withdrawal address to move the tokens
  3. Swap GNO to wxDAI: Use Balancer to swap the GNO tokens to wrapped xDAI using a GNO-wxDAI balancer pool.
  4. Swap wxDAI to EURe: Use curve to swap wxDAI to EURe using the eureusd pool.
  5. Forward: Transfer the received EURe to the destination address stored in the smart contract.

The choice of these two pools to swap the tokens is that the balancer one is not incentivized and still pretty large giving a good liquidity and probably better long term stability than highly incentivized pools. The curve pool gives extremely good liquidity and low fee. Overall a pure balancer path would have been more expensive than this mixed swap path. Manual tests over several weeks have shown that the chosen path beats a pure Balancer swap most of the time and is generally close to cowswaps swaps, but obviously never beating cowswap.

For my own claims, I chose to execute the transaction automatically at a regular interval (7 days) using PowerPools decentralized network of keepers.

Possible Attack Vectors and Mitigations

Sandwiching swaps

Doing swaps in a smart contract opens one up to sandwich attacks as there is not a simple way to define slippage in such a swap. Two different approaches are used here. For the balancer pool, the smart contract checks if the balancer pool balance has been changed in the same block as the one the smart contract wants to swap in. If the balancer pool has been changed this could be an indication of a sandwich attack and therefore the transaction fails. The trade-off is obviously that a normal transaction which did a small swap in the same block will prevent the smart contract to execute the swap. Manual test while writing the contract showed that there was a much smaller than a 1% chance of having another balancer swap in the same block. This is an acceptable trade-off. If chain usage increases massively there might be more false positives with this approach and it might have to be rethought.

With curve the smart contract uses a different approach to prevent sandwiching. It reads an curve internal exponentially moving average price over previous blocks to determine the current EMA price. Documentation around this feature is rather limited and I stumbled upon it rather by chance. But the basic idea is if the EMA price differs more than 1% from the current price to the detriment of the smart contract the swap will fail. It is more robust than the balancer approach, but there were times with a high USD/EUR volatility which would have triggered this sandwich prevention mechanism without any sandwiching going on, especially around interest rate changes of central banks.

These two sandwich prevention mechanisms are contract owner configurable. The balancer sandwich prevention is a boolean which can switch the mechanism on and off, whereas the curve one is a integer setting the maximum deviation between EMA price and current price. These are the only two contract owner only functions that exist in the contract.

Executing Transactions

If the allowance has been given to the smart contract anyone can initiate a transaction. But the only thing that happens will be having GNO tokens claimed, swapped and forwarded to the stored forwarding address. There is no way for anyone to be able to steal funds in this way. They would just pay the gas fees for you.

Preventing Swaps to go Through

This is connected to the discussion of sandwich attacks. A bad actor could relatively easily just send balancer swaps right before your transaction and prevent your transactions from going through. This would a griefing attack which also costs the attacker money (gas fee) without directly benefiting them. The only way to counteract this would be to switch off the balancer sandwich prevention mechanism in the contract. If this would become a problem a cleaner approach would be to use external oracles to get the 'real' exchange rates and only swap if they are within a certain range.

I want this as well

This contract has obviously not been audited by any external party. Make sure you understand what the code does and the risk it poses. The contract has been intentionally kept as simple and explicit (i.e. not gas optimized) as possible to make understanding it easier and reduce the surface area for any possible exploits. There is no web interface for this smart contract. You have to use gnosisscan. If you want to use it, do the following:

  1. Connect your withdrawal address to gnosisscan.io and register a forwarding address using 'setForwardingAddress'
  2. Set a reasonable GNO token approval for the smart contract. Connect your withdrawal address to the GNO contract on gnosisscan and set the approval to the following contract: 0xc0e69863c1da32450ad79cbfa93f6e9e696dd4d5
  3. Now you can initiate the claim, swap and forward transaction by calling the 'claimSwapForward' function with your withdrawal address as a function parameter. If you want to automate this, open the Powerpool App set up a job using PowerAgent. The PowerPool documentation or my current job can be guide how to set it up yourself.

Normally, execution a claim, swap and forward transaction costs a fraction of a cent. During extremely high gas prices I paid 7 cents for a transaction.

Last changed by 
 
haurog
0
993

Read more

A guide to choosing your clients

what influenced your client choices, what methods you used to improve your performance

Jan 3, 2024
Rocket Pool Censoring Relay Status and Developments

Written by haurog, improved with suggestion by austonst (March 2023) Background Since the merge, the burden of block proposals falls on the shoulder of validators. They make a decision how much they want to interfere with block production. In other words, a node operator chooses what kind of block production methods are ethical in their view. MEV relays generally give a higher reward than local block production. Almost 90% of blocks are relayed through an MEV relay, and choosing a relay influences what kind of transactions end up on chain and how they are ordered. Some relays censor certain transactions, whereas other relays allow any transactions in blocks they produce. The focus is mostly on OFAC compliant transactions, which, to the best of my knowledge, only concerns Tornado Cash transactions. In the last few days (end of February beginning of March 2023) there have only been about a dozens tornado cash transactions per day which had been delayed more than 3 blocks. Ultrasound money mentions about 1200 OFAC transactions per week and a third of them being censored (subject to delay). Censorship therefore affects a small portion of all transactions on the Ethereum main chain only. Shortly after the merge, Flashbots was the biggest relay, many of the newer non OFAC compliant relays had to prove themselves first in production. Flashbots also promised the highest rewards at the beginning. This is why at the beginning if MEV Boost was enabled it was mainly Flashbots which was used. Now, there is a multitude of different relays for a user to choose from. It also needs to be mentioned that, to the best of my knowledge there is no clear law that node operators have to censor certain transaction in any of the large jurisdictions. Nevertheless, some node operators want to be on the save side and choose an OFAC compliant relay.

Mar 13, 2023
All Flight Emission Estimators Are Wrong, But Some Are Useful

All models are wrong but some are useful. George Box All flight emission estimators have to simplify the complexity of the real world in order to estimate a carbon footprint incurred by air travel. Some make more assumptions, some less. In this post, we discuss how these assumptions influence the usability, accuracy and perceived precision of some readily available flight emission estimators. disCarbon Our flight emission estimator has an offset function which allows users to compensate their flight emission immediately and directly on-chain. This has the advantage that it is transparent, verifiable and taps into the first liquid and, therefore, efficient market for carbon credits. The emission estimation implemented is based on the model by myclimate. myclimate myclimate is one of most well-established flight emission estimators and is integrated in many airline websites. The model itself is explained in very high detail and is accessible on the myclimate website. The actual model used by the interactive estimator on their website is slightly different than the one documented which leads to small deviations on long range flights. We assume that this is due to unpublished changes in their calculation parameters. In a master thesis from 2009 it has been deemed to be the best emissions calculator from a wide range of European carbon compensation retail providers, see page 86 in the linked report (only available in German).

Aug 10, 2022
Read more from haurog
Published on HackMD