compound-protocol VS pancake-farm

https://github.com/compound-finance/compound-protocol/tree/master/contracts/Governance .

I'm making an NFT crowdfunding protocol as a summer project and am using Compound Governance contract along with ERC20Votes to do so.

I highly recommend you do two things, first, try and get a feel for the behavior of smart contracts, there are tools that can help with this, like the ones at blockchain.ey.com - you can get a free personal use account and has a pretty convenient smart contract and token explorer tool for Solidity, you just drop in the code from the protocol’s GitHub (like recommended above) and bam. Here’s Compound’s timelock contract as an example: https://github.com/compound-finance/compound-protocol/blob/master/contracts/Timelock.sol

The Tranquil protocol smart contracts are forked from the Compound protocol with minimal changes. It is a deeply battle-tested and audited protocol with formal verification of its contracts.We plan to get audits for the Tranquil protocol as soon as possible.

Yep however I don't think I'd consider it to quite the same extreme. No doubt it was bad however proportionally to the size of the platform Cream's exploit was far more damaging. Like the rekt.news post mentions, it was more of a banking/spec error than an outright vulnerability. Your spec can't protect you if the loss is due to intended behaviour. There are ways to mitigate this however. The main way is by making your spec concise and clearly representable as a series of state transitions & operations or as a series of transformations.

The Compound Finance paper spec essentially just lists "this subsystem does these things" and then each function/operation is a list of preconditions, what actions are taken in what conditions, and the expected result. This isn't bad per se but it's not great either. Instead the paper spec really should be showing what transformation is being applied to the state, why we want that transformation applied, what properties must hold throughout the transformation, and then demonstrating that those properties hold.

Compare this (Compound):

https://github.com/compound-finance/compound-protocol/blob/m...

Provide alert for 10% or more change in Utilization Rate within a 60 minute window in a given pool.

In this article, I will be taking you through Pancakeswap's MasterChef contract as well as the Mathematical calculation involved in staking.

Yes, if you exactly know how to solve it. But the concurrency topic is not fully explored and straight forward to solve. The eUTxO and Plutus is all new. So going step by step makes a lot of sense. Thats how Inwouldngo about it as well. You start with a prototype and built all the base infrastrucure. You probably copy the existing implementation for a simple, non-concurrent dex: https://github.com/pancakeswap/pancake-farm/tree/master/contracts and expand on it a bit so you have something to show and rely on. You write some basic integration tests etc. You build a simple UI (will not change much regardless if concurrency is implemented).

It becomes more interesting: https://github.com/pancakeswap/pancake-farm/issues/12

https://github.com/pancakeswap/pancake-farm/blob/master/contracts/MasterChef.sol#L80

Link: https://github.com/pancakeswap/pancake-farm/blob/master/contracts/MasterChef.sol -HIGH APR FARM ! Website: https://mozartfinance.io/ Telegram: https://t.me/MozartFinance Twitter: https://twitter.com/MozartFinance

according to this, pancake swap already removed the 'backdoor' - https://github.com/pancakeswap/pancake-farm/issues/12 - wonder if anyone can verify ....?