compound-protocol VS protocol-v2

https://github.com/compound-finance/compound-protocol/tree/master/contracts/Governance .

I'm making an NFT crowdfunding protocol as a summer project and am using Compound Governance contract along with ERC20Votes to do so.

I highly recommend you do two things, first, try and get a feel for the behavior of smart contracts, there are tools that can help with this, like the ones at blockchain.ey.com - you can get a free personal use account and has a pretty convenient smart contract and token explorer tool for Solidity, you just drop in the code from the protocol’s GitHub (like recommended above) and bam. Here’s Compound’s timelock contract as an example: https://github.com/compound-finance/compound-protocol/blob/master/contracts/Timelock.sol

The Tranquil protocol smart contracts are forked from the Compound protocol with minimal changes. It is a deeply battle-tested and audited protocol with formal verification of its contracts.We plan to get audits for the Tranquil protocol as soon as possible.

Yep however I don't think I'd consider it to quite the same extreme. No doubt it was bad however proportionally to the size of the platform Cream's exploit was far more damaging. Like the rekt.news post mentions, it was more of a banking/spec error than an outright vulnerability. Your spec can't protect you if the loss is due to intended behaviour. There are ways to mitigate this however. The main way is by making your spec concise and clearly representable as a series of state transitions & operations or as a series of transformations.

The Compound Finance paper spec essentially just lists "this subsystem does these things" and then each function/operation is a list of preconditions, what actions are taken in what conditions, and the expected result. This isn't bad per se but it's not great either. Instead the paper spec really should be showing what transformation is being applied to the state, why we want that transformation applied, what properties must hold throughout the transformation, and then demonstrating that those properties hold.

Compare this (Compound):

https://github.com/compound-finance/compound-protocol/blob/m...

Provide alert for 10% or more change in Utilization Rate within a 60 minute window in a given pool.

The real services, and counter to his points are Ethereum/DAI, aave.com, and gmx.io. All legitimate (non-confidence) services that I have used for years without issue. All services rely on smart contracts as counter parties so you don't need to worry about some dude running off with your money (that is tradfi problems that crypto is fixing)

I love defi and what it stands for. I love the fact that I can lend my capital through a fully decentralized protocol like AAVE or Compound and earn money on it.

Strength in numbers. The collectivised savings deposits of bond holders earn interest on Aave. Aave is the leading non-custodial liquidity provider in decentralised finance (DeFi). Once a week interest accrued by the collective is distributed to Prize Bond holders by lottery with additional draws held at the end of each quarter. Prize draws are provably fair through the integration of Chainlink VRF.

and official website is aave.com and the app launcher is app.aave.com

A blockchain network https://aave.com/

Digital currency (Aave), is a cryptocurrency that strives to provide comprehensive services to its users by creating a transparent and open-source infrastructure with the aim of lending and borrowing from tokens. (Aave) is a decentralized financial protocol. May the system function in such a way that the lenders deposit their assets and digital funds in the liquidity network (Aave) and thus make a profit for themselves. On the other hand, borrowers of the network (Aave) also receive loans from this system and network and put their cryptocurrency as collateral.

The Real Yield DeFi can divide into two types: 1. Fee - such as Borrowing Fee, Trading Fee, Transaction Fee or Insurance Fee (COMP, AAVE, FORW, GMX, ETH) 2. Reinvestment - such as reinvestment in the Real Yield from 1. or reinvestment in the physical products in the real world. (GFI)

A good way to be wary of tokens that you receive in airdrops, is that when there is a URL in the name of the token, it is most likely a scam. This token has a website name, that is not the official AAVE website. The official AAVE website is here: https://aave.com/