compound-protocol VS verified-smart-contracts

https://github.com/compound-finance/compound-protocol/tree/master/contracts/Governance .

I'm making an NFT crowdfunding protocol as a summer project and am using Compound Governance contract along with ERC20Votes to do so.

I highly recommend you do two things, first, try and get a feel for the behavior of smart contracts, there are tools that can help with this, like the ones at blockchain.ey.com - you can get a free personal use account and has a pretty convenient smart contract and token explorer tool for Solidity, you just drop in the code from the protocol’s GitHub (like recommended above) and bam. Here’s Compound’s timelock contract as an example: https://github.com/compound-finance/compound-protocol/blob/master/contracts/Timelock.sol

The Tranquil protocol smart contracts are forked from the Compound protocol with minimal changes. It is a deeply battle-tested and audited protocol with formal verification of its contracts.We plan to get audits for the Tranquil protocol as soon as possible.

Yep however I don't think I'd consider it to quite the same extreme. No doubt it was bad however proportionally to the size of the platform Cream's exploit was far more damaging. Like the rekt.news post mentions, it was more of a banking/spec error than an outright vulnerability. Your spec can't protect you if the loss is due to intended behaviour. There are ways to mitigate this however. The main way is by making your spec concise and clearly representable as a series of state transitions & operations or as a series of transformations.

The Compound Finance paper spec essentially just lists "this subsystem does these things" and then each function/operation is a list of preconditions, what actions are taken in what conditions, and the expected result. This isn't bad per se but it's not great either. Instead the paper spec really should be showing what transformation is being applied to the state, why we want that transformation applied, what properties must hold throughout the transformation, and then demonstrating that those properties hold.

Compare this (Compound):

https://github.com/compound-finance/compound-protocol/blob/m...

Provide alert for 10% or more change in Utilization Rate within a 60 minute window in a given pool.

OP, if you are asking about price calculation, IMHO it still follows the original white paper, with many tweaks and improvements, but the fundamental principles remain from V1: https://github.com/runtimeverification/verified-smart-contracts/blob/uniswap/uniswap/x-y-k.pdf (chapter 3) - yes there is something called ticks and virtual liquidity in v3 but those formulas will still give you a good approximation.

You can find the CPMM formulas used by Uniswap here: https://github.com/runtimeverification/verified-smart-contracts/blob/uniswap/uniswap/x-y-k.pdf

This formula can vary with each protocol. For examaple, Maiar DEX uses the industry standard "x*y=k" constant product AMM model, which has proven its reliability in existing implementations, and has been formally modelled and verified. In this formula, k is a fixed constant, meaning the pool’s total liquidity always has to remain the same.

https://github.com/compound-finance/compound-protocol/tree/m...

to this (Uniswap):

https://github.com/runtimeverification/verified-smart-contra...

https://github.com/runtimeverification/verified-smart-contracts/blob/uniswap/uniswap/x-y-k.pdf https://uniswap.org/whitepaper.pdf

Hi, I was going through the formalised explanation of the Constant Product function and it's implementation as per this link. Could you link me to any article that could help me understand the formalisation better.

What is effectively a changelog of features for their new version is probably not the best place to start.

If you'd like to know more then this [0] is a brief summary of Uniswap and this paper [1] is a good introduction to the formalism of the `x * y = k` market making model used by Uniswap.

[0]: https://github.com/runtimeverification/verified-smart-contra...

[q]: https://github.com/runtimeverification/verified-smart-contra...