Tian Li

165 posts

Tian Li

Tian Li

@tstyle11

Cofounder of Hydro Protocol

Seattle, WA Katılım Haziran 2008
331 Takip Edilen549 Takipçiler
Tian Li
Tian Li@tstyle11·
Updated non-work TODO list: 1) Get better at cooking 2) Build a home gym 3) Help out with homeschooling
English
11
0
9
0
Tian Li
Tian Li@tstyle11·
@mrjasonchoi @dydx @compoundfinance shorting DAI = long ETH/BTC. But since you can long crypto with any stable-coin, it doesn't really explain why only DAI utilization > 99%. USDC which is also available on these platforms have utilization around 20% currently.
English
1
0
1
0
Tian Li
Tian Li@tstyle11·
At this moment, the utilization rate of DAI is 99.7% on @dydx and 99.3% on @compoundfinance. Does anyone have a rational explanation for who is borrowing $30m worth of DAI and what they are doing with it?
English
2
0
5
0
Compound Labs
Compound Labs@compoundfinance·
Due to extreme price movements in the market today ($DAI is currently trading > $1.05), borrowing demand for DAI is currently at record levels. Further, the Ethereum network is clogged. Compound is operating normally, but it may take longer than normal to withdraw DAI.
English
7
12
89
0
Tian Li
Tian Li@tstyle11·
Hmmm... so this is what 1 million non-perishable calories and 100 gallons of water look like
English
1
0
3
0
Tian Li
Tian Li@tstyle11·
@mrjasonchoi @UniswapExchange Yes it is true that users want as much slippage as possible. But that's just like saying consumers want as much accidentally mis-priced "deals" on Amazon as possible. Someone paid for it, and they probably didn't do it on purpose.
Tian Li tweet media
English
0
0
2
0
Jason Choi
Jason Choi@mrjasonchoi·
@tstyle11 @UniswapExchange bZx may have enabled the margin that resulted in the slippage, but from my understanding the user wanted as much slippage in ETH/WBTC price as possible to sell at a significant premium to spot? twitter.com/mrjasonchoi/st…
Jason Choi@mrjasonchoi

I'm not sure if the "trader crashed Uniswap oracle and profited by shorting WBTC on bZx" explanation is completely correct. @bzxHQ is releasing a full report soon + I'm sure I got a few things wrong but here's what I think roughly happened:

English
1
0
2
0
Jason Choi
Jason Choi@mrjasonchoi·
.@UniswapExchange's assumption about users is that they don't like too much slippage. bZx attack is interesting because it breaks that fundamental assumption - user actually wanted as much slippage as possible.
English
3
0
17
0
Tian Li
Tian Li@tstyle11·
Looking at the transaction log of iETH, the majority of the 0 Ether transactions are withdraws, often failing due to lack of liquidity. Occasionally (for whatever reason) a DEPOSIT would come in, which gets gobbled up like meat thrown to wolves
Tian Li tweet media
English
0
0
7
0
Tian Li
Tian Li@tstyle11·
The deleveraging happening on bZx right now is both fascinating and scary to look at. As of now there are over 11,000 ETH in the bZx pool with only 0.6 ETH available for withdraw, meaning it is nearly impossible for lenders to exit. (source: app.fulcrum.trade/#/stats)
Tian Li tweet media
English
1
1
18
0
Tian Li
Tian Li@tstyle11·
One lesson we learned from past experience is that although "all the data is right there in the smart contract", it is not practical to expect the majority of users to perform raw analysis. We should strive to improve observability.
English
0
0
3
0
Tian Li
Tian Li@tstyle11·
@tayvano_ Whether bZx could survive the second incident ultimately depends on the perception of lenders. After the first incident and the “funds are safu” announcement, deposits rebounded and the bZx pool actually achieved a new all time high (for a short while)
Tian Li tweet media
English
0
0
2
0
Tay 💖
Tay 💖@tayvano_·
4. and for ffs prove me wrong in thinking that bZx will survive this when they really, really, really, really shouldn't be anywhere near anything that could potentially hold any money ever. do NOT give them the benefit of the doubt. again. 😩
English
6
4
35
0
Tay 💖
Tay 💖@tayvano_·
Stop giving teams, products & platforms the benefit of the doubt. bZx's repeatedly fucked up. Repeatedly. At least *6* times. How the hell were they able to lose another $650k?! I give zero fucks about writing bad code. All code has bugs. What comes next is what matters.
Tay 💖@tayvano_

@intocryptoast No. It doesn't work like that. Culture is very hard to change. If it's not happening during testing, it won't in production. You can fix bugs, but not the attitudes towards the bugs. Fixing bugs doesn't fix future bugs, only past ones. AS EXEMPLIFIED BY BZXs REPEATED ACTIONS 😫

English
18
42
212
0
Tian Li
Tian Li@tstyle11·
@hosseeb How does one "consolidate against" flash loans? Do I just say: "hey guys do you mind not letting random people swing around the entirety of your pooled assets as a wrecking ball against our contracts?"
English
0
0
0
0
Haseeb >|<
Haseeb >|<@hosseeb·
I'm curious if flash lending might get removed from some protocols. I think people will realize that it mostly enables mischief, and the large DeFi protocols may consolidate against it. But even still, there will always be flash lending pools out there that will do it for a fee.
English
2
1
22
0
Haseeb >|<
Haseeb >|<@hosseeb·
So bZx just got flash attacked *again*, just after they announced the postmortem on the previous one. Unlike that attack, this one was pure oracle manipulation—didn't even require a logic bug. Details are still hazy, but there are three interesting takeaways for me (THREAD)
English
9
60
223
0
Tian Li
Tian Li@tstyle11·
@tomhschmidt @tushar_jain For some reason "timelock" is just a boring thing to talk about (compared to stuff like "Flash Loans") and fails to garner mainstream attention. But hey as long as somebody knows ^^
English
0
0
2
0
Tom Schmidt >|<
Tom Schmidt >|<@tomhschmidt·
@tushar_jain I don't really see how you can claim with a straight face that a DeFi application, whose balance sheet is auditable and whose funds can only be maliciously stolen after a timelock, is worse than a centralized exchange.
English
1
0
12
0
Tushar Jain
Tushar Jain@tushar_jain·
0/ There has been a lot of talk on crypto twitter about defi contracts having admin keys so I wanted to consolidate my thoughts in this thread
English
3
5
19
0
Tian Li
Tian Li@tstyle11·
3/ Claiming that this was not a hack/bug but simply advanced financial juggling twitter.com/zhusu/status/1… When in fact an (understandable) mistake was made and a crucial invariant check was omitted.
English
0
0
2
0
Tian Li
Tian Li@tstyle11·
2/ Focusing on the flash lending and involvement of a large number of protocols instead of the crucial step @dydx and @compoundfinance was the easiest way to temporarily procure ETH WBTC, but weren't necessary. ingredients. The crucial step only involves bZx and uniswap
English
1
0
3
0
Tian Li
Tian Li@tstyle11·
This analysis of the bZx hack is the first one I've read that actually makes sense and doesn't hand wave over crucial steps. Much respect to @pecshield @peckshield/bzx-hack-full-disclosure-with-detailed-profit-analysis-e6b1fa9b18fc" target="_blank" rel="nofollow noopener">medium.com/@peckshield/bz…
English
1
1
8
0