4 years ago
The Orbs Liquidity Nexus protocol takes any DEX like SushiSwap and enables farming with ETH only in popular pools like ETH/USDC.
This opens the door for ETH-only strategies that yield over 60% APY.
The protocol integrates with the widely used Chainlink Price Feeds to protect against economic attacks carried out through flash loans. Let’s demonstrate some hypothetical exploits and how Chainlink prevents them.
If you’ve ever participated in liquidity farming, you’re probably aware that liquidity always requires a pair. To farm SUSHI in SushiSwap’s ETH/USDC pool, you need equal parts ETH and USDC. To farm CAKE in PancakeSwap’s BNB/BUSD pool, you need equal parts BNB and BUSD.
If you’re long on crypto, you want to hold ETH (or BNB). Hodling stablecoins like USDC just to be able to farm painfully cuts into your crypto exposure. If ETH goes into another bull run, you’re at risk to miss out on half.
Wouldn’t it be great if you could get the same APY but use ETH only? No need to juggle anymore and balance your portfolio between pairs in order to make sure all of your assets are actively farming.
That’s what we’re trying to develop with Orbs Liquidity Nexus. We’ve realized that there’s a lot of USDC in the traditional CeFi world that wants to minimize crypto exposure. By sourcing this liquidity and pairing it with newly deposited ETH from DeFi, we’re able to let two different parties farm together! One party brings the ETH, the other party brings the USDC.
Read some of our previous posts to learn exactly how it works: Introduction, Part 1, Part 2, Part 3. If you prefer code, see the contracts on Github or an example harvest.finance vault that utilizes them to get a high yield on ETH.
Following the ever-growing list of DeFi exploits, you’ll notice that many of recent exploits start with a flash loan. What exactly is a flash loan, and why are they seemingly so dangerous?
Flash loans are an amazing DeFi construct with no parallel in the CeFi world. They allow anyone to get practically any size loan without any collateral. Wanna borrow $300 million for a short while? No problem! Just make sure you return the loan before your transaction is done.
If you let people fool around with $300 million at their disposal, they can do some creative things like manipulating the market temporarily into extreme conditions. For instance, they can trigger a swap on the SushiSwap ETH/USDC pair that drops ETH price in this pair temporarily by 95%. Or push the ETH price temporarily up by 10x. These changes don’t cause a problem per se, but they do expose economic vulnerabilities in edge conditions that developers normally never expect to happen.
When people think about flash loan providers, they normally only consider lending platforms like Aave. Flash loans can actually also be taken from any Uniswap-like DEX (SushiSwap included), where they’re called flash swaps.
In this post, we will demonstrate step-by-step how an attacker could use flash loans to manipulate Nexus single-sided farming to their own advantage if we’re not careful.
There are two parties for single-sided farming. One party is sourced from CeFi and deposits in advance a large USDC reserve into the Nexus contract. This USDC sits in the contract waiting for ETH depositors. The second party is our dear DeFi player that deposits ETH. This ETH is immediately paired with available USDC from the reserve and starts ETH/USDC farming. Once the ETH depositor decides to withdraw, the ETH/USDC is unpaired, USDC is returned to the reserve and the ETH is returned to the ETH depositor (plus rewards of course).
Different ETH depositors are isolated from each other, so one ETH depositor cannot attack another ETH depositor. The attack vectors we’ll explore here involve an ETH depositor attacking the USDC reserve provider.
Let’s start by showing the hypothetical attack step-by-step:
This attack is demonstrated in code in the Nexus test suite here.
This attack compromises the USDC reserve provider and allows the malicious ETH depositor to drain the USDC reserve. How is this possible?
The economic answer lies in the concept of Impermanent Loss (IL). IL is a part of life for liquidity providers and takes place whenever the price between the two assets of the pair changes. Splitting IL between the two parties is actually the main innovation of single-sided farming, we wrote an entire post dedicated to this topic. The IL splitting strategy Nexus implements is Strategy 1 — all IL on the ETH side. This means the ETH depositor takes all crypto volatility risk onto themselves in exchange for a larger cut of the farming reward. Theoretically, this means that the USDC reserve provider cannot lose money due to IL.
But not in an edge condition. If the ETH price drops quickly by over 75%, IL becomes so severe that the ETH depositor cannot make the USDC provider whole — even when giving them their entire principle. The USDC provider shares some of the loss in this extreme case. This is fine in normal day-to-day circumstances because the chances of this crash happening are slim.
However, using the flash loan, our attacker is able to artificially crash the ETH price by over 95%, causing a large loss to the USDC provider and cleverly gaining this loss as profit by swapping back at the lower price.
Let’s start by showing the hypothetical attack step by step:
This attack is demonstrated in code in the Nexus test suite here.
This attack also compromises the USDC reserve provider and allows the malicious ETH depositor to drain the USDC reserve. What happens in this case?
IL strikes once again in the same edge condition. The ETH deposit in step 4 takes place when ETH price is artificially inflated to an extreme value so very little ETH is needed to pair the entire available USDC reserve. Once the ETH price is returned to normal, we have a similar 95% ETH price crash from the moment of deposit causing IL so severe that once again the ETH provider cannot make the USDC provider whole. Once again, this loss is cleverly gained as profit by swapping back at the lower price.
The two attacks outlined above were possible because the ETH depositor could artificially cause extreme changes in the ETH price by manipulating the SushiSwap ETH/USDC pair itself. If the ETH price drops by over 75% at once, we reach an exploitable edge condition in the IL splitting algorithm.
How can we protect against such manipulation of ETH price?
The answer lies in the body of the question — bring in an external price oracle. Chainlink to the rescue. The ETH/USD Price Feed generated by Chainlink is infinitely more robust against manipulation than SushiSwap’s. Chainlink Prices fetch market data from many independent premium data aggregators (e.g. Amberdata, BraveNewCoin, Coingecko, etc), who each generate a volume-weighted average price across the entire crypto trading market (e.g. Binance, Coinbase, Uniswap, etc). To manipulate a Chainlink Price Feed, our attacker would need to manipulate the market-wide ETH price across numerous different trading venues, a substantially more difficult and expensive task.
Because market data is fetched from off-chain, on-chain flash loans have zero effect on the data provided by the ETH/USD Chainlink Price Feed, entirely solving the issues presented in the theoretical examples above. In addition to this robust market coverage, we found numerous other security and cost benefits from integrating Chainlink Price Feeds into the Orbs Liquidity Nexus protocol including:
Secure Node Operators — Chainlink Price Feeds are secured by independent, security-reviewed, and Sybil-resistant oracle nodes run by leading blockchain DevOps teams, data providers, and traditional enterprises. Chainlink nodes have a strong track record for reliability, even during high gas prices and infrastructure outages.
Decentralized Network — Chainlink Price Feeds are decentralized at the data source, oracle node, and oracle network levels, generating strong protections against downtime and tampering by either the data provider or oracle network.
Reputation — Chainlink provides a robust reputation framework and set of on-chain monitoring tools that allow users to independently verify the historical performance of node operators and oracle networks, as well as check the real-time prices being offered.
These benefits and more made Chainlink a clear solution to solving the economic exploits explained above. Additionally, integrating Chainlink was extremely easy and required just about 10 lines of Solidity code in the Nexus contract — in the form of a function modifier that verifies that the Chainlink ETH/USD price is close enough to the SushiSwap ETH/USDC price and reverts otherwise:
The final constant we need to define is SPREAD_TOLERANCE, which controls how far the two prices can become before we revert. The prices are never exactly identical because they are updated through different mechanisms. The SushiSwap ETH/USDC price follows the market price when arbitrageurs perform swaps in the pair. The Chainlink ETH/USD price is aggregated across hundreds of exchanges to generate a market-wide, volume-weighted value that is updated every time the ETH price moves at least 0.5% in either direction.
Let’s plot the two ETH prices side by side in last week:
For perspective, we also added the ETH price on Compound. We can see that all prices are pretty close and that actually Compound is a little less accurate than the other two.
To choose the value for SPREAD_TOLERANCE, let’s plot the percent difference between the SushiSwap ETH price and the Chainlink ETH price in the last 6 months:
We can see that the difference is normally less than 1% and in some extremes 2%. In our case, the attacks require a price manipulation of at least 75% — so any tolerance under 75% should do. It looks like 10% is a good tolerance value all around — it’s sufficiently under 75% so attacks will be prevented, and it’s well over the 2% price difference that we see normally.
Chainlink is the most widely used and secure way to power universally connected smart contracts. With Chainlink, developers can connect any blockchain with high-quality data sources from other blockchains as well as real-world data. Managed by a global, decentralized community of hundreds of thousands of people, Chainlink is introducing a fairer model for contracts. Its network currently secures billions of dollars in value for smart contracts across the decentralized finance (DeFi), insurance and gaming ecosystems, among others.
Chainlink is trusted by hundreds of organizations to deliver definitive truth via secure, reliable data feeds. To learn more, visit chain.link, subscribe to the Chainlink newsletter, and follow @chainlink on Twitter.
Docs | Discord | Reddit | YouTube | Telegram | Events | GitHub | Price Feeds | DeFi | VRF
If you’re curious about what we’re working on and don’t mind seeing work-in-progress that hasn’t been properly announced yet, feel free to follow us on Github:
We use cookies to ensure that we give you the best experience on our website. By continuing to use our site, you accept our cookie policy.
