DeFi Watch

Check out my interview on Nic Carter's podcast

Last week, I had a great chat about DeFi Watch with Nic Carter for his podcast "On The Brink". We discussed my background in DeFi and crypto, how DeFi Watch came to be, and several trust-related issues with DeFi including admin keys, multisigs, tokenized governance and more. We also went

sushiswap

SushiSwap was dishonest about its timelock

SushiSwap has given us a reason to question the credibility of its Ops multisig signers. We should not ignore it. NOTE: Some will say that sharing this type of info is annoying, inflammatory or unnecessary. I disagree. I am providing this info to give you information that may help you

alpha homora

Alpha Homora v2 has a single-signer admin key

I recently discovered that Alpha Homora v2 (currently around $700m TVL) is fully upgradable by an EOA (externally owned account) admin key. An EOA is essentially a normal single-signer, non-contract Ethereum account with no ability to use multisig or timelock protections. The admin key is referred to in the protocol

aave

Aave on Polygon has an admin key

I recently discovered that Aave's Polygon Market is governed by an undocumented multisig admin key. I requested information about this multisig from the Aave team. The following reply was received: I followed up immediately with these questions: Who are the signers?Are the signers Aave team members?What countries are

polygon

Second letter to Polygon about multisig

Today, a followup letter was sent by DeFi Watch to Jaynti Kanani of Polygon. If a response is received, we will publish it right away. Follow Chris Blec on Twitter for updates. May 27, 2021 Jaynti Kanani CEO & Co-Founder Polygon, formerly Matic Dear Mr. Kanani: Members of your team

polygon

Inquiry into Polygon multisig

Today, the following letter was sent by DeFi Watch to Jaynti Kanani of Polygon. Once a response is received, we will publish it right away. Follow Chris Blec on Twitter for updates. Dear Mr. Kanani: There is now a great level of concern amongst the DeFi community over the security