Curriculum·Graduate·G204
Tools a Non-Developer Can Run
Compound governance Proposal 062, executed 29 September 2021. The upgrade split COMP rewards by a governance-set ratio, and the new Comptroller compared a value with the greater-than operator where it needed greater-than-or-equal, a missing character found in two places.
Start with lesson 14 lessons · about 2 hours · free account to read in full
Lesson 1 opens on
Compound Proposal 062, 29 September 2021
Compound is a large lending protocol governed on-chain by token vote. Proposal 062 upgraded the Comptroller, the contract that distributes the COMP reward token, and the new code used a greater-than comparison where it needed greater-than-or-equal, one missing character that the auditor Kurt Barry found in two places. That missing character let users claim COMP they had not earned.
The lessons
- G204-01Reading a contract page on a block explorerRead a contract's block-explorer page for the facts that decide risk without reading any Solidityabout 30 min · opens on Compound Proposal 062, 29 September 2021
- G204-02Simulating a transaction before you signExplain what a transaction simulation does: run the exact payload against a fork and report the real net effect before you signabout 29 min · opens on WazirX, 18 July 2024
- G204-03Checking and revoking approvalsExplain what a token approval is: a standing permission that outlives the transaction that created itabout 30 min · opens on BadgerDAO, 2 December 2021
- G204-04Static analysis output a user can readExplain what a static analyzer does: flag classes of known-dangerous patterns in code without running itabout 30 min · opens on Wormhole bridge, 2 February 2022