YAM Code Flaw Governance DilemmaIn a tweet earlier today, Aug 13, the project stated that it had found a bug in its code but reassured eager farmers that their funds were safe for the time being:
We have found a bug in the rebasing contract, please read below. All funds in staking contract are safe, as this is an unrelated part of the protocol. User YAM balances are also unaffected.The YAM monetary system works on a principle of ‘rebasing’ which allocates 10% of each diminished token distribution back into a treasury via a dollar-pegged stablecoin called yCRV. Following the first day of staking, participants are able to deposit their earned YAM back into the protocol to earn a slice of the next distribution. The tokenomics are fully explained on the official website. It appears that the bug causes rebases to mint more YAM than intended, and two proposals were subsequently made to reset the rebase to zero and reset the YAM in the reserves back to zero.
To achieve the governance vote, 35,000 YAM were initially requested. However, after speaking to Compound Finance CEO, Robert Leshner, the project team discovered that they needed 160k tokens to achieve governance. Pleas were put out to farmers to remove liquidity and start delegating for the survival of the project. The tokens must be held in Yam wallets until Aug 16, 9 AM UTC, in order for them to count, so it’s still a big risk for many.
To fix this issue, we are creating a two-part proposal:— Yam Finance (@YamFinance) August 12, 2020
1. Set rebase to 0; this will pause rebases to allow us to implement full fix
2. Reset YAM in YAM reserves to zero; this will eliminate the over-inflated YAM in the reserves
We need YAM farmers to act now. If we are successful, YAM holders will very likely vote to reward those voters who help save the protocol.Aave developer, Emilio Frangella [@The3D_] has been conducting his own investigation into the Yam staking rewards contracts, discovering that changes to the original contract are minimal and mostly related to configuration or small improvements on the reward distribution. However, a governance decision is required and the tokens can return to zero if it fails.
Yam Fights for SurvivalTo its credit, the project has issued several warnings about the unaudited nature of its smart contracts and this has now been plastered on the front page of the farming dashboard;
While the initial creators of the Yam protocol have made reasonable efforts to attempt to ensure the security of the contracts, including forking much of the codebase from existing well-audited projects and soliciting review from friends, nothing approaching the rigor of a formal audit has been conducted at this time. We STRONGLY urge caution to anyone who chooses to engage with these contracts.An official explanation of the events claims that if governance is unable to submit a bug-fix proposal prior to the second rebase, no further governance actions will be possible due to the amount of YAM in the reserve. The notice added, “If this happens, the YAM treasury will become ungovernable and these funds will be lost.” The crypto community weighed in with their opinions, which ranged from some labeling it an all-out scam, to others praising the effort and attempt to try something different. Ethereum Foundation’s Hudson Jameson [@hudsonjameson] was of the opinion that the team behind it meant well, and for it to be a ‘cool experiment’ because they love DeFi, but did not expect such a response and rushed to launch it, adding;
Shaming the ecosystem or the YAM team for what may turn into a failed experiment is a net negative. We need a community of people like the YAM team to push the envelope,Defirate editor Cooper Turley commented on the possibility of not reaching the required amount for the governance vote due to high gas fees:
Will community members eat ~$100 in gas to save the yCRV treasury? Feel like this is a pretty crucial turning point for the project.
Whales to the RescueThe ‘Save Yam’ campaign garnered the support of other DeFi platforms such as Synthetix and Curve Finance that encouraged participants to contribute to the voting system. Earlier in the day the platform also added that it was approached by a number of ‘benevolent whales’ who wanted to help out by farming the Uniswap pool as the deadline approached.
Earlier this morning Yam had hit its target and stretched the goal to 200,000 votes “for extra safety.” At the time of press, the platform was reporting over 270,000 votes delegated which mostly came from the aforementioned whales. The most recent update from Yam was that the governance proposal had finally been submitted.
We have been contacted by various benevolent YAM whales.— Yam Finance (@YamFinance) August 13, 2020
Many are farming the Uniswap Pool until 7am UTC to accrue extra YAM to delegate.
Progress toward our 160k goal will appear slow but then speed up rapidly as we approach 7am UTC.
Help us. We are all in this together #DeFi
Governance proposal submitted (0x1d64875b24732bc2e8880cd0870ea8e301ddde683ce81fea418e9ab4feea90bb)— Yam Finance (@YamFinance) August 13, 2020
🚨 we are urgently investigating a potential flaw that would prevent proposal execution.
We strongly advise exiting the Uniswap YAM/yCRV pool prior to rebase at 8am UTC (35 mins)
All the information contained on our website is published in good faith and for general information purposes only. Any action the reader takes upon the information found on our website is strictly at their own risk.