Weekly Dev Update #104

THORChain Weekly Dev Update for Week 104, 16–22 August; Native Transactions Enabled, THORSec Update, SCCN Ragnarök Completed, MCCN Update…

THORChain Author

— 5 min read
Weekly Dev Update #104

THORChain Weekly Dev Update for Week 104, 16–22 August; Native Transactions Enabled, THORSec Update, SCCN Ragnarök Completed, MCCN Update 0.64.0, Community Updates

Summary

SCCN Ragnarök Completed

Single Chain Chaosnet (SCCN) Ragnarök was completed, the last transaction was sent on August the 18th. In a likely blockchain first, SCCN was programmed to self-destruct from the start and poured tens of millions of funds to tens of thousands of wallets.

All SCCN infrastructure has now been decommissioned and reserve funds returned to the project.

THORSec Update

Phase 2 was completed and native transactions were re-enabled on the THORChain Blockchain such as Deposits and Send. Phase 3 will be focused on auditing and starting the BNB Chain. Upgrades to BNB.RUNE will be processed once Bifrost is re-enabled and BNB chain is unhalted. Once the SWITCH transaction is observed, RUNE will be minted. Same thing for ERC20 RUNE, except when ETH is re-enabled.

Phase 3 Checklist

- [x] Phase 1 Complete
- [x] Phase 2 Complete
- [ ] THORSec Audits Newly Active Code paths for Phase 3
- [ ] Nine Realms provides Go/No-Go
- [ ] Re-enable BNB Chain

Active Codepaths for Phase 3: https://www.notion.so/7b8622f9efff4bd49fe1bb0800ea1059. See overall THORChain timeline here

In addition to THORSec and professional auditors, the community is encouraged to audit these code paths and responsibly disclose (https://immunefi.com/bounty/thorchain/) for a bounty reward.

Audit Update by Halborn

Last week we have completed the:
- 3b — THORChain Router Contracts — BTC TxScript
- 3c — THORChain Router Contracts — DOGE TxScript
- 3d — THORChain Router Contracts — LTCD TxScript
- 3f — THORChain Router Contracts — Bitcoin Cash TxScript milestones
and reached near completion state on 1 — Component (bifrost).

This week: Focusing on milestones 1 and 2 and Testnet Node.

See more details here and here.

Vulnerability Disclosure

Using a Yggdrasil vault, a vulnerability exists where an attacker can replace legitimate outbounds in the mempool with nefarious non-observable transactions resulting in theft from SWAP/WITHDRAW recipients (customers).

Funds at were risk small (approx~$100k range) and unlikely to occur in real life.

Full disclosure here. Vulnerability patched in update 0.64.0.

Liquidity Returns and Refunds

Call for Liquidity Return

The team has reached out to the traders significantly in profit and is negotiating partial refunds. A few have already settled, with the rest in progress.

Liquidity Refunds

The team is attempting to make as many people as whole as possible, balancing input from as many people as possible.

A subjective decision needs to be made as to whether a person was maliciously taking advantage of liquidity providers and extracting value from the protocol or conducting a fair market trade. Refunds are not guaranteed, final adjudication will be done by a third party to add independence and impartiality.

Refund payments will be processed when they are ready. Once swap refunds are processed, RUNE upgrades will be finalised. Refunds will be paid over several weeks.

Correcting the Pool Prices

Once the BNB chain is enabled, it will be open for trading, however, the prices are significantly wrong. This will allow any trader to take considerable profits at the expense of the LPs. After community feedback, the team has negotiated for a professional arbitrage agent to perform these price-correction trades, with a balanced approach that does not significantly hurt LPs and to send all profits to the team (for a small fee). Their trading address will be curated. This setting is mimir-controlled, once the pool prices are correct, the trades will be open up for all.

feature: https://gitlab.com/thorchain/thornode/-/merge_requests/1884

MCCN UPDATE 0.64.0

These are the changes included in the release.
1) [BUG] Fix emit fee events on swallowed txs. PR: https://gitlab.com/thorchain/thornode/-/merge_requests/1802
2) [BUG] Node should set node keys once. PR: https://gitlab.com/thorchain/thornode/-/merge_requests/1849
3) [BUG] “Ensure BTC/LTC/BCH/DOGE Ensure the UTXO to asgard is spendable”. PR: https://gitlab.com/thorchain/thornode/-/merge_requests/1851
4) [BUG] Goroutine leak in signer process. PR: https://gitlab.com/thorchain/thornode/-/merge_requests/1852
5) [BUG] Nil pointer dereference in internal thornode API. PR: https://gitlab.com/thorchain/thornode/-/merge_requests/1853
6) [BUG] gosec fixes. PR: https://gitlab.com/thorchain/thornode/-/merge_requests/1858
7) [BUG] Insecure usage of logger function could lead to log injection. PR: https://gitlab.com/thorchain/thornode/-/merge_requests/1861
8) [BUG] (HAL-03) REPETITIVE CODE. PR: https://gitlab.com/thorchain/thornode/-/merge_requests/1863
9) [BUG] Changing Contacts to Contracts in pub key manager. PR: https://gitlab.com/thorchain/thornode/-/merge_requests/1864
10) [BUG] remove version check for consolidate UTXO process. PR: https://gitlab.com/thorchain/thornode/-/merge_requests/1865
11) [BUG] route unbond/leave rune to bond module, PR: https://gitlab.com/thorchain/thornode/-/merge_requests/1873

Community Updates

block42 Bi-weekly Dev Report

Brokkr

- Add dropdown filter for Synth and native assets
- Fix outbound fee calculation
- Transaction explorer links for non-THORChain transactions
- Consider Pool state for minting and redeeming Synths

https://brokkr.finance/

Follow Brokkr updates here:
Twitter: @Brokkrfinance
Telegram channel: https://t.me/brokkrfinance

TRX1’s Weekly Dev Report (16/08–22/08)

THORChain Monitoring bot
- Node Op Tools menu: adding and managing the nodes watch list
- Websockets connection for THORMon
- Improvements to the inline-list component
- Better money-numbers formatting
- Bug fix for the node list: messages was too long, from now they will be broken down into smaller ones
- Some minor localization changes

Devops Weekly Update (8/16–8/22)

cluster-launcher

- AWS reconsiderations / improvements [WIP]

THORmon

- Automatically save state upon selection
- Dependency upgrades, refactoring, branch and repo management
- Add churning highlighter feature
- Add behaviour threshold and improve churning highlighter
- Add multi node views feature

https://thorchain.network/

RuneYield.info Weekly Update 16/08 -22/08:

- Changed to use block height for LP protection calculation.
- Integrated address balances

chainpy Weekly Update (8/16–8/22)

xchainpy_bitcoin:
 — completely updated and published on PyPi
xchainpy_bitcoincash and xchainpy_litecoin:
 — client file was updated according to xchainjs_client.utxo_client
 — added some sample codes to the readme file
 — published new versions on PyPI

  • broadcast_tx function had a bug in xchainpy_bitcoincash, fixed using bitcore_api

Want to build something?

Want to be funded to build something in the THORChain ecosystem? Please build something then reach out.

Deployed to MCCN

  • Binance Chain: Deployed to chaosnet
  • Bitcoin: Deployed to chaosnet
  • Ethereum: Deployed to chaosnet
  • BitcoinCash: Deployed to chaosnet
  • Litecoin: Deployed to chaosnet

Additional chain development is on hold until audits are completed and the protocol is fully operational. Want to help? Reach out.

Next Milestones

  • Activate BNB Chain — Late August/Early Sept
  • Processing of Refunds — ongoing
  • UTXO Chains online — September
  • ETH Chain online — October

Community

To keep up to date, please monitor community channels, particularly Telegram and Twitter:

Read more