Admin Access Policy
v2 Yield Tokens
Contract
ABI
Address
yDAIv2
None ✅
yUSDCv2
None ✅
yUSDTv2
set_new_APR ✅
No interaction with funds.
APR used for stateless recommend() function. Can be used to change the recommended provider. The owner could replace the existing contract to a controlled contract that could suggest a specific lending provider.set_new_COMPOUND ⚠️
Could access funds via malicious lending contract.
Sets the downstream address for Compound. The owner could replicate the compound mint() function call and force the APR change (with the vector mentioned in set_new_APR) and withdraw funds.
This method is implemented to allow adding Compound if they support the underlying token.set_new_DTOKEN ✅
No interaction with funds.
Can only update the ID at dydx, no way to influence any other action.
This method is implemented to allow adding dYdX if they support the underlying token.set_new_FULCRUM ⚠️
As per set_new_COMPOUNDyTUSDv2
set_new_APR ✅
set_new_COMPOUND ⚠️
set_new_DTOKEN ✅
Utility Contracts
Contract
ABI
Address
IEarnAPRWithPool
No interaction with funds.
APR used for stateless recommend() function. Can be used to change the recommended provider. The owner could influence the calculation to a specific lending provider.addAToken ✅
addAUniToken ✅
addCToken ✅
addDToken ✅
addIToken ✅
addPool ✅
addYToken ✅
set_new_APR ✅
set_new_UNI ✅
set_new_UNIAPR ✅
set_new_UNIROI ✅
APRWithPoolOracle
No interaction with funds.
APR used for stateless recommend() function. Can be used to change the recommended provider. The owner could influence the calculation to a specific lending provider.set_new_AAVE ✅
set_new_DDEX ✅
set_new_DYDX ✅
set_new_Modifier ✅
set_new_Ratio ✅
set_new_blocksPerYear ✅
UniswapROI
None ✅
UniswapAPR
No interaction with funds.set_new_blocksPerYear ✅
Lending Providers
Last updated
Was this helpful?