Weekly Dev Update #102

2021-08-15 — 4 min read

Report

Summary

Lessons have been learnt and action has been taken!

THORChain’s 5 Pronged Recovery Plan Update
1) Stop and Audit (Halborn + Trail Of Bits)
2) Red-teams (Halborn + THORSec team)
3) Bounty Program (Immunify)
4) Harden the Protocol (6 new features added)
5) Insure the TVL. Tidal, more coming.

Stop and Audit Update and Timeline

Haborn Trail Of Bits audit continues looking at just about all aspects of THORChain’s codebase.

Timeline

THORChain code — ongoing
Binance (early Sept)
UTXO (late Sept)
Ethereum (early Oct)

See progress details here and here.

THORSec Announced

Introducing THORSec; an always-on offensive team of competent whitehats, which will be provided by Nine Realms. THORSec is a unique security function funded by the treasury, but distinct from core devs and external auditors.

See more details here.

Bounty Program

Bounty Program in use having a “P1 vulnerability relating to a possible infinite mint of RUNE” responsibly disclosed and patched. Up to $500,000 will be awarded per bug.

Bugs can be submitted at https://bugs.immunefi.com. Nine Realms will assist with triage.

Hardening the THORChain Protocol

Steps taken to make THORChain more resilient to attacks and network uncertainty. Read full details here. Code details below.

Automatic Solvency Checker (ASC)

https://gitlab.com/thorchain/thornode/-/merge_requests/1797

https://gitlab.com/thorchain/thornode/-/issues/1046

Granular Network Pause Controls

https://gitlab.com/thorchain/thornode/-/issues/1054

Node Timeouts

https://gitlab.com/thorchain/thornode/-/merge_requests/1847

Insurance

THORChain is in discussions with insurance providers (Nexus Mutual, Harbour & Tidal) to provide protocol level insurance to protect the TLV.

Last call for SCCN (BEPSWAP) before Ragnarok!

Very soon THORChain will move to Ragnarok Single Chain Chaosnet. The time is now to withdraw any funds. This will allow the code focus more on MCCN.

Updates

No THORNode MCCN updates — on 0.62.1.

SCCN Update — SCCN will be Ragnaroked over the Weekend. Last chance to withdraw before the Ragnarok. The team are in contact with the last remaining operators to step in if something goes wrong. Time to Ragnarok and Roll.

Community Updates

— July 2021 — THORWallet Update —

App & Blockchain
- New features such as Send Assets / Receive Assets / Swap Assets available and tested on both testnet / mainnet.
- Implementation of Slippage formula
- Implementation of Swap Output formula
- Copy to clipboard address
- Address QR Code
- Drawer in main navigator with social icons and build / version number
- Settings with new features such as recovery phrase available
- First TestFlight users onboarded (private beta)
- UI Improvements
- TGT (Thorwallet Governance Token) successfully minted and deployed
- Vesting contract deployed
- Staking contract currently under review

Business:
- close of funding round (2.5m)
- continuing regulatory initiatives (legal setup & tax)
- starting with terms & conditions for app

What’s next
- Swap finalization
- Liquidity Pooling
- Setup Marketing Campaign