APY.Finance Announcements – Telegram
👾APY.Finance Weekly Update (7/11 - 7/17) 👾

📈 Progress Remaining for Alpha
Oracles & Pricing
[80% Complete] Chainlink Monitoring
[100% Complete] Oracle Emergency Systems
Portfolio Management
[75% Complete] Gnosis Safe
[65% Complete] Administration & Governance Tools
Security
[90% Complete] Security Audit
[60% Complete] Security Updates
User Interface
[75% Complete] UX Testing
[90% Complete] UX Updates

🔐 Security
Our team is currently reviewing the financial audit Halborn has provided us, which has led us to improve the segregation of roles and responsibilities of contracts, resulting in increased operational security and a lowered possibility of operational error.

Further, a standard smart contract audit being conducted by Halborn is now underway. This standard audit will be akin to smart contract audits typically seen within Defi, and is being completed in parallel with a more comprehensive and financial audit. This audit will be available for viewing within the coming weeks, and marks a pivotal moment for the release of the forthcoming Alpha.

📂 Portfolio Management
Our team has spent this week evaluating methods to streamline platform operation. We’re implementing a management dashboard which allows us to make changes, test the system, and view the platform’s general state on the fly. A simplified system monitoring solution allows our team to respond to potential issues quicker, and frees up bandwidth for our engineers, which they can use on building new features instead of system maintenance.

Further, our team has created a Snapshot governance page where votes on proposals will be hosted, and token holders in the community will be able to vote. Stay tuned for hosted governance votes.

🌐 User Interface
This week, our front-end team has begun upgrading the UI error feedback system, which will display error messages and alerts to the end user, such as API, or data fetching errors. This will assist users in getting appropriate support, should they require additional assistance from our support team.

Finally, our team has performed various end-to-end integration tests from Gnosis Safe to verify deployed values and APYs are being properly displayed on the platform dashboard. Testing has demonstrated success, and pulled values were consistently displayed accurately. We’ve also conducted various code clean-up and refactors, which have reduced rerenders, ultimately reducing load times and speeding up the system for users.
👾APY.Finance Weekly Update (7/18 - 7/24) 👾

📈 Progress Remaining for Alpha
Oracles & Pricing
[85% Complete] Chainlink Monitoring
[100% Complete] Oracle Emergency Systems
Portfolio Management
[75% Complete] Gnosis Safe
[70% Complete] Administration & Governance Tools
Security
[90% Complete] Security Audit
[65% Complete] Security Updates
User Interface
[75% Complete] UX Testing
[90% Complete] UX Updates

🔐 Security
Our standard smart contract audit is currently being finalized, and is expected to be delivered by our auditing firm Halborn for internal review by the end of next week.

Our team has also mapped out the implementation of improving the segregation, and roles and responsibilities of contracts to lower the possibility of operational error while managing the platform. We will assign various roles and responsibilities to different contracts, with required access permissions pending the strength and impact of each contract. This reduces operational complexity and limits the possibility of operational error and potentially harmful security breaches, as more powerful contracts will require additional control and changes from multiple parties, while more lightweight, day-to-day contracts that are less impactful will require fewer handlers to change.

📂 Platform Management
These security updates also assist in streamlining platform management by simplifying and creating a more hands-off platform management experience. This reduces the possibility of operational error, increases platform security in the case of a security breach, and reduces necessary manual oversight, freeing our engineer’s bandwidth to work on platform updates instead of active platform management.

In addition, the team has evaluated a further extension to our asset allocation registry system which will further reduce operational risks when adding new farms to the platform.

🏷 Oracles & Pricing
Our security efforts this week also led us to rework the multiple contexts in which the system would lock or unlock the oracle feed, and assign different roles to each of these contexts.

🌐 User Interface
Our front-end team has implemented, and continues to develop our UI feedback system which displays relevant error messages to users, and gives our support team the necessary information to solve user’s errors.
👾APY.Finance Weekly Update (7/25 - 7/31) 👾


📈 Progress Remaining for Alpha
Oracles & Pricing
[85% Complete] Chainlink Monitoring
[100% Complete] Oracle Emergency Systems
Portfolio Management
[80% Complete] Gnosis Safe
[70% Complete] Administration & Governance Tools
Security
[90% Complete] Security Audit
[70% Complete] Security Updates
User Interface
[75% Complete] UX Testing
[90% Complete] UX Updates

🚀 DeFi Security Fundamentals
Our team continues to monitor and evaluate the state of other projects within DeFi, including hacks and exploits, which assists in covering avenues of potential risks while developing our own security updates. As the industry grows, and becomes more targeted, it will only become more important to mitigate these threats. As a platform designed for the long-haul, and for ease of use, these pre-launch security efforts are fundamental in ensuring users can use APY.Finance with confidence for years to come.

For example, the recent hack on Popsicle.finance shows us that as advanced as DeFi has become, it’s important not to overlook the nuances of long-standing token standards such as ERC-20.

Our team analyzed the attack and contracts involved. We discovered the Sorbetto contract has a similar flow for calculating fees as the widely used Unipool contract. A modifier is used to store updated fee amounts for accounts based on their balance of LP tokens. However, a key difference, which the attackers were able to exploit, was that the Sorbetto contract allows the balance of LP tokens to be transferred. The Unipool contract, on the other hand, locks LP tokens so they cannot be transferred.

When the LP tokens were transferred, the fees were never recalculated, effectively breaking ERC-20 fungibility. In layman’s terms, one LP token was not always interchangeable with another. The attackers exploited this to withdraw large portions of the pool in fees.

In short, security is of utmost priority for APY.Finance, and we appreciate your continued support as we head into the final stages of Alpha development.

🔐Security Updates
Our standard smart contract audit has been received and is currently under review while our team continues to evaluate security measures with our auditors, Halborn.

Further, our engineers have completed the implementation and testing of developed access controls needed for the segregation of roles and responsibilities of contracts. By creating more granular access controls and explicitly defining the segregation of duties of contracts, we’ve reduced operational complexity and lowered the ceiling of potential operational error. These changes are necessary for creating a more secure and hands-off platform management system. We’ve also begun the implementation of other security remediations, such as proper asset allocations and a protocol whitelist.

📂Platform Management
Our team is currently scoping out the way we fund liquidity provisions in an attempt to automate this function by giving it less power, and less access to the platform. This will allow the function to be more lightweight and nimble, and controlled by a less restrictive multisig.

🌐 User Interface
Our front-end team has completed implementing the state management and event handling functionality of the UI feedback system. This involved building out the template for the pop-up component (also known as "toast" notifications), as well as the context component which serves as the app's interface for retrieving and updating the data for the pop-up list. These pop-ups will display relevant error messages and other pivotal information to users regarding any issues they may encounter.

Finally, we'll be wrapping up the integration of this feedback system by ensuring that notifications are being triggered for the various cases such as unsupported networks, disconnected wallet, app maintenance, third-party API failures, and etc. ensuring all of our bases are covered.
👾APY.Finance Weekly Update (8/1 - 8/7) 👾

📈 Progress Remaining for Alpha
Oracles & Pricing
[90% Complete] Chainlink Monitoring
[100% Complete] Oracle Emergency Systems
Portfolio Management
[80% Complete] Gnosis Safe
[70% Complete] Administration & Governance Tools
Security
[90% Complete] Security Audit
[70% Complete] Security Updates
User Interface
[75% Complete] UX Testing
[95% Complete] UX Updates

🔐 Security
Our engineers have spent this week developing security updates based on feedback from the standard smart contract audit draft delivered by Halborn. These changes include remediations to the TVL manager which will support our new method of handling asset allocations with increased automation. We will continue to collaborate with Halborn on addressing any further security updates over the next few weeks before releasing the standard smart contract publicly.

📂 Platform Management
We’ve simplified our method of funding liquidity provisions by developing and integrating a more autonomous and nimble solution for everyday use. This results in a function that is intentionally less powerful, and has less access to the platform, so we can run it more freely, and with a less restrictive multisig than functions that have more power.

🏷 Oracles & Pricing
We are nearing the completion of all major ‘Oracles & Pricing’ developments necessary for Alpha launch. This milestone frees the bandwidth of our engineers to shift their focus toward other avenues of development.

🌐 User Interface
This week, our front-end team has fully integrated our UI feedback system’s pop-up triggers which will display error messages to users. I.E. unsupported network, oracle maintenance, and account notifications. We’ve also remediated any outstanding platform loading bugs by updating the implementation surrounding the management of asynchronous data pulled from smart contracts and updating loading and error states.

Below is a preview of our UI feedback notification system:
UI Feedback System Preview
👾APY.Finance Weekly Update (8/8 - 8/14) 👾

📈 Progress Remaining for Alpha
Oracles & Pricing
[95% Complete] Chainlink Monitoring
[100% Complete] Oracle Emergency Systems
Platform Management
[80% Complete] Gnosis Safe
[70% Complete] Administration & Governance Tools
Security
[90% Complete] Security Audit
[75% Complete] Security Updates
User Interface
[75% Complete] UX Testing
[95% Complete] UX Updates

🔐 Security
This week, our smart contract engineers continue to collaborate with Halborn on remediations for our ongoing smart contract and financial audits.

Further, our team is implementing individual asset allocations that use our newly developed TVL management system which will be able to directly and autonomously pull TVL values directly from different governance tokens and pools. This new system is developed as part of our roadmap toward more platform automation, which frees the bandwidth of our engineers of constant platform oversight. Finally, over the course of our next development sprint, we will begin developing a proxy contract whitelist of protocols.


🌐 User Interface
Following the completion of the UI feedback system, our front-end team has begun planning the platform’s “Tour Guide” update, which will guide users through the process of yield farming and staking on each page of the new layout. We’ve designed a simpler and more future-proof Tour Guide that will be more resilient to future UI updates.

The Tour Guide is pivotal in introducing new users to yield farming, as our mission with APY.Finance is to provide the simplest and most accessible yield farming experience possible for both new and experienced users.

Our team also continued to update the messaging and implementation of the platform’s transaction flow, resulting in more consistent messaging when interacting with the network. Lastly, we’ve updated our method of displaying growth metrics for a user’s earnings over time to now display values in both USD and percentages.
👾APY.Finance Weekly Update (8/15 - 8/21) 👾

📈 Progress Remaining for Alpha
Oracles & Pricing
[100% Complete] Chainlink Monitoring
[100% Complete] Oracle Emergency Systems
Platform Management
[80% Complete] Gnosis Safe
[75% Complete] Administration & Governance Tools
Security
[90% Complete] Security Audit
[80% Complete] Security Updates
User Interface
[75% Complete] UX Testing
[95% Complete] UX Updates

🔐 Security
This week, our smart contract engineers have scoped out all remaining remediations for our standard smart contract audit currently being conducted by Halborn. All other findings have already been remediated, or have a specific plan of action in place to tie off any loose ends, and complete the smart contract audit in preparation for its public release.

📂 Platform Management
Following the completion of platform development pertaining to TVL management, our team has also completed preliminary asset allocation integrations for the following pools:

Aave
- DAI
- USDC
- USDT

Curve pools
- 3pool
- AAVE
- alUSD
- BUSDv2
- Compound
- FRAX
- Ironbank
- LUSD
- MUSD
- sAAVE
- sUSDv2
- USDN
- USDP
- UST

The platform will now be able to track these pools, and mainnet testing regarding the integration of Curve and AAVE is underway. Lastly, will begin deploy funds to begin testing strategy deployment, and the tracking of deployed funds and earnings over the course of this week.
👾APY.Finance Weekly Update (8/22 - 8/28) 👾

📈 Progress Remaining for Alpha
Oracles & Pricing
[100% Complete] Chainlink Monitoring
[100% Complete] Oracle Emergency Systems
Platform Management
[80% Complete] Gnosis Safe
[80% Complete] Administration & Governance Tools
Security
[90% Complete] Security Audit
[85% Complete] Security Updates
User Interface
[75% Complete] UX Testing
[95% Complete] UX Updates

🔐 Security
This week, our smart contract engineers have continued to progress on smart contract audit remediations, specifically surrounding the various granted permissions of the system. By more strictly defining the available actions of the day to day management of the yield farming platform, we are now able to allow our governance to define how, and in what ways, the protocols are controlled. This also helps mitigate potential risk in the case of a compromised account.

Further, our engineers have begun developing our proxy contract whitelist and a proxy LP account, which simplifies interactions between protocols. This allows us to maintain flexibility and security while the platform interacts with protocols by reducing the points of external interaction.

🌐 User Interface
Our front-end team has spent this week continuing to iterate on the platform’s tour guide, including updating its compatibility with the new platform layout. Further, we’ve added additional notifications to the system regarding Liquidity Mining claiming which will display more specific information when users attempt to claim earned $APY rewards.

Finally, our team continues to work on platform responsiveness across different devices and screen sizes, ensuring a streamlined user experience regardless of hardware used, as we intend to deploy a yield farming platform that caters to all users.

APY Token Farming
Uniswap Pool*
TVL: $3,669,363.36
APY: 29.23%

Balancer Pool*
TVL: $2,830,165.28
APY: 37.93%

APY DAI/USDC/USDT Liquidity Mining*
TVL: $32,460,979.09
APY: 15.81%

*As of 9/2/21, 7:04pm EST
👾APY.Finance Weekly Update (8/29 - 9/4) 👾

📈 Progress Remaining for Alpha
Oracles & Pricing
[100% Complete] Chainlink Monitoring
[100% Complete] Oracle Emergency Systems
Platform Management
[85% Complete] Gnosis Safe
[85% Complete] Administration & Governance Tools
Security
[90% Complete] Security Audit
[85% Complete] Security Updates
User Interface
[75% Complete] UX Testing
[95% Complete] UX Updates


🔐 Security
This week, our team has completed core implementation and testing for an LP account proxy contract. This proxy contract acts as a filter, preventing any compromised admin accounts from accessing certain platform controls and reducing the attack surface of this type of black swan event.


Our engineers have also begun development and integration for our protocol whitelist with an established design and core contracts completed. Over the course of the next week, our engineers will also complete Zap integrations for various integrated Curve pools.

📂 Platform Management

Governance proposals for the initial pool of farms from evaluated Aave and Curve pools will be hosted on our Snapshot page over the coming weeks. Stay tuned for more information on how $APY token holders can participate in governance votes. Additionally, users can suggest additional farms for evaluation and future proposals here.

APY Token Farming
Uniswap Pool*
TVL: $3,476,307.10
APY: 28.65%

Balancer Pool*
TVL: $2,443,341.00
APY: 40.76%

APY DAI/USDC/USDT Liquidity Mining*
TVL: $27,538,568.08
APY: 21.63%

*As of 9/9/21, 12:52pm EST
👾APY.Finance Weekly Update 9/5 - 9/11) 👾

📈 Progress Remaining for Alpha
Oracles & Pricing
[100% Complete] Chainlink Monitoring
[100% Complete] Oracle Emergency Systems
Platform Management
[90% Complete] Gnosis Safe
[85% Complete] Administration & Governance Tools
Security
[90% Complete] Security Audit
[90% Complete] Security Updates
User Interface
[80% Complete] UX Testing
[95% Complete] UX Updates

🔐 Security
Our smart contract engineers have completed Zap integrations and core testing for the following Curve pools:
- 3pool
- AAVE
- alUSD
- BUSDv2
- Compound
- FRAX
- Ironbank
- LUSD
- MUSD
- sAAVE
- sUSDv2
- USDN
- USDP
- UST

These integrations will allow us to dynamically jump in and out of the aforementioned pools, and allow only permitted actions which we’ve thoroughly vetted, tested, and registered with the platform’s LP account.

Further, as a result of security updates in response to our ongoing security audit with Halborn, our team has further secured and simplified the deployment process. As a result, we can now run deployments through Gnosis Safe, reducing vulnerabilities we may have been exposed to previously.

Finally, our engineers have implemented the core framework for swap functions using Uniswap V3 which autonomously swaps farmed reward tokens with stablecoins, which are then autocomponded and reinvested.

📂 Platform Management
Next week will mark a significant milestone for the platform as we will hand over various proposals to the platform’s governance where $APY token holders will be able to vote on nominated and vetted farms to integrate within the Alpha build upon release. Keep an eye on our Snapshot page and next week’s update to learn how token holders can participate in upcoming governance votes.

🌐 User Interface
This week, our front-end team has completed the homepage’s Tour Guide, a step-by-step walkthrough for users new to the platform. Next week, our team will complete the Tour Guide for staking and yield farming pages, ensuring consistency and relevancy for each user and their specific on-page actions. Stay tuned for a preview of the Tour Guide in next week’s Weekly Update.

APY Token Farming
Uniswap Pool*
TVL: $3,650,294.73
APY: 23.93%

Balancer Pool*
TVL: $2,699,388.23
APY: 40.47%

APY DAI/USDC/USDT Liquidity Mining*
TVL: $40,060,752.46
APY: 16.43%

*As of 9/16/21, 12:56pm EST
👾APY.Finance Weekly Update 9/12 - 9/18) 👾

📈 Progress Remaining for Alpha
Oracles & Pricing
[100% Complete] Chainlink Monitoring
[100% Complete] Oracle Emergency Systems
Platform Management
[90% Complete] Gnosis Safe
[90% Complete] Administration & Governance Tools
Security
[90% Complete] Security Audit
[95% Complete] Security Updates
User Interface
[85% Complete] UX Testing
[95% Complete] UX Updates

📂 Platform Management
We are excited to announce a major milestone for APY.Finance and its first major leap in decentralization. The first wave of initial governance proposals are now listed on our Snapshot page where $APY governance token holders can vote to decide if these pools should be included in our initial yield farming robo-advisor’s farm pool. We’ll have more proposals listed each week leading up to Alpha launch and beyond.

Head on over to our Snapshot page to vote on the initial wave of proposals now.

🔐 Security
This week, our smart contract engineers have implemented autocompounding functions for earned reward tokens from liquidity distributed to CRV pools. When we distribute pooled liquidity from the APY.Finance yield aggregator, the aggregator will earn reward tokens for these pools and autonomously swap them into stablecoins which can be seamlessly redistributed.
Autocompounding
This autocompounding implementation solves many challenges individual users would face when claiming reward tokens from various pools. Each pool has multiple sources of yield, I.E. Curve’s transaction fees and reward tokens (CRV + any additional tokens their protocol works with). Having different types of earned reward tokens can be difficult to aggregate, and often come with costly gas fees. Our autocompounding feature mitigates these issues and the rewards are automatically redistributed without any manual user input.

Further, while reviewing our security updates in an effort to protect us against malicious sandwich attacks, our engineers have begun implementing smart order liquidity routing which optimizes potential slippage when making large movements of capital from one pool to another

🌐 User Interface
The front-end Tour Guide which will serve as a tutorial for users new to APY.Finance, and an accessible introduction to yield farming, is now complete for the platform’s staking page.

Remaining development for the tour guide necessary for Alpha launch are minor responsiveness optimizations, ensuring consistency and stability for users throughout different hardware devices and browsers. You can expect a more thorough demo of the Tour Guide in the coming weeks.

Below is a preview of the tour guide where you can view the Tour Guide toggle and its first steps in walking users through the process of providing liquidity and staking to earn $APY tokens.