[Social] [EP2.2.5] Selection of an ENS endowment fund manager

Howdy folks :cowboy_hat_face:

Iā€™m Auryn, lead dev at Gnosis Guild, the creators of Zodiac.

Just wanted to chime in to clarify a few things about the Zodiac Roles Modifier that Karpatkey is proposing to use as part of their treasury management strategy.

The roles module:

  1. Has been audited. You can see the report on GitHub
  2. Has a $2M bug bounty
  3. Is a simple codebase, with a relatively small attack surface.
  4. Has been used for thousands of transactions in production by Karpatkey as part of their treasury management strategy for the GnosisDAO.

Happy to answer any questions here.

5 Likes

Here are the results so far:

Each column represents a voting round; after each round the option with the fewest votes is eliminated and those votes are reassigned to the votersā€™ next choices. The final round shows the runoff between the remaining choices.

5 Likes

Hi all, based on each propositionā€™s info and discussions, Iā€™ll be voting for the following:

  1. Avantgarde
  2. Karpatkey
  3. None of the Above
  4. Llama

While each proposal involves a sufficient level of trust-minimization, where funds are held in a non-custodial manner, Avantgarde and Karpatkey provide the flexibility/role delegation thatā€™s required when allocating capital to yield strategies with a non-zero risk profile. The ability to pull funds from a strategy may have to occur on the order of hours or minutes (known unknowns + unknown unknowns), so while requiring an ENS DAO vote for strategy is an idealistic goal, it is not a realistic one. Therefore Llamaā€™s proposal is a non-starter for me personally.

Avantgarde and Karpatkey are close calls, but I am generally more aligned with the formerā€™s inclusion of institutional lending as a sustainable source of yield (without going all-in on such strategies). To be clear, both institutional and pure DeFi focusing lending have risks (albeit different kinds of risk; compounded composability risk vs default risk), but a balanced approach that straddles both without going overboard on either can best serve the DAOā€™s goals.

Farm and dumping subsidy tokens for yield has defined DeFi over the past 2+ years, but I donā€™t believe an all-in focus on this approach meets the requirements of long-term sustainable yield. As a parallel weā€™re already seeing other DAOs step into the world of institutional lending like MakerDAO, though is not a 1:1 comparison by any means.

I appreciate the thoughtful input thatā€™s been given by various parties.

6 Likes

Thank you for the thoughtful post and reasoning!

Hereā€™s the updated state-of-the-vote after CLGā€™s vote:

Tech does not end in non-custodial fund management but instead extends to risk management. Weā€™ve learnt no DEFI strategy is passive, so a simple risk management policy is insufficient. We need processes, protocols, infrastructure and many war rooms to act in a hack, market manipulation attack or many other unexpected market situations.

Iā€™m surprised nobody else even mentioned this in their proposals, likely because of inexperience.

Another core function of a fund manager is the criteria, skill and experience in decision-making and economic/incentives modelling.
For example, we would never agree to lend DAO funds to Maple or Goldfinch in the current state.

Maple, as a lending platform, should be neutral from pool delegates. Instead, they support them, likely because they are also investors. This aspect is risky and I hope Maple will change it.

Some red flags:

  • Lending funds to Alameda in July 2022, after the Luna collapse, when it was likely already insolvent. The payment was due for January 2023, but for some reason, it was repaid fully in advance.

  • Open loans on crypto hedge fund Wintermute which was hacked and had funds on FTX

  • Open loans with crypto hedge fund Folkvang, partly owned by FTX

  • Recently liquidated Crypto hedge fund Babel was using customer funds to trade.

  • Orthogonal Trading borrowed $36MM from Maven 11

  • Most other borrowers are not googlable; many are likely part of an opaque legal engineering structure from other crypto hedge funds.

Goldfinch lends funds to consumers in developing countries. There is the question of not if, but when these countries are going to default on their debts dragging down the whole market. Again.

We agree the rationale of decision-making and risk management are super important too. For example, Luna and FTX failed due to poor financial modelling and risk management, not smart contracts.

I think we failed to convey the goals of a proper Finance Working Group. A Finance department in any organisation has a much broader scope than just creating reports; there is analysis, proposals, and execution.
The report is the visible output. Without a team working with the data, a report only contributes to visibility, not much more.

The goal here was to achieve self-sufficiency asap. It seemed an essential purpose of the RFP.
I wish we had your feedback sooner; this is a parameter we could easily change.

I apologise for giving this impression; weā€™re technical people not used to public speech. I can assure you weā€™re 100% committed to ENS. Our commitment shows in the full-time team dedicated to the Finance Working Group, supported by teams composed of 17 full-time DAO treasury professionals.

5 Likes

Twitter Space

Twitter Space happening later today (2pm ET) with the three finalists + @nick.eth and @AvsA.
The Space will also be recorded for those who arenā€™t able to join live.

1 Like

Hey, I didnā€™t mean to put a negative spin on this, it was just an observation and I also try to be as objective as possible. Iā€™m a bit of social media manic myself, today most of the cool stuff on CT and such, otherwise how do you stay informed. So I just noticed how Avantgarde was hugging every twit and every relevant post they saw, providing feedback and defending their position. I felt like they are very ā€œpresentā€. Also keep in mind that this is my subjective opinion, everyone is different.

Good morning!

No investment is risk-free. If it were, it would yield nothing.

Our approach to portfolio management is not to avoid risk entirely, but to focus on making sure we thoroughly understand the risks (and rewards) of a given investment through extensive research and diligence. We look to understand for example, how these protocols work, where, how often, and to what extent can things go wrong and what does the protocol stand to gain if things go according to plan? I spoke about this at length in @Griff 's Twitter space on Saturday.

Allocating an appropriately-sized portion of a portfolio to strong risk-adjusted opportunities is how an investment strategy generates returns. Sizing riskier positions appropriately also means if things donā€™t go to plan, the overall portfolio can still survive and even thrive. Maple and Goldfinch do indeed represent relatively higher risks than e.g. Compound and Aave, but we believe the proposed sizing in our model portfolio is appropriate for the return potential

Now, on to specific claims made:

Lending funds to Alameda in July 2022, after the Luna collapse, when it was likely already insolvent. The payment was due for January 2023, but for some reason, it was repaid fully in advance.

This is a red herring. Maple as a protocol had no outstanding direct exposure to Alameda at the time of its bankruptcy and lenders suffered no losses due to an Alameda default. Indeed, the pace of lending to Alameda had slowed, and lending was stopped from their single-borrower pool based on delegatesā€™ concerns over the degradation of Alamedaā€™s financial statements prior to the Luna collapse.

For those that are interested in listening to Maven11 and Orthogonalā€™s credit managers describe the process, there was a great webinar last week that walked through the Alameda collapse from their perspective.

  • The last loan to Alameda from the Orthogonal USDC pool was a 90-day maturity issued on 17 Feb 2022 that was repaid in its entirety. This can be viewed in the Maple app here and verified on chain.
  • The last loan to Alameda from the Alameda Single Borrower pool was a 90-day maturity issued on 21 May 2022 that was repaid in its entirety. This can be viewed in the Maple app here and verified on chain.
  • The last Maple loan to Alameda was issued from the Maven 11 pool. It was a 90-day maturity issued on 4 June 2022 that was repaid in its entirety. This can be viewed on the Maple app here and verified on chain.

Open loans on crypto hedge fund Wintermute which was hacked and had funds on FTX

Open loans with crypto hedge fund Folkvang, partly owned by FTX

Two points here.

First, Wintermute and Folkvang, like every other market maker in the space, have funds trapped on FTX. Wintermute did have their DeFi operations hacked. However, thanks to proper counterparty management, none of the above have a material impact on the companiesā€™ balance sheets and none resulted in losses to lenders. Notably, Folkvang was the first market maker to repay all their outstanding debt to counterparties to alleviate any concerns.

Second, the equity investment youā€™re describing in Folkvang was made by Alameda, not FTX. Alameda made equity investments in dozens (hundreds?) of crypto-native companies. Their investment in Folkvang was small as a percentage of the companyā€™s total equity and came with no strings attached in terms of volume requirements on FTX itself (see first point regarding counterparty risk management).

Recently liquidated Crypto hedge fund Babel was using customer funds to trade.

From the lenderā€™s perspective, the total return in the Orthogonal USDC pool since inception is 5.96% inclusive of the Babel default loss (before recovery), and 2.1% YTD as of Sep 2022. These numbers are exclusive of MPL rewards.

Babel suffered a material loss caused by poor option hedging strategy that went against their book of assets and subsequently caused liquidity issues. This ultimately forced the firm to freeze assets and suspend normal operations. Orthogonal proactively issued a notice of default due to their inability to continue normal business operations, which was a breach of the Master Loan Agreement.

Upon default, Orthogonal bolstered the Pool Cover with an additional $1MM of capital to insure an adequate buffer for future and outstanding loans.The Maple Foundation, on behalf of the pool, has continued pursuing off-chain recovery with debtors and other creditors under New York Law.

Orthogonal Trading borrowed $36MM from Maven 11

Orthogonal Credit is a separate operational team from Orthogonal Trading. Orthogonal Trading is a well-established market making firm with robust financials and solid track record. Orthogonal Credit is a dedicated team to the credit operation on Maple Finance with deep experience in loan origination, risk management and capital markets. Orthogonal Credit is able to leverage Orthogonal Tradingā€™s subject matter expertise in crypto market marking to enhance their risk management thesis. Importantly, Orthogonal Credit never lends to Orthogonal Trading from its Maple pool. And the beauty of the blockchain is that this is observable in real time.

Borrower prepayment of loans into the Maven11 pool means that Orthogonal currently makes up a large portion of the debt outstanding. To alleviate this imbalance, Orthogonal has started early prepayment of their loans with another 10m USDC to be repaid early over the coming weeks.

Most other borrowers are not googlable; many are likely part of an opaque legal engineering structure from other crypto hedge funds.

This is also a red herring and an unfounded speculation. Although delegates take reputational risk into consideration as part of their DD process, whether a borrower is discoverable by the general public has no impact on their credit-worthiness.

Goldfinch lends funds to consumers in developing countries. There is the question of not if, but when these countries are going to default on their debts dragging down the whole market. Again.

It is true that Goldfinch borrower pools have exposure to developing economies. This exposure is diversified across many countries and is fully collateralized at the individual loan level. Defaults at the loan level, the sovereign level, the pool level - all possible! But Goldfinchā€™s diversified nature, as well as our portfolioā€™s diversified nature, mean that none of those hypothetical defaults would have a material impact on the Endowment.

Maple, as a lending platform, should be neutral from pool delegates. Instead, they support them, likely because they are also investors. This aspect is risky and I hope Maple will change it.

Iā€™m not sure I quite understand this point, but assuming you mean that Maple should function without pool delegates, I disagree entirely. Maple, at its core (in my opinion), is a coordination and incentive alignment platform. Lendersā€™ incentives align with delegatesā€™ incentives align with the protocolā€™s incentives. Lenders provide capital, delegates provide first-loss capital and underwriting services, and the protocol provides the platform. Without the delegateā€™s underwriting services, there would be no way to meaningfully evaluate borrower risk and the platform would cease to function.

Implicit in the ā€œwe should get rid of pool delegatesā€ argument is the idea that these types of risks can be managed purely by on-chain or algorithmic systems. I would argue that while this is a worthy goal, market structure complexity means that itā€™s currently not a feasible one. Tools such as Credora, which gives visibility into a borrowerā€™s assets and credit worthiness in real time, are just that - tools (and good ones!). They enable and empower human decision-making. In the case of Mapleā€™s current roster of pool delegates, that decision-making is also informed by decades of risk management experience, such that delegates are able to recognize ā€œanother one of thoseā€ (cribbing from Ray Dalio, apologies).

6 Likes

i starred both of yā€™allā€™s posts because I appreciate the vigorous debate!

3 Likes

Hi all,

Nic Munoz-McDonald here. For context: Iā€™m a member of Enzymeā€™s Technical Council, an auditor thatā€™s worked on both Enzyme and Safe over the years, and a fan of Zodiac. Iā€™ve been following the discussion, and want to clarify some points.

Speaking from a smart contract security perspective, there are significant differences in Karpatkeyā€™s and Enzymeā€™s approaches. The Enzyme approach is characterized by two principles: ā€œdefense in depthā€ and ā€œsmart contract controls wherever possibleā€. To that end, Enzyme takes a more holistic approach to security than Karpatkey: which implements controls at the individual transaction level.

Iā€™d actually agree with an even stronger statement: thereā€™s no such thing as non-custodial fund management without smart contract controls at the overarching fund level. Directly transferring out assets is far from the only way to siphon value out of a fund. As a simple example, a dishonest fund operator could make AMM trades with excessive slippage. Naively, the Zodiac Roles Modifier can protect against this just fine: you can restrict these calls to using a max slippage parameter below a given threshold. However, that doesnā€™t truly solve the problem: the fund operator can perform as many max slippage trades as they like. Each individual trade conforms to the smart contract controls in place, but cumulatively they can drain the fund. Contrastingly, Enzymeā€™s solution takes this into account (protocol/contracts/release/extensions/policy-manager/policies/asset-managers/CumulativeSlippageTolerancePolicy.sol at v4 Ā· enzymefinance/protocol Ā· GitHub). While seemingly less flexible, Enzymeā€™s policy hook based architecture can provide more expressive and powerful smart contract based controls.

Integrating a protocol doesnā€™t stop at whitelisting its entry points. Something as seemingly simple as assessing the value of LP shares you receive from an AMM, is fraught with pitfalls and edge cases that can snowball into vulnerabilities. The flexibility of the Zodiac Roles Modifier fuels very large hidden costs: every integration multiplies the attack surface. With Karpatkey, it is not clear to me who bears the cost of auditing these configurations. With Enzyme, each integration has been vetted by the core development teamā€”who always have a direct line of communication to the protocolsā€™ respective teamsā€”as well as 3rd party audits. All paid for by Enzyme.

All these are simply part of the day to day operations of the Enzyme Technical Council, and have been since its inception in 2019. Honestly, Iā€™ve been called into too many war rooms alongside fellow Enzyme Technical Council members ChainSecurity (https://chainsecurity.com/) to take this accusation of inexperience seriously.

5 Likes

Massive changes to the state of the vote as a result of Brantly casting his vote:

Stewardā€™s View - Fireeyesdao.eth

The FireEyes core team and I have spent significant time reviewing all proposals (pre-selection) as well as all final proposals.

Although setting up an endaoment for the ENS DAO is a novel and important step in the progression of the community & treasury, the process and amounts being discussed currently feels like an overstep.

To put our opinion up front, we will be voting ā€˜none of the aboveā€™ and believe the ENS DAO should start with a smaller, more purposeful allocation towards an endaoment.

This RFP sparked great discussion along with A+ proposals from submitters; however, no major DAO has adopted this strategy, and being the first to do so with a majority (80%) of the treasury feels very risky considering the max upside of 1-5% apy outlined by the proposals.

Instead, we want to propose conducting an initial stage, using a smaller amount of the treasury as a test case (~5-20%).

This allows for the community and the operators to implement the Endaoment in practice and iron out any issues without risking 80%+ of the treasury. If successful, the community can vote to allocate more funds in the future.

Another point worth noting is the voting policy of the rank choice voting, although Nick wrote a full explainer here, this type of brand new vote policy is naturally more complex than previous votes and the 1st, 2nd, 3rd rank elimination isnā€™t easy to understand (thus the graphics and post being needed). Introducing a different style vote system on such an important vote is another final reason why we will be voting ā€˜none of the aboveā€™

Overall the time and energy from the entire ENS community that has gone on here is an incredible testament to the decentralisation and success of the ENS DAO, however in our opinion conducting a more purposeful first step makes more sense.

3 Likes

Can you expand on your reasoning behind the ranking of the other candidates after None of the Above?

The original RFP did not provide for a vote on finalists; the stewards decided to offer the DAO a choice because there were multiple good candidates.

I think your own vote is a perfect illustration of the value of ranked-choice voting: Your own choice of None of the Above seems unlikely to win at the moment. If we were using single-choice voting, you would have to choose between voting your conviction and voting strategically by picking the manager you think will be least bad.

With RCV, you can vote your conviction first, and rank the remaining candidates in the order you believe would be least-bad for the DAO.

1 Like

An update subsequent to Fireeyesā€™ vote:

Has anybody suggested to invest in IRL land / realestate ??

We could probably afford to buy several developing cou tires with the current treasury poolā€¦

:thinking::desert_island:

Hey guys, Im Artsychoke, one of the 4 Treasury Council subDAO members of the SynthetixDAO. I have been following this debate closely, and have reviewed the offering of each of the participants. Nice to see such debate.

Personally, the issue that I had with Enzyme was that all vaults took too long to be deployed and audited and in the '21 yield opportunity times, it was easier to write your own safe module to automate or permission Treasury tasks.

On the overall discussion, I tend to agree with Karpatkey, and would vote for him as an ENS holder. Dealing with DeFi Treasuries via vote has proven to be clumsy and inefficient by multiple DAOs. The risks out there are dynamic and needs change all the time.

An exampled lived by the Synthetix Treasury Council with the credit crunch that Maple Finance suffered (no funds were lost, fortunately). Lenders there would have to trigger a cool-down period to open a 48 hr window of withdrawal where users would compete for withdrawals whenever borrowers paid. Trying to execute transactions on a multisig was impossible as bots would always execute before. This was a unique situation and had to be addressed writing a custom safe module whitelisting a withdraw function and a keeper to trigger the tx upon deposits. A DAO vote would have not cut it, and tool providers would have not have one ready.

Things I believe Karpatkey does better than competitors, and makes them stand out in this ever changing enviroment is that they manage to:

  1. Maintain non-custodial setup
  2. Not sacrifice as much flexibility for Dynamic
  3. Minimizes governance dependence
  4. A technical team that can write Safe modules
  5. Proven track record

Inside the Treasury Council, we handle things in a similar manner, with all members focusing on different areas (risk, dev, budgeting, etc) and trying to maintain flexibility while remaining non custodial.

Iā€™d recommend Karpatkey for ENS voters.

4 Likes

Another major shakeup as @superphizā€™s vote pushes Avantgarde into the lead:

1 Like

My main concern is lending DAO funds to the same type of organisations that created the current market meltdown. Itā€™s a matter of principles: weā€™re leading an on-chain movement, and we reject off-chain black boxes.
The ā€œreal world economyā€ is not crypto hedge funds.

We evaluated this feature when considering using Enzyme for our solution and discarded it immediately. This is the typical tool looking for a problem.
If you operate as a whale, you quickly realise that slippage is a variable defined by a liquidity you cannot control. In an emergency event, not being able to act due to a self-imposed restriction can be very costly.

@Griff has weighed in, swinging the needle back to Karpatkeyā€¦ for now.

Terra was on-chain. Its not just a matter of on-chain or off-chain. Thats too simplistic an analysis. The guys who are causing the melt-down now are the guys who didnā€™t underwrite the risk properly. One of the biggest contributors to this cascade was Terra which was all on chain. If you look at Maple, they clearly underwrote their risks intelligently and with discipline (they recalled most loans before things fell apart).

Goldfinch meanwhile, doesnā€™t lend to any hedge funds. Itā€™s an amazing example of a protocol accelerates the idea of financial inclusion in emerging markets with an excellent track record and some really good local partners. We think this is a great example of what blockchain can do to empower people.

If you operate as a whale, you quickly realise that slippage is a variable defined by a liquidity you cannot control. In an emergency event, not being able to act due to a self-imposed restriction can be very costly.

The policy is easily over-ridable by the Safe signers (ENS stewards). Itā€™s also optional at the vault configuration stage. That post was not intended to be forced on you but to show-case a simple example which illustrates the architectural differences.

2 Likes