Links
Comment on page
🔱

Oracles

Giving the protocol access to price feeds

🔎 TL;DR

  • Angle combines Uniswap V3 Time Weighted Average Price (TWAP) using a 10 minutes time window with Chainlink oracles to provide price feeds for each collateral/stablecoin pair.
  • If Uniswap's value differs from that of Chainlink, the protocol chooses the value which is most at its advantage.
  • Angle Core Module may be paused for the 2 blocks following each oracle update to allow whitelisted arbitrageurs to arb agEUR and share profits with the protocol

🔮 Angle's Need for Oracles

Angle Protocol lets people swap their collateral against the protocol's native stablecoins (minting). It also allows Hedging Agents to take leveraged long positions through perpetual futures on a collateral/stablecoin pair. The protocol needs to be able to access price feeds for all the supported collateral/stablecoin pairs: it does so using oracles.

🎨 Angle's Oracle Design

Angle uses a combination of Chainlink and Uniswap V3 TWAP oracles with a 10 minutes time window. Whenever there is a need for an oracle value, the protocol chooses between the output of the Uniswap feed and the Chainlink feed that is most at the advantage of the protocol.
For instance, for a mint transaction using collateral, Angle keeps the lowest value between Chainlink and Uniswap. But for a burn transaction, the protocol keeps the highest one. If Uniswap's feed price for 1 wETH is 1000€ and if Chainlink's feed price is 990 €. Then, a user could get 990 agEUR with 1 wETH, and 1 wETH from 1000 agEUR.
For some pairs, there may not be the direct feeds on Chainlink or pools on Uniswap to compute the price. The protocol should thus work with circuits of pairs to decompose the computation of the price: ETH/USD and then USD/EUR for a ETH/EUR feed.
On Uniswap, Angle always considers that 1 USDC is worth 1 USD.
For some pairs, Uniswap V3 pools may not be sufficient. For instance, for a wETH/EUR pair, there may not be a Uniswap V3 pool allowing to get the price of wETH versus EUR (even in an indirect way using a circuit of pools). To this extent, the protocol may have to use a combination of a Uniswap and a Chainlink feeds to get the price of wETH vs. EUR.
In this case, the protocol uses an only-Chainlink feed (wETH/USD then USD/EUR) and a feed made up of Uniswap for the part wETH/USD and Chainlink for the part USD/EUR, compares both feeds and chooses the one that is most at its advantage.

🚁 Preventing Front-Running

Given that Angle lets people swap their collateral against stablecoins with no slippage, and given onchain oracle latency (especially Chainlink), there can be a front-running risk.
If, at a point in time, the onchain price for wETH is 1000€, but the real market price (which is the future onchain price) is 1100€, then people have incentives to use EUR stablecoins to get wETH at the price of 1 wETH for 1000 EUR stablecoins onchain, and then wait for the onchain oracle price to be updated to sell instantly the wETH at a higher price. By doing so, the person takes advantage of the discrepancy in price and frontruns the protocol, draining some of the collateral of the protocol and making risk-free profit.
This oracle latency is the cause of front-running risk Angle is subject to. Using a combination of Uniswap V3 time-weighted average price and Chainlink, along with transaction fees allows to mitigate this risk.
Uniswap V3 active price oracles are difficult to technically front run, as you would have to front run an active market, and as a result do not expose clean, “pure profit” front running opportunities akin to those based on oracle latency. Furthermore, they have been carefully constructed to be resilient to manipulation from both flashloans and longer-window attacks. Nevertheless, TWAP allow front run in period of high volatility as they take more time to tend to the offchain price.
The fact that both Uniswap and Chainlink oracles are used allows to take a spread from the real market price that gets bigger when there are important price deviations and Chainlink values are lagging. Uniswap V3 prices are time-weighted average prices, meaning it places less emphasis on newer observations, and thus mitigates the impact of important price changes, making it less reactive to important changes in price.
A high spread between Chainlink and Uniswap value is equivalent to taking more important transaction fees. This is likely to happen in case of high volatility of the collateral, and thus in situations where frontrunning risk is higher.

Automatic Pausing and agEUR Arbitrage Profit Sharing

On a similar note to front-running, since agEUR can be minted at oracle value, after each oracle update, the value of agEUR through the Core module may not be the same as its value on other liquidity pools: Angle may be right, but it is wrong with respect to others. This opens the protocol to some arbitrages which can lose funds out of this.
If at t0, 1 agEUR = 1 USDC, both on Chainlink and on a Uniswap V3 agEUR-USDC pool. At t1, Chainlink updates its oracle price and the Core Module considers that 1 agEUR = 1.01 USDC. At this point, there is a moment when the Uniswap V3 pool is still priced at 1 agEUR = 1 USDC and the following arbitrage opportunity is available: 1 agEUR → 1.01 USDC (Core module), 1.01 USDC → 1.01 agEUR (Uniswap pool) resulting in a 1% profit.
The Core Module implements a solution to mitigate this issue: it consists in restricting access to the Core module (mint and burn) to only certain whitelisted addresses during the two blocks (24s) that follow an oracle update. This essentially “offers” these whitelisted addresses the arbitrage opportunity, in return for a share of their profits to be redirected to the protocol.
In practice, oracle contracts of the Core module are paused for the two blocks that follow each update of the EURUSD feed, unless the transaction origin is a whitelisted address. A DAO-controlled registry contract is responsible for containing the whitelist.
For more details on this MEV-mitigation solution at the oracle level, check out this article.

✊ Flash Loans Resistance

The oracle values taken by Angle Core Module are not manipulable within a block. UniswapV3 TWAP are constant in a given block, and Chainlink values, given the decentralized nature of the system, cannot be manipulated. To this extent, it is impossible with a flash loan, in a single block, to manipulate the price and make profits using Angle.