System Stabilizer Module
Keeping the ABM Protocol Stable
- Module Name: System Stabilizer
- Type/Category: DSS —> System Stabilizer Module (Vow.sol, Flap.sol, Flop.sol)
The System Stabilizer Module's purpose is to correct the system when the value of the collateral backing dotBTC drops below the liquidation level (determined by governance) when the stability of the system is at risk. The system stabilizer module creates incentives for Auction Keepers (external actors) to step in and drive the system back to a safe state (system balance) by participating in both debt and surplus auctions and, in turn, earn profits by doing so.
The System Stabilizer Module has 3 core components consisting of the
Vowrepresents the overall ABM Protocol's balance (both system surplus and system debt). The purpose of the
vowis to cover deficits via debt auctions and discharge surpluses via surplus auctions.
Flopper(Debt Auction) is used to get rid of the
Vow’s debt by auctioning off ABM for a fixed amount of internal system dotBTC . When
flopauctions are kicked off, bidders compete with decreasing bids of ABM . After the auction settlement, the Flopper sends received internal dotBTC to the
Vowin order to cancel out its debt. Lastly, the Flopper mints the ABM for the winning bidder.
Flapper(Surplus Auction) is used to get rid of the
Vow’s surplus by auctioning off a fixed amount of internal dotBTC for ABM. When
flapauctions are kicked off, bidders compete with increasing amounts of ABM. After auction settlement, the Flapper burns the winning ABM bid and sends internal dotBTC to the winning bidder.
When the ABM Protocol receives system debt and system surplus through collateral auctions and CDP stability fee accumulation, it will deviate from system equilibrium. The job of the Vow is to bring it back to system equilibrium.
The Priority of the Vow
- 1.To kick-off debt and surplus auctions (Flop and Flap), which in turn, corrects the system’s imbalances.
The purpose of debt auctions is to cover the system deficit, which is resembled by
Sin(the total debt in the queue). It sells an amount of minted ABM and purchases dotBTC that will be canceled 1-to-1 with
The Priorities of the Flopper:
- 1.To raise an amount of dotBTC equivalent to the amount of bad debt as fast as possible.
- 2.To minimize the amount of ABM inflation.
The purpose of the surplus auctions is to release dotBTC surplus from the
Vowwhile users bid with ABM, which will be burned, thus reducing the overall ABM supply. It will sell a fixed amount of dotBTC to purchase and burn ABM.
The Priority of the Flapper:
- 1.To mechanically reduce the ABM supply when auctioning off dotBTC surplus.
In the context of running an Auction Keeper to perform bids within an auction, a primary failure mode would occur when a Keeper specifies an unprofitable price for ABM
- This failure mode is due to the fact that there is nothing the system can do to stop a user from paying significantly more than the fair market value for the token in an auction (this goes for all auction types,
- Keepers that are performing badly are primarily at risk during the
dentphase since they could return too much collateral to the original CDP and end up overpaying (i.e. pay too much dotBTC (
bid) for too few gems (
- Note: This does not apply to the Flap contract (Flop and Flip only)
When no Auction Keepers Bid:
- For both the
tickfunction will restart an auction if there have been 0 bids and the original
- In the case of a
Flopauction expiring without receiving any bids, anyone can restart the auction by calling
tick. Along with restarting the auction, it also includes a necessary increase of the initial
pad(default to 50%). This extra process is because the lack of bidding for the
lotcould be due market circumstances, where the
lotvalue is too low and is no longer enough for recovering the
- If too high, it would discourage bidding and create a less efficient auction mechanism.
- If too low, it would not be that significant but would encourage small bids and increase the likelihood of the
Bid.endbeing hit before the "true" price was found.
- If too high, it would cause the winning bidder to wait "too long" to collect their winnings (depending on the situation, possibly subjecting them to market volatility).
- If too low, it would increase the likelihood of bids expiring before other bidders get a chance to respond.
- If too high, it would not have that significant of an impact as auctions would still operate normally based on the
- If too low, it would increase the chance that an auction will end before the "true" price was found.
Potential Issues around Network Congestion
When auctioning off collateral tokens, bids are finalized after an interval of time (
ttl) has passed. Hence, in the case when extreme network congestion occurs,
ttland auctions are affected because they can take longer than three hours to confirm a transaction. Therefore, due to Ethereum network congestion, this can result in auctions settling for less than the fair market value. Due to this potential issue, bidders need to calculate network congestion risks when making bids.
When high network congestion occurs, where common APIs can be shut down due to denial of service (DoS), and where high gas prices are present, this can result in bidding becoming extremely expensive regardless of whether bids win or not. Unfortunately, this also results in only enabling those who have the experience and technical knowledge to build their own transactions are able to use and participate in auctions. Therefore, auctions thus settle for less than the fair market value.
Transaction-reordering / Front Running Attacks on Auctions
Front running attacks are possible. In order to mitigate this possibility, we reviewed and evaluated other auction options such as dutch and/or commit reveal but do not currently feel this change is worth delaying the whole system for. Due to the modular nature of the system and the fact that the auction modules can be swapped out, it will be possible for governance to upgrade the auction process in the future.