Ampleforth Network Durability

This entry expands on the motivation, design, and performance of the Ampleforth protocol under live market conditions. (Working Draft October 2021: Evan K., Manny R., Nithin K.).

Ampleforth Network DurabilityThis entry expands on the motivation, design, and performance of the Ampleforth protocol under live market conditions. (Working Draft October 2021: Evan K., Manny R., Nithin K.).


Since its launch in 2009, Bitcoin has proved to be a resilient, censorship-resistant asset. Like gold and many other physical commodities, Bitcoin does not rely on underlying collateral or any central authority to maintain its state of distribution. However, also like gold, Bitcoin experiences unit-price volatility and deflation, which undermines its use as a unit of account. One solution is to separate an asset’s float volatility, which can be fat-tailed and unbounded, from that asset’s unit price volatility, which can be mean-reverting. Launched in 2019, the Ampleforth protocol has shown that this is possible and sustainable through extreme market conditions.AMPL is a fully-algorithmic unit of account developed on the Ethereum blockchain. Its protocol transfers the volatility of demand from price per token to the number of tokens in user wallets by automatically adjusting supply in response to its volume-weighted-average price exchange rate.Holders of AMPL experience the high float volatility that characterizes all digital assets. Between July 2020 and October 2021 the market cap of AMPL expanded by a maximum of 84,736% from trough to peak and contracted by a maximum of 93%. However, contracts denominated in AMPL have remained relatively stable in value through both secular increases and decreases in demand over the same period. The price of AMPL has oscillated around $1.00, and remains within 20% of that target 70% of the time.AMPL has additional dependencies which make it less resilient than BTC. Specifically, the Ampleforth protocol requires the existence of well-functioning exchange markets between AMPL and other assets. While the existence of these markets in 2017 and 2018 was not assured, it is clear today that these markets are here to stay. By separating its stock volatility from its unit volatility, AMPL allows the denomination of long-term on-chain contracts and the creation of fully-decentralized crypto-backed derivatives.

1. Rebasing Policy

The Ampleforth Protocol targets the CPI adjusted 2019 US dollar and automatically expands or contracts the quantity of tokens in user wallets based on price. When the price_exchange_rate of AMPL > 1 2019 USD the quantity of tokens in user wallets proportionally increases. When the price_exchange_rate of AMPL is < 1 2019 USD the quantity of tokens in user wallets proportionally decreases.

  • Supply adjustments, termed "rebases", are applied by updating a global scalar coefficient of expansion every day at 2AM UTC . This adjustment is applied universally to all addresses and doesn't require any transaction between peers.

  • Rebases only adjust supply if the price of AMPL deviates from its target by > the deviation_threshold. This threshold is set by an adjustable hyper-parameter and is currently set at 5%. To see the network's current volume-weight-average (VWAP) price, visit the dashboard.

  • Rebases are smoothed by a reaction_lag parameter. If the price of AMPL is X% above the target, the policy adjusts supply by (X%/reaction_lag). This parameter is currently set to 10.

  • The Ampleforth protocol's supply changes are proportional and non-dilutive. If a user owns Y% of the network before a rebase, the user will always own Y% of the network unless the user buys or sells more AMPL.

For more detailed information about the Ampleforth protocol and policy see the Developer Docs or visit the Ampleforth community Discord server.

2. Separating Price and Stock Volatility

Price and stock volatility are often conflated, and for good reason. Most assets have an inelastic number of units in their float. As a result, changes in their unit value produces exactly proportional changes in their float value. Looking at Facebook's stock as an example, if the stock price of a Facebook share were to increase by 10% its market cap would correspondingly increase by 10%. The same is generally true of currencies. Ampleforth's elastic supply policy, however, deliberately counteracts this. Recall that when the volume-weighted-average unit price of AMPL trades above the protocol's price target, the stock of AMPL increases proportionally until price is restored to its equilibrium band and vice-versa. Below, we show that the Ampleforth rebasing policy produces a unit price distribution that is structurally different from the network's stock distribution. Notably, AMPL's price volatility distribution reverts to its mean target price, while AMPL's stock volatility remains fat-tailed.

2.1. Price Volatility Distribution

Here, we present the distribution of time spent across AMPL price deviations from its target from (December 2019 to October 2021). Although there is no theoretical upper bound to price, the pattern demonstrates a clear average around the Ampleforth protocol's price target.

2.2. Stock Volatility Distribution

Here we present AMPL's supply series over the same period (December 2019 - October 2021). It can be seen below that, like a typical floating price token, AMPL's supply series (blue) shows no clear long-run average, while it's price series (red) hovers around a target price.

Finally we present the distribution of AMPL's supply changes over time. The distribution takes as its inputs, rolling relative monthly supply changes. Below, it can be seen that the distribution is asymmetric and fat-tailed, as is common for equities and floating price cryptocurrencies.

2.3. General Comments

The Ampleforth protocol's supply adjustments serve as an outflow for extreme swings in demand, allowing AMPL's unit price to remain stable in the long-run. For this reason, contracts denominated in AMPL remain similarly stable, even in the face of extreme market conditions where other approaches are likely to require discretionary intervention or fail outright.

3. Alternative Approaches

The inevitable regulation of centralized stablecoins—and the rapid growth of decentralized finance platforms that rely on them—has underscored the need for a decentralized unit of account. To that end, many attempts have been made to produce decentralized stablecoins. However few efforts, outside of AMPL, have elected to isolate this goal of creating a durable unit-of-account from broader attempts to store near-term value. The key to AMPL's durability is that it returns to a stable price by transferring the volatility of demand to supply, rather than attempting to eliminate volatility. Systems that have attempted to remove volatility altogether have thus far materialized as solutions that are either highly censorable or highly unreliable.The vast majority of alternatives fall under: coupon-based, crypto-collateralized, and fractionally-collateralized approaches. Although exhaustive commentary on alternative systems is beyond the scope of this document, we cover these three major categories below.

3.1. Coupon Based "Bond Token" Approaches

"Coupon coins” peg their exchange rates by minting coins when their price is above the peg and issuing interest-bearing coupons. Although these coupons are often referred to in project whitepapers as "bonds," they more closely resemble binary options that are paid off—if and when a network needs to expand beyond its former all-time-high market cap in the future—or not at all. Examples of this approach include Basis, BasisCash, Elastic Set Dollar, and FEI—all of which have suffered major collapses.Although these approaches, like AMPL, are fully algorithmic and do not rely on centralized collateral; unlike AMPL they cannot survive secular decreases in demand. The key issue here is that these systems cannot force a permanent reduction in supply. Once demand growth flatlines after a correction the protocols create and magnify instability.

3.2. "Crypto-Collateralized" Approaches

Although more promising than coupon-coins in theory, crypto-collateralized systems are vulnerable to the volatility of underlying collateral. Most famously, DAI suffered a massive collapse on Black Thursday when cryptocurrencies like ETH suffered rapid price declines. In an emergency governance response, the protocol added USDC as collateral which now represents ~60% of their collateral pool.A key problem here is the use and reliance on fixed collateralization ratios. When such collateralization ratios are held constant, the risk of liquidation is pushed off to market participants in a manner that cannot be priced. So long as the network is over-collateralized, stablecoins like DAI can maintain their price, but as a result it becomes the role of outside markets to take on the black-swan risk of a price collapse in the underlying collateral assets, and this type of risk is impossible to price. Many of these problems go away if the underlying collateral asset is stable, as is the case with USDC, but introducing traditional assets trades market risks for custodial and regulatory risks.An alternative method of risk stratification has been developed by that transparently re-segments the risk of underlying cryptocurrencies into tranches on-chain. Such derivatives can eventually be used to produce on-chain safe-assets that serve as an alternative collateral to USDC; and could therefore be used to salvage crypto-collateralized systems. But efforts on this front are still in the early stages of development.

3.3. "Fractionally-Collateralized" Approaches

Fractionally collateralized systems promise less than 100% collateralization, noting that in traditional finance we typically use capital more efficiently. All else being equal, this provides less buffer for collateral collapse than over-collateralized systems, placing more reliance on centralized collateral like USDC. Innovations in on-chain safe-asset collateral are necessary for advancing these approaches.

4. Applications Now and Looking Forward

The decentralized finance movement aims to create an alternative financial ecosystem that is open-source, borderless, and resistant to political tampering. AMPL enables the denomination of stable on-chain contracts without any reliance on centralized custodians or buyers of last resort. This capability propagates into a number of use cases including on-chain lending, on-chain borrowing, and the creation of on-chain derivatives.

4.1. Decentralized Debt Denomination

The simplest AMPL use case is decentralized debt denomination. Typically when a person borrows money they intend to put that money to work immediately and then pay it back later with interest. However, when a loan contract is denominated with a floating price currency like ETH, the borrower has to factor in the price volatility of ETH. To illustrate we can follow a simple example:

  • 4.1.1. ETH Denominated Loan Example - Imagine Alice borrows 1 ETH, valued at $1000/ETH, to be paid back at a later date. If Alice sells the ETH to put $1000 to work and the price of ETH increases to $3000/ETH, she will need to spend $3000 to acquire the ETH in order to pay back her loan.

Because loans denominated in price-volatile currencies are so risky, the majority of borrowing activity on decentralized lending platforms is unfortunately denominated with centralized stablecoins. AMPL eliminates this dependency and enables sustainable lending and borrowing on decentralized lending platforms.

  • 4.1.2 AMPL Denominated Loan Example - Imagine Bob borrows 1000 AMPL to be paid back at a later date. If Bob sells the AMPL to put $1000 to work, he can be reasonably certain that the cost of re-purchasing the AMPL to pay back her loan will be reasonably stable in the long-run due to AMPL's mean-reverting price, even if the AMPL network profoundly increases or decreases in size.

Although AMPL holders experience the same kind of fat-tailed stock volatility expected of floating-price tokens like ETH, contracts denominated in AMPL remain long-run stable, as is the case with Bob's loan example above. AMPL is currently available as a lend and borrow asset on AAVE.

4.2. Decentralized Derivatives

Derivatives are a special type of financial contract whose value depends on an underlying asset. Such contracts require a unit of account for denomination and AMPL similarly enables the creation of on-chain derivatives. To help illustrate this, let's explore a simple example: ‌

  • 4.2.1 AMPL Derivative Example — Imagine Bob wants to split the stock-volatility of AMPL into two derivative tranches, a senior (low-risk) tranche and a junior (high-risk) tranche. Bob can author a simple smart contract that accepts a redeemable AMPL deposit, and attributes 1/10 of all future supply changes to the senior tranche token while attributing 9/10 of all future supply changes to the junior tranche token. At the time of maturity senior tranches are first in line to redeem followed by junior tranches second.

Bob will have created a senior derivative token that is considerably less volatile than the underlying AMPL and a junior derivative token that is considerably more volatile, without any added oracle risk. Please see to follow on-going progress on this.

4.3. Decentralized "Safe-Asset" Collateral

Following from the concept of on-chain derivatives above, correctly configured safe-asset (senior) tranches can be used as transparent and robust collateral by the issuer of a crypto-collateralized stablecoin. ‌Because the tranche ratios of the respective derivatives are pre-defined and redeemable, the volatility tolerance of a senior tranche token can be clearly defined (ie: it can be initialized such that the safe-asset derivative can tolerate an X% fall in demand). This sort of redeemable on-chain derivative does not require liquidation markets and introduces no additional oracle risk. ‌A breakthrough in safe-asset collateral would allow crypto-collateralized stablecoins to reduce their reliance on tokens backed by traditional assets (like USDC) as collateral, making them more decentralized.

5. Oracle Risks

To execute its automatic supply policy, the Ampleforth protocol accepts a volumed-weighted-average price exchange-rate through a network of Oracles. Although attacks on this Oracle network can temporarily corrupt the inputs to Ampleforth's supply policy, in theory, great care has been taken to negate the impact of Oracle Attacks. Most importantly, because AMPL is non-custodial and the policy is proportional, no funds can be stolen or redistributed by an Oracle Attack. To help illustrate this, let's walk through a simple example.

5.1. Stable Transfer Application Example

Let's imagine a simple application that allows its users to send a dollar denominated amount of money from one wallet to another, we’ll call it Stable Transfer.

  • When Alice wants to transfer $100 to Bob, the Stable Transfer contract queries an oracle for the price-exchange rate of ETH to US dollars, and then it transfers an automatically calculated quantity of ETH to Bob.

Since each transfer queries an oracle to calculate an ETH amount before transferring to its receivers, oracle requests are O(n) with the number of transfers. Each of these oracle requests presents an exploit opportunity and incurs an added cost. Finally, if an attacker exploits the exchange-rate oracle, or if there’s a bug in the oracle, senders can transfer the wrong amount of money resulting in a loss of funds.

5.2 AMPL Example

Alternatively, the AMPL equivalent of the Stable Transfer application, isn’t really an application at all. Alice would simply transfer 100 AMPL to Bob and there would be no oracle query at the time of transfer. In the case of AMPL, rebases occur once daily and oracle requests are O(1) per day. More importantly, because the protocol’s supply policy is proportional and non-dilutive, oracle attacks cannot result in the theft or redistribution of assets.

6. Conclusion

As mentioned above, floating price tokens like Bitcoin experience unit-price volatility and deflation, which undermines their use as a unit of account. The Ampleforth solution transfers the volatility of demand from price to supply using a simple, transparent, and non-custodial policy. We've shown here that this policy separates AMPL's price volatility from its stock volatility, allowing AMPL's price to revert to its target through both secular increases and decreases in demand, without requiring centralized custodians, collateral, or buyers of last resort.​​

Last updated