EIP5 - Add Guardian Pausing

Authors

@kbrizzle (Equilibria)

Motivation

Currently, the Empty Set governor is the only mechanism by which privileged actions can be taken. This is the most secure and strict setup, however it does not provide the flexibility for swift actions during security incidents.

Other protocols solve this dilemma by introducing a separate protocol role with limited pausing privileges.

Overview

We propose adding a pauser role to the Empty Set protocol alongside the original owner role. This pauser role will be set by the owner role and have limited privileges to pause and unpause all state-mutating methods within the protocol.

Permissions Breakdown

pauser

  • Update paused status

owner (GovernorAlpha)

  • Update or revoke pauser address
  • Update or remove pausing functionality altogether

Implementation

The implementation of the change can be viewed here.

Operation

Since the protocol multisig already has guardian powers per the GovernorAlpha contract, we propose this multisig as the initial pauser.

Vote

The vote will take place on the governance page of the Empty Set webapp.

1 Like

This EIP has been proposed. Follow its status here