Currently, the Empty Set governor is the only mechanism by which privileged actions can be taken. This is the most secure and strict setup, however it does not provide the flexibility for swift actions during security incidents.
Other protocols solve this dilemma by introducing a separate protocol role with limited pausing privileges.
We propose adding a pauser role to the Empty Set protocol alongside the original owner role. This pauser role will be set by the owner role and have limited privileges to pause and unpause all state-mutating methods within the protocol.
- Update paused status
- Update or revoke pauser address
- Update or remove pausing functionality altogether
The implementation of the change can be viewed here.
Since the protocol multisig already has guardian powers per the GovernorAlpha contract, we propose this multisig as the initial pauser.
The vote will take place on the governance page of the Empty Set webapp.