Admin Privileges
The OUSD smart contracts are designed to be owner upgradable. The Origin team uses two different Gnosis multisig wallet contracts in order to make changes to the protocol. These multisig wallets have been audited by OpenZeppelin, ConsenSys Dilligence, Origin’s team, and others.
Time-delayed admin actions gives users a chance to exit OUSD if its admins become malicious, are compromised, or make a change that the users do not like.
The primary admin is a 5 of 8 multisig contract which is required to make any code changes to the protocol. OUSD can only be upgraded from this 5 of 8 multi-sig wallet. The keys to this multi-sig are held by individuals with close ties to the company, and not even the Origin founders acting together have enough control to execute owner functions on their own. In addition, the OUSD contracts are owned by a timelock which places a 48 hour time delay before any changes to the protocol can be made.
Some functionality, such as rebalancing funds between strategies or pausing deposits, can be triggered without the timelock and with far fewer signers. This allows the Origin team to react more quickly to market conditions or security threats. These signers, known as Strategists, have the ability to execute a limited number of functions with only 2 of 9 signers.
The strategist multisig can do the following actions on the vault:
- reallocate - move funds between strategies
- setVaultBuffer - adjust the amount of funds held outside strategies for cheaper redeems.
- setAssetDefaultStrategy - which strategy mints and redeems pull from for a particular strategy
- withdrawAllFromStrategy - remove funds from a single strategy and send them to the vault
- withdrawAllFromStrategies - remove funds from all active strategies and send them to the vault
- pauseRebase - pause all rebases
- pauseCapital - pause all mints and redeems
- unpauseCapital - allow all mints and redeems
Having these admin privileges is necessary in the early days to ensure that the protocol is secure and optimized for earning yields while minimizing risks. We expect to release multiple iterations of our smart contracts in the first several months of the protocol's existence.
Once several upgrade cycles have been completed, we intend to transfer ownership from our company control to a decentralized governance contract, thereby allowing the community to vote and participate in future protocol updates.
Last modified 8mo ago