🛡️Securing the protocol

The Multi-sig group members are able to pause/unpause protocol-wide or collateral level in critical condition.

Emergency Pausing

Pausing in WEN protocol is designed to halt all operations except those which allow collateral recovery by the user. This mechanism is designed to maximize safety while at the same time reduce collateral from being stuck due to unforeseen bugs in an immutable protocol.

This also increases users' confidence that anyone cannot unduly lock their capital.

Protocol wide

In the unlikely event of a protocol wide catastrophic issue, these functions can be paused by a multi-sig controlled by a set of notable DeFi figures:

• Opening a new vault

• Increase collateral for an existing vault

• Increase debt for an existing vault

• Deposit wenUSD into the Stability Pool

Collateral level

If there are urgent problems with a specific collateral, the guardian multi-sig can pause the Account Manager relative to that collateral. In this case, pausing will affect the following functions:

• Opening a new vault

• Increase collateral for an existing vault

• Increase debt for an existing vault

Unpausing

Unpausing both protocol-wide and at the collateral level can only be enacted via governance.

Modifying protocol fee receiver

All protocol fees are directed to an address labeled fee receiver. The initial fee receiver implementation is a multi-sig address. It is also possible for governance to vote to change the fee receiver address.

Changing collateral price feed oracle

In the interest of future-proofing, governance can vote to replace the protocol price feed.

Replacing default Account Manager and Sorted Troves implementations

Whenever a new collateral is added, an Account Manager and a Sorted Troves contract are deployed as a clone of a default implementation.

Governance has the power to change said default implementations.