Trust and safety
Who can change what
Different roles have different powers. None of them can take your prize.
Roles#
| Role | What it can do |
|---|---|
| Owner | Change settings for future rounds. Unpause after a pause. |
| Guardian | Pause new purchases and deposits. It can’t unpause. |
| Treasury roles | Move pool money to the approved outside vault and back. |
| Settlement operator | Report results early, if turned on. Claims still need proofs. |
| Anyone | Submit valid proofs and run public steps when the rules allow. |
No role can take a prize someone has won, or change who owns a line.
Waiting period#
At launch, owner changes wait 48 hours in a timelock before they take effect. That includes new settings, admitting a new Backer and raising the deposit limit. The owner itself is a Safe, a wallet that needs several signers.
This is the launch plan, not something already live on the test network. Check the deployed owner, signers, roles and delay.
For developers
The plan uses an operations Safe and a TimelockController. The contracts aren’t upgradeable proxies, but the owner’s setters still carry real power. Review the owner, proposers and executors, guardian, treasury route, verifier and settlement operator.
Pausing#
A pause stops new lines and new deposits. Lines, prizes and withdrawal rights all stay. A pause doesn’t skip any waiting period or pay out money that isn’t there.
For developers
setFrozen(true): owner or guardian. setFrozen(false): owner-only. A pause blocks buyRandom, buyChosen and deposit. Withdrawal requests, withdrawals, claims, proofs, settlement, capital export and capital return keep their normal checks.
What anyone can do#
Anyone can submit a valid proof or run a public step when the contracts allow it. That never lets them take someone’s prize, change ownership or move pool money.
For developers
Queue work, valid proofs, due number requests, verified settlement and claim-tree publishing are open to anyone. reportSettlement is settlementOperator-only. returnCapital is treasurer or treasury only. EarnVault.repay is operator or owner only.