Security

Using the Access Control Manager, functions can be restricted to specific addresses, such as a timelock, a multisig safe, or a standard address.

Enclabs Finance utilizes three distinct timelocks for various actions: critical, fast-track, and normal, each with specific, granular roles.

As of now, all high-security functions (e.g., market collateral factor changes) and proxy admin controls (e.g., contract upgradability) are protected by the normal timelock (address: 0xb068519C3340224c42008c99eceF08d4ad479Fe4), which enforces a 48-hour delay.

However, since the protocol is in its early stages and we anticipate deploying new isolated markets, certain non-critical permissions (e.g. supply caps changes) remain temporarily assigned to the deployer. These permissions will be transferred to the appropriate timelocks in the coming days.

Currently, the deployer address holds ownership of the timelock, but this will transition to a multisig wallet once all processes are finalized.

At Enclabs, we prioritize security above all else. If you identify any vulnerabilities or issues in our roles and policies, please reach out to us immediately so we can address them promptly.