Skip to content

Contract: Implement Timelocked Upgrade Manager with Multi-Sig Governance Override #419

Description

@EDOHWARES

Description

Build an upgrade manager contract that implements timelocks and safety overrides on target smart contracts.

Current Problem

Contracts can be upgraded immediately by the owner key, presenting significant security risks to users if private keys are compromised.

Proposed Solution

Introduce a timelocked upgrade manager contract that forces a delay and allows community multisigs to veto malicious updates.

Technical Tasks

  • Design the upgrade proposal structure containing Wasm hashes and timestamps
  • Implement execution delay enforcement logic (minimum 48-hour timelock)
  • Build cancel/veto methods restricted to governance multisig signers
  • Write event emissions detailing upgrade stage updates (Proposed, Canceled, Upgraded)

Acceptance Criteria

  • Contract upgrades fail if attempted before the timelock window expires
  • Authorized governance keys can cancel pending upgrade proposals instantly
  • Successful upgrades emit structured events tracking new Wasm hashes

Testing Requirements

  • Simulate upgrade sequences and assert timelock duration constraints

Metadata

  • Priority: High
  • Difficulty: High

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions