SparkLend Freezer

Overview

This repo contains five contracts:

src/SparkLendFreezerMom.sol

A contract that will have RISK_ADMIN_ROLE (can freeze markets) & EMERGENCY_ADMIN_ROLE (can pause markets) in SparkLend, and has four functions:

• freezeAllMarkets: Freezes all markets in SparkLend, callable by the hat in the Chief, an authorized contract (ward) or by the PauseProxy in MakerDAO.
• freezeMarket: Freezes a single market in SparkLend, callable by the hat in the Chief, an authorized contract (ward) or by the PauseProxy in MakerDAO.
• pauseAllMarkets: Pauses all markets in SparkLend, callable by the hat in the Chief, an authorized contract (ward) or by the PauseProxy in MakerDAO.
• pauseMarket: Pauses a single market in SparkLend, callable by the hat in the Chief, an authorized contract (ward) or by the PauseProxy in MakerDAO.

src/spells/EmergencySpell_SparkLend_FreezeAllAssets.sol

A spell that can be set as the hat in the Chief to freeze all markets in SparkLend by calling freezeAllMarkets(true) in SparkLendFreezerMom.

src/spells/EmergencySpell_SparkLend_FreezeSingleAsset.sol

A spell that can be set as the hat in the Chief to freeze a specific market in SparkLend by calling freezeMarket(reserve, true) in SparkLendFreezerMom. A separate spell is needed for each market, with the reserve being declared in the constructor.

src/spells/EmergencySpell_SparkLend_PauseAllAssets.sol

A spell that can be set as the hat in the Chief to pauses all markets in SparkLend by calling pauseAllMarkets(true) in SparkLendFreezerMom.

src/spells/EmergencySpell_SparkLend_PauseSingleAsset.sol

A spell that can be set as the hat in the Chief to pause a specific market in SparkLend by calling pauseMarket(reserve, true) in SparkLendFreezerMom. A separate spell is needed for each market, with the reserve being declared in the constructor.

src/spells/EmergencySpell_SparkLend_RemoveMultisig.sol

A spell that can be set as the hat in the Chief to remove a ward by calling deny(multisig) in SparkLendFreezerMom.

Expected Configuration

It is important that the code be matched to a very specific setup to ensure all assumptions are valid. In particular, it is expected that the owner will be the Spark SubDAO Proxy (0x3300f198988e4C9C63F75dF86De36421f06af8c4), the authority will be the MCD Chief (0x0a3f6849f78076aefaDf113F5BED87720274dDC0) and there will at most 1 ward that is a SAFE multisig.

This configuration is important because deny is set to only required auth parameters, so there are three ways to remove the multisig (multisig itself, remove multisig spell without GSM delay, and finally the Spark SubDAO Proxy). This ensures that MKR holders can override a decision made by the multisig (and de-auth it) without a GSM delay. Furthermore the SubDAO Proxy behind a delay can override any decision of a non-delay vote and the multisig (and de-auth both of them).

Execution Flow Diagrams

The below diagrams outlines the execution flow of freezing a single market in SparkLend for both token-based governance in MakerDAO and the emergency multisig, which will be added as a ward in the FreezerMom. The same execution flow applies to all actions, this is a single example.

Spell Execution Flow

For token-based governance to execute a freeze/pause in SparkLend, a pre-deployed spell must be voted to be the hat by MKR holders. Once that is done, any account can call execute() on the spell, which will call the FreezerMom. The FreezerMom will a permissioned account in SparkLend with the ability to both freeze and pause.

Multisig Execution Flow

For the multisig to execute a freeze/pause in SparkLend, the quorum must be reached and then the desired function can be called directly on the FreezerMom. The FreezerMom will a permissioned account in SparkLend with the ability to both freeze and pause.

Testing

To run the tests, run forge test.

---

The IP in this repository was assigned to Mars SPC Limited in respect of the MarsOne SP