Summary
The emergency pause is a critical safety mechanism but using it incorrectly — pausing without a recovery plan or unpausing before a fix is deployed — can cause harm. Contributors and operators need documented guidance on when to pause, what to do while paused, and how to safely unpause.
Scope
- Document the conditions that warrant a pause: suspected exploit, critical bug in trade logic, abnormal treasury drain
- List the steps to take while paused: assess impact, communicate with community, prepare fix or migration
- Explain when it is safe to unpause: fix deployed and verified, or migration complete
- Add a warning that unpausing without a fix leaves the same vulnerability active
Acceptance Criteria
ETA: 12 hours
Coordinate on Telegram
Summary
The emergency pause is a critical safety mechanism but using it incorrectly — pausing without a recovery plan or unpausing before a fix is deployed — can cause harm. Contributors and operators need documented guidance on when to pause, what to do while paused, and how to safely unpause.
Scope
Acceptance Criteria
ETA: 12 hours
Coordinate on Telegram