mirror of
https://github.com/lux-apps/papers.git
synced 2026-10-30 18:15:21 +00:00
zeekayandHanzo Dev
cf44d44756
ADOPT-00 through ADOPT-10, the 18-page omnibus, the decentralization rubric, the whitepaper and the LOI — every paper written for the Morpheus engagement, with the shared cover and proposal styles, versioned here beside the LP series. Co-authored-by: Hanzo Dev <[email protected]>
82 lines
4.5 KiB
TeX
82 lines
4.5 KiB
TeX
\documentclass[11pt,a4paper]{article}
|
|
\usepackage{../shared/luxcover}
|
|
\usepackage{../shared/proposal}
|
|
\usepackage[utf8]{inputenc}\usepackage[T1]{fontenc}
|
|
\usepackage{amsmath,amssymb}
|
|
\usepackage{listings}\usepackage{xcolor}
|
|
\input{../shared/lstlang}
|
|
|
|
\newcommand{\code}[1]{\texttt{\small #1}}
|
|
\newcommand{\pv}[1]{{\color{muted}\sffamily\scriptsize[#1]}}
|
|
|
|
\title{Real Governance}
|
|
\author{Zach Kelling\\\textit{Lux Industries, Inc.}\\\texttt{[email protected]}}
|
|
\date{2026}
|
|
|
|
\begin{document}
|
|
\luxcoverpage
|
|
\sloppy
|
|
|
|
\noindent{\color{muted}\footnotesize\sffamily ADOPT-03 \quad\textbullet\quad Hanzo AI \& Lux Industries \quad\textbullet\quad 2026}\par
|
|
\vspace{0.8ex}
|
|
\noindent{\LARGE\bfseries Real Governance}\par
|
|
\vspace{0.7ex}
|
|
\noindent{\color{rule}\rule{\linewidth}{1.1pt}}\par
|
|
\vspace{1.0ex}
|
|
|
|
\noindent About \$20M in user stETH \pv{verified: DefiLlama TVL} sits behind one anonymous 5-of-9
|
|
Safe. The Safe can move it in one transaction, with no delay and no vote.
|
|
|
|
\vspace{1.0ex}
|
|
\noindent\textbf{The problem, in Morpheus numbers.}
|
|
The owner is a 5-of-9 Gnosis Safe, \code{0x1FE0}\dots\code{eBa1E} \pv{verified: on-chain}. It owns the
|
|
Base compute diamond \code{0x6aBE}\dots\code{030a} \pv{verified: on-chain} and the capital contracts on
|
|
Ethereum and Arbitrum. Three powers each reduce to one \code{onlyOwner} call.
|
|
Mint is uncapped: the owner adds itself with \code{updateMinter}, then \code{mint}
|
|
(\code{MOROFT.sol:50,61}) \pv{verified: repo}, and no supply ceiling is enforced.
|
|
Any contract holding staked funds is UUPS with \code{\_authorizeUpgrade} gated only by \code{onlyOwner}
|
|
(\code{DistributionV6.sol:776}) \pv{verified: repo}, so it can be swapped in one block.
|
|
And \code{editPool} / \code{editPoolLimits} (\code{DistributionV6.sol:102,118}) \pv{verified: repo}
|
|
rewrite the emission split that directs 76\% of issuance \pv{verified: published tokenomics}.
|
|
None of it is votable. \code{MOROFT} is a LayerZero \code{OFT}, not \code{ERC20Votes};
|
|
\code{supportsInterface} lists \code{IERC20} and \code{IOAppCore}, not \code{IVotes}
|
|
(\code{MOROFT.sol:35}) \pv{verified: repo}. The token holds no checkpoints for any governor to count.
|
|
The stETH is withdrawable 1:1 \pv{verified: repo}. This is not a solvency risk. It is an authority risk.
|
|
|
|
\vspace{0.9ex}
|
|
\noindent\textbf{The fix, named to a repo.}
|
|
Adopt \code{lux/dao}. Keep the Safe. Put it behind a timelock the token controls.
|
|
\code{ModuleGovernorV1} executes through the Safe rather than replacing it. A proposal draws vMOR
|
|
quorum and clears a timelock delay before it can run. vMOR is \code{VotesERC20StakedV1}, a
|
|
non-transferable \code{ERC20Votes} position minted by locking MOR. MOR stays the reward asset,
|
|
unchanged. \code{FreezeGuardMultisigV1} lets vMOR holders freeze a rogue Safe during and after
|
|
handoff. Lux runs this today under a 3-of-5 with the timelock path deployed alongside the Safe
|
|
\pv{verified: lux/dao/governance.md}; \code{zoo/vote} is the same stack white-labeled through one
|
|
config. A Morpheus \code{config/morpheus.json} is the third. First move: Lux deploys vMOR, the
|
|
timelock and \code{ModuleGovernorV1}; a core contributor, under the existing 5-of-9, transfers
|
|
\code{owner()} of \code{MOROFT}, \code{DistributionV6}, the builder contracts and the Base diamond to
|
|
the timelock. From that block, every mint, upgrade and pool edit is propose, vote, delay, execute.
|
|
Bid discovery and settlement are untouched.
|
|
|
|
\vspace{0.9ex}
|
|
\noindent\textbf{The outcome, quantified.}
|
|
The \$20M \pv{verified} moves from one instant signature to a public, timelocked, votable process.
|
|
Best case, assuming a 48-hour timelock and quorum at 4\% of locked MOR, the parameters Lux runs in
|
|
production \pv{illustrative: stated parameters}: a malicious or mistaken change is visible for two
|
|
days before it can execute, where today the window is zero, and no privileged action passes without
|
|
a holder vote on-chain. MOR becomes credibly decentralized. That is the precondition a raise clears
|
|
first: authority sits with locked holders behind a delay, verifiable, not with an unelected multisig.
|
|
The one real failure mode is thin participation. If holders do not lock, the quorum binds nothing;
|
|
that risk is named, not solved.
|
|
|
|
\vspace{0.9ex}
|
|
\noindent\textbf{Why Lux.} Lux and Zoo already run this exact stack in production under two brands,
|
|
so Morpheus is a third config and a set of \code{transferOwnership} calls, not a new system to build
|
|
or audit from zero.
|
|
|
|
\vspace{0.8ex}
|
|
\noindent{\color{muted}\sffamily\footnotesize ADOPT-03. Companion LP-318 (key custody, separate from
|
|
governance authority). \; \textbullet\; \texttt{[email protected]}}
|
|
|
|
\end{document}
|