Skip to content

Latest commit

 

History

History
356 lines (255 loc) · 21.7 KB

emergency-shutdown.md

File metadata and controls

356 lines (255 loc) · 21.7 KB
Raw
title description parent tags slug contentType root
Emergency Shutdown Guide - MCD
Learm about the Emergency Shutdown Process of the Maker Protocol
mcd
emergency shutdown
mcd
shutdown process
emergency-shutdown-guide-mcd
guides
false

Emergency Shutdown Guide - MCD

Level: Advanced
Estimated Time: 30 min
Audience: Technical and commercial teams that hold Dai and/or own Vaults

Overview

Emergency Shutdown (ES) is a fail-safe mechanism that can be triggered in the event of a serious threat to the Maker Protocol such as, but not limited to, governance attacks, long-term market irrationality, hacks and security breaches.

ES is triggered by the MKR holders, most likely after observing the threat implication to the system and concluding that there is no other alternative to manage the threat.

This guide will help you prepare and take the proper action in case of an Emergency Shutdown in the Maker Protocol. There are steps suited for each type of user and service provider that includes the Maker Protocol products.

Learning Objectives

In this guide you will learn what steps to take according to your user profile in case of an ES event.

  • Knowledge on how the ES process will work
  • Best practices for ES for different users and partners
  • Where to find more guides on the specific emergency shutdown scenario

Pre-requisites

Sections

Introduction

The Maker Protocol dictates that the Dai Target Price is 1 US Dollar, translating to a 1:1 US Dollar soft peg of the stablecoin Dai. Emergency Shutdown is a process that can be used as a last resort to directly enforce the Target Price to holders of Dai and Vaults, and protect the Maker Protocol against attacks on its infrastructure.

Emergency shutdown stops and winds down the Maker Protocol. As long as the protocol is adequately collateralised and all debt has been removed, first Vault holders, and subsequently Dai holders will receive the net value of assets they are entitled to.

In short, it allows Dai holders to directly claim an equivalent dollar-amount of collateral using their Dai after an Emergency Shutdown processing period, as the protocol directly enforces that 1 Dai entitles you to 1 US Dollar of collateral according to the price reported by the oracles at the moment when ES is triggered. The protocol makes it possible for the user to use Dai to claim a proportional amount of protocol collateral. The amount of collateral which can be claimed is determined by the Maker Oracles at the time ES is triggered.

Overview of the shutdown process

  • The process of initiating Emergency Shutdown is controlled by MKR voters, who can trigger it by depositing MKR into the Emergency Shutdown Module.
  • Emergency Shutdown is supposed to be triggered in the case of serious emergencies, such as long-term market irrationality, hacks, or security breaches.
  • Emergency Shutdown stops and winds down the Maker Protocol while ensuring that all users, both Dai holders and Vault users, receive the net value of assets they are entitled to.
  • Vault owners have priority over Dai holders for claiming a proportional amount of underlying collateral (currently ETH and BAT). After Emergency Shutdown has been triggered, Vault owners can free excess collateral from their vaults at migrate.makerdao.com or by using command-line tools.
  • Dai holders, will need to wait for a cool down period of approximately 73 hours for the system to be settled. Once this is completed, the user will be able to, per one unit of Dai, claim a proportional amount of all underlying collateral at migrate.makerdao.com. It is worth noting that the user will not be able to choose any particular collateral type over another and will instead receive an equal distribution of supported collateral per quantity of Dai that they hold.
  • Dai holders always receive the same relative amount of collateral from the system, whether they are among the first or last people to process their claims. In other words, there is no race condition.
  • Dai holders may also sell their Dai to Keepers (if available) to avoid self-management of the different collateral types in the system.
  • Dai token remains fully functional as an ERC20 token all the time. Even though the Emergency Shutdown has been triggered, a user could transfer the token or invoke any other function in the Dai ERC20 contract.

Emergency Shutdown Process - visualized
Emergency Shutdown Process - visualized

Emergency Shutdown Scenarios

There are generally two scenarios in case of an Emergency Shutdown event.

The Shutdown Scenario is when the Emergency Shutdown has been triggered and the system is being terminated without a future plan of system redeployment. This will allow users to claim excess collateral or claim collateral from their Dai.

The Redeployment Scenario is when the system has been triggered into a shutdown event, but the MKR token holders, or a third party, have decided to redeploy the system with necessary changes to run the system again. This will allow users to open new Vaults and have a new Dai token while claiming collateral from the old system.

Emergency Shutdown Preparedness

In case of an emergency shutdown event, different MakerDAO communication channels will be alerted. Your first step is to go to these channels and update yourself with the current status.

Dai Holders

  • If your wallet has the interface to claim collateral or migrate your Dai or has a Dapp browser built into it, feel free to use it and/or head towards the migration portal for the claiming/migration process.

  • If your wallet does not support claiming of collateral or migration of Dai, withdraw your Dai to a wallet you control and head towards the migration portal for the claiming/migration process.

  • Follow communication for latest development updates

Vault Owners

  • If you are using Oasis.app to manage your vault, head to the migration portal, and follow the redemption process.
  • If you are a user of third party interfaces such as DefiSaver or InstaDapp, verify that they have built the Emergency Shutdown Interfaces. If so, use their interface to claim excess collateral or migrate to a new deployed system.
  • If not, use the migration portal if possible.
  • In case of protocol redeployment, you can open a new vault with the claimed collateral.
  • Follow communication for latest development updates

MKR Holders

Centralized Exchange or Custodial Wallet

As a service provider you have to be up to date with the latest status from MakerDAO so you have the right information to take the proper action. Follow the following channels for messaging to your users:

Procedure

  • Alert users on the current situation and provide them guidance on the right action to take. Depending on the ES scenario, shutdown or redeployment, advise them to act accordingly.

  • Give users options to withdraw their Dai/MKR from exchange or inform them that the exchange/wallet will do the emergency shutdown process for them.

  • Scenario: Shutdown:

    • Choose one of the following options:
      • Option 1: Let users withdraw DAI and MKR from the platform, and guide them to the migration portal to do the redemption process.
      • Option 2: Claim Dai equivalent in collateral on behalf of users using the migration portal
        • Choose one of the following:
          • Distribute collateral to users
            • Get withdrawal address from users for collateral types not supported on exchange
            • Or keep collateral (i.e. to sell off) and update user internal fiat balances to reflect their entitled amount.

  • Scenario: Redeployment:

    • Migrate Dai holdings to new Dai token on behalf of users using the migration portal
    • Alternatively carry out migration by interacting directly with the migration contracts using CLI tools. See this guide.
    • If applicable, migrate MKR token holdings on behalf of users using the migration portal
    • Update token address(es) in your system

Decentralised Exchange

As a decentralized exchange you can inform users with a banner about the current status of the Maker Protocol and direct them towards relevant communication channels to find out more.

Choose one of the two following options to allow your users to carry out the ES redemption process:

  • Direct them to the migration portal where they can start the claiming process for their Dai.
  • Or build an interface to do the ES process on your platform - inform your users and have them act accordingly.

Procedure

  • Scenario: Shutdown

    • Inform users to claim equivalent value of Dai in collateral on the migration portal or create an interface to do the process locally.

  • Scenario: Redeployment

    • Inform users to migrate their Dai to the new Dai (and MKR if applicable) on migration portal or create an interface to do the process on your platform.
    • Add new token(s) to the exchange.

Non-Custodial Wallet

As a non-custodial wallet make sure to follow the latest updates from MakerDAO’s communication channels and update your users accordingly. Alert users about ES and provide links for more information:

Procedure

  • Scenario: Shutdown
    • Redirect users to the migration portal to claim their Dai equivalent in collateral or create interface to do the process locally
  • Scenario: Redeployment
    • Inform users to migrate their Dai on the migration portal or create internal interface to do the process locally
    • Add featured support for new token(s)

Dapp Browsers

As a Dapp browser make sure to follow the latest updates from MakerDAO’s communication channels and update your users accordingly.

  • Follow communication for latest development updates

  • Alert users about ES and provide links (e.g. blog.makerdao.com or makerdao.com) for more information.

  • Either if it’s a system shutdown or system redeployment after ES is triggered, redirect users to the migration portal to claim collateral.

Vault Integrators

Vault integrators can be services like DefiSaver, InstaDapp or custodians like centralized exchanges that have integrated Vaults.

As a vault integrator it is very important that you have integrated with the Emergency Shutdown Services which will allow you to quickly create a reactive logic that will handle the post ES process for your users.

Custodial Vault Integrator

  • If you are a custodial service, make sure to inform your users in advance about your plan on handling the Emergency Shutdown event.

Procedure

  • Scenario: Shutdown
    • Claim users’ funds through the migration portal or by direct interaction with the migration contracts and make them available in their accounts.
  • Scenario: Redeployment
    • Migrate users’ funds to a new redeployed system using the migration portal or by interacting directly with the migration contracts.

Non-Custodial Vault Integrator

  • As a non-custodial vault integrator make sure to have integrated the emergency shutdown service which you will be able to be notified at the exact moment the shutdown has been triggered.
  • Notify your users through the interface and direct them towards the right communication channels:
  • Inform users on how they can free collateral in Vaults - if it can be done in the UI of the platform, or if the user needs to migrate their Vault to Oasis.
  • Allow users to withdraw their Vaults from a proxy contract so it shows up on the migration portal. Direct your users there.
  • Or create an interface that will help users migrate their Dai in case of a new redeployment or allow users to claim their collateral in case of an only shutdown scenario.

Dapps

Dapps involves services such as:

  • Lending Protocols
  • Aggregator Interfaces, eg, Zerion and DefiSaver
  • DSR Interfaces
  • Smart Contracts holding Dai

As a Dapp creator you should integrate the Emergency Shutdown Service which can notify you when the Emergency Shutdown has been triggered.

  • When the ES has been triggered:

    • Have an UI interface that alerts and informs users about the event.
    • Direct them towards the official communication channels for more information (see list below) and the migration portal for Dai and Vault redemption.

  • Communication channels:

Custodial Services

If you control the access to the smart contracts backing your Dapp, then you can:

  • Allow users to retrieve Dai or access to Vault to personal wallet and direct them to migration portal for the redemption process

  • Or claim Dai collateral or claim excess collateral from Vault on behalf of users at migration portal, and distribute to users, and allow them to retrieve it.

  • Follow communication for latest development updates

Non-Custodial Dapps

If you don’t control the smart contracts backing your Dapp directly, then

  • Direct users the to migration portal for Dai and Vault redemption.

  • Or create an interface that allows your users to:

    • Claim Dai equivalent in collateral or claim excess collateral from Vaults in case of a system shutdown.
    • If there's a redeployment of the system, migrate Dai to the new redeployed system and/or claim excess collateral from Vaults.

  • Follow communication for latest development updates

Keepers

As a Keeper in the Maker Protocol it’s recommended that you prepare to:

  • Help Dai holders claim equivalent collateral, acting as a secondary market
  • Bid in the auction contracts in the Maker Protocol helping it settle any debt it might have
  • In case of system redeployment, migrate Dai to new Dai and deploy new software instances to support it.
  • Claim equivalent Dai collateral in the system after emergency shutdown

Market Makers

  • As a market maker, your role is to provide liquidity in the market so Dai holders can exchange their Dai to other assets.
  • After there is no market to cover, you can act as a Dai holder and start migrating Dai to new Dai in case of system redeployment or claim equivalent Dai collateral in case of system wide shutdown.

How to check if Emergency Shutdown has been triggered

In addition to the emergency communication channels, you as a service provider can implement the Emergency Shutdown Services from the Maker Protocol so you can be notified of such an event right when it happens.

Using Dai.js

Through our Dai.js library you can read the system’s status and be notified in an instant of any systemic change. Specifically, calling the isGlobalSettlementInvoked() function will provide you with the response.

Using smart contracts

If your implementation requires communicating directly with the smart contracts, then you will find all the necessary data in the END module of the Maker Protocol. The END contract has a parameter called live which is the Emergency Shutdown flag of the system.

When the system is running normally, the parameter live is equal to one, live = 1. In case of an Emergency Shutdown, the live parameter will equal to zero, as live = 0.

CLI guide on how to redeem your Dai or excess collateral after ES

Head over to this guide to learn how to redeem your Dai or excess collateral in case of an ES event.

Summary

In this guide you have learned how to act in case of an Emergency Shutdown event in the Maker Protocol. You have received an introduction in the Emergency Shutdown module and have received information to make you an educated actor in the MakerDAO ecosystem.

Additional Resources

  • If you’re curious to understand in more detail how the ES module works, head towards our documentation page.
  • We also have a CLI guide on how to do the claiming of Dai equivalent collateral or claiming excess collateral from your vault.

Help

  • Rocket chat - #dev channel