MMMultisig Policy
Information and best practices regarding the MMM multisig
Mathilda MathildaDV.eth
Jonas 0xEa63666B533f3d28de6cDE77ebFf45d7d15Faa8b
Laura viriya.eth
Scott ceresstation.eth
Simona gmeverybody.eth
Relevant Documentation
- Jonas does the accounting (Ask Jonas for view access of sheet)
Payments is in general initiated by Jonas, and executed by one of the keyholders. The keyholders themself are responsible for getting their gas cost reimbursed.
To be a signer you need to:
- Be an active DAO community member
- Understand the blockchain and transactions on a basic level
- Actively sign transactions when needed
- Ask questions if you see a transactions that does not seem right
Operational security
- No single entity should ever be in control of more than 1 signing key at any given time. If a keyholder wishes to change their address their old address must first be removed.
- Transactions should always be explained and justified prior to being signed by any other keyholder.
- Never sign anything in the Gnosis safe queue without coordinating with the other keyholders regarding what it is
- Addresses should never be stored in a public database, for example a Google sheet.
- Contributors will always be prompted to confirm if their address is still accurate or not (we've had instances where contributors' wallets have been compromised and funds bounce away as they land in the account). Contributors are ultimately responsible for updating the Accountant if their address has changed.
- Addresses should always be imported to the Gnosis safe address book before payment.
- Addresses that are not used anymore should be removed from the Gnosis address books.
- Note: The address book in Gnosis isn't to be shared among the keyholders. Every keyholder has their own unique address book. Old addresses that are removed should be communicated with the keyholders group.
- Be very restrictive with signing permissions with the multisig. Re-evaluate permissions every Season.