Summary:
In light of the recent phishing / exploits impacting Radiant and TapiocaDAO, a group of concerned community members came together to review the security vulnerabilities of TKN and suggest improvements to the DAO. We present this proposal to be voted on by the DAO regarding putting the treasury assets behind the security of a multisig wallet.
There are two major risk vectors for TKN holders at present:
Large amount of minted TKN sitting in this wallet (0x3A7cbf0a90DC6755DdEE66886Dd26d4A6Ab64896). If this wallet were exploited, or an advanced malware/phishing campaign were undertaken against Kindness, TKN holders could lose everything if the exploiters sells the TKN into the LP.
Treasury assets (AERO) sitting in the following wallets: https://debank.com/profile/0x43449c55b1f3a2011b179c37be68a78d593e5846 https://debank.com/profile/0x171096136f67c4d95e941394a757e60e4df88ad5 https://debank.com/profile/0x202a1f0937273896c1402c8bd48fe78af6f89580/ https://debank.com/profile/0x46981fe345b112851558ce1011d56701d809696c
If any of these wallets were exploited, the DAO could lose potentially all of its assets, which would be disastrous for TKN holders.
Recommendation:
In order to cure these major risks facing the TKN treasury, we recommend creating a ⅗ multisig, and having the multisig committee perform a review of all multisig members’ security practices, ensuring there are no gaps in opsec. The multisig can be comprised of:
Conclusion:
This proposal seeks to align the values between the TKN contributors, investors, and community members. Industry best practices are important to increase the security, trust, and alignment within the TKN DAO.