A Treasury Is Not an ATM
Execute a grant, switch to low quorum, and cancel an unsafe operation to compare capital efficiency with attack surface.
- Trace credits moving from a treasury to a recipient
- Explain how low quorum amplifies low-participation risk
- Describe what emergency cancellation protects and cannot erase
- PREVIOUSWhy Can’t a Passed Vote Execute Immediately?
- CURRENTA Treasury Is Not an ATM
Execute a grant, switch to low quorum, and cancel an unsafe operation to compare capital efficiency with attack surface.
- NEXTFree sandbox
Think about these questions first.
Choose an answer before opening the explanation. You can add anything unexpected to your review list.
Q01An emergency multisig can save a protocol. Why is it also a risk?＋
The same key that pauses an attack may censor users or move assets. The real questions are scope, threshold, expiry, and whether every action is auditable.
Governance eventually touches assets: treasury credits, protocol parameters, and pause switches. A low quorum can make decisions faster while letting fewer participants control more value; an emergency cancellation path creates another authority boundary.
Put a treasury grant on the same ledger
A 180,000-credit grant moves only when execution runs. Voting, queuing, and waiting do not create balances. Switch to the low-quorum scenario to see why participation is a security boundary, not merely an efficiency metric.
Who gets to change the protocol?
Follow one proposal from intention to executable state, then inspect voting power, delay, and treasury conservation.
- 01Draft→
- 02Voting→
- 03Succeeded→
- 04Queued→
- 05Ready→
- 06Executed
Create a proposal to freeze a voting snapshot.
Start by creating one proposal. Read the action before you read the vote count.
- 02
投票窗口 3 天，法定人数 60%，时间锁 2 天。
- 01
治理模块创建：1,000,000 治理代币、1,000,000 积分金库，提案需要投票和时间锁。
Use the slider to return to an earlier step. Continuing from there replaces the later history with a new sequence.
Run the ordinary grant, then reset into low quorum and timelock cancellation. Read treasury balance, recipient balance, and event log together.
Expand: how this step works
treasury_before + member_credits_before
= treasury_after + member_credits_after
cancel(queued | ready) → no transfer, proposal becomes cancelled
Cancellation does not erase votes or rewrite history; it blocks the call before assets move. Production systems also need guardian rotation, expiry, and spending limits.