Multisig

CalixMultisig is an M-of-N on-chain multisig wallet used to govern the Bridge, Oracle, and LPStaking contracts. All governance changes — including ownership of the multisig itself — go through the same proposal lifecycle.

How It Works

The contract enforces a submit → approve → execute lifecycle. A proposal is a raw (target, value, calldata) tuple. Once it accumulates threshold approvals from distinct owners, any owner can execute it. Execution is atomic: if the call reverts, the proposal stays pending.

ℹ️

Self-governance. addOwner, removeOwner, and changeThreshold can only be called via a successful multisig proposal — never directly. The multisig is its own admin.

Proposal Flow

Encode calldata

const data = iface.encodeFunctionData("setRewardRate", [newRate]);

Submit proposal

const txId = await multisig.submit(stakingAddress, 0, data);

Collect approvals (other owners)

await multisig.connect(owner2).approve(txId);

Execute once threshold is met

await multisig.execute(txId);

Key Functions

Function	Access	Description
`submit(address, uint256, bytes)`	owner	Create a new proposal; returns proposal ID
`approve(uint256 txId)`	owner	Add caller's approval to a pending proposal
`revoke(uint256 txId)`	owner	Withdraw caller's approval before execution
`execute(uint256 txId)`	owner	Execute a proposal that has reached threshold
`isReady(uint256 txId)`	public	Returns true if approval count ≥ threshold
`getProposal(uint256 txId)`	public	Returns target, value, data, executed flag, approval count

Encoding Calldata

Use Solidity's abi.encodeWithSignature for calldata in tests/scripts:

// Solidity
bytes memory data = abi.encodeWithSignature(
    "transferOwnership(address)",
    newOwner
);

// ethers.js
const iface = new ethers.Interface(["function transferOwnership(address)"]);
const data  = iface.encodeFunctionData("transferOwnership", [newOwner]);

⚠️

Minimum threshold. The contract enforces a minimum threshold of 2. A 1-of-N multisig provides no meaningful security improvement over a single EOA. For production governance, 3-of-5 or higher is strongly recommended.

Security

nonReentrant on execute — prevents re-entrant proposal execution
CEI pattern — state marked executed before the external call
onlySelf modifier on addOwner, removeOwner, changeThreshold — only callable through a successful proposal