Guardian
The Guardian is a multisig role with limited, bounded authority to pause or freeze ClearPortX modules in response to detected anomalies. This page documents what the Guardian can do, what it cannot do, and how it is governed.
What the Guardian can do
Section titled “What the Guardian can do”- Pause any product module (DLMM exchange, money market, staking), halting new user actions while existing positions remain intact.
- Freeze a specific asset or pool, preventing new deposits while allowing repayments and withdrawals.
- Unpause a module once the underlying issue has been investigated and resolved.
- Invoke emergency liquidations in extreme cases where a market-wide price dislocation creates a liquidation shortfall.
What the Guardian cannot do
Section titled “What the Guardian cannot do”- The Guardian cannot move user funds directly. Pause and freeze affect which choices are available on contracts; they do not grant custody.
- The Guardian cannot change risk parameters, listing decisions, or fee levels. Those changes require a governance vote from CPX holders.
- The Guardian cannot override signed oracle prices or mint CPX.
Multisig composition
Section titled “Multisig composition”The Guardian is a multisig of independent signers — a mix of ClearPortX core contributors and external security partners. The quorum threshold, current signer list, and signing history will be published transparently on-chain and in this page once the multisig is formally constituted.
Accountability
Section titled “Accountability”Every Guardian action is recorded on-chain with a timestamp, the signer set, and a reason field. Users can audit Guardian history at any time. A governance proposal can revoke or rotate the multisig if the community loses confidence in its members.