Watchdogs & Safety
Mento implements multiple protection mechanisms to safeguard the protocol during its maturation. The watchdog system provides an additional security layer during the critical early stages of decentralized governance.
What Are Watchdogs?
Watchdogs are trusted community members who oversee the Mento protocol by scrutinizing governance proposals. They pay close attention to the execution code of each proposal, identify malicious payloads, and can veto proposals via a 3-of-8 multisig if needed.
This mechanism serves as a "last-minute" defense against malicious actors. Ideally, suspicious proposals should be caught early and voted against by the community. However, the watchdog veto provides crucial protection against:
Proposals with misleading descriptions
Technical errors that could harm the protocol
Governance attacks during low participation periods
Actions that prioritize one stakeholder group over others
Governance Proposal Lifecycle
Understanding when watchdogs can act requires knowing the proposal stages:
Submission: Proposal submitted on-chain
Voting Period: 7 days for community voting
Queueing: If passed, proposal enters 2-day timelock
Execution: Open-ended phase where proposal can be executed
Veto Window: Watchdogs can veto from the moment a proposal is queued until it's executed.
The Watchdog Multisig
The watchdog system operates through a 3-of-8 multisignature Safe with veto powers over governance proposals. This structure ensures:
No single watchdog can block proposals
Sufficient redundancy for availability
Balance between security and efficiency
Transparent on-chain operations
What Watchdogs Veto
Watchdogs are expected to veto proposals that:
1. Have Misleading Descriptions
The proposal description must accurately reflect the execution code. Any mismatch—whether intentional or accidental—warrants a veto to maintain governance integrity.
2. Harm Protocol Stakeholders
Proposals with high probability of harming Mento stakeholders should be vetoed. Stakeholders include:
Mento stablecoin holders (prioritized as risk-averse users)
MENTO token holders
Projects and partners relying on Mento infrastructure
Priority Principle: The safety of stablecoin holders takes precedence over risk-taking stakeholders like MENTO holders.
Example: A proposal to distribute all reserve collateral to MENTO holders would be vetoed as it undermines stablecoin holder safety, even if beneficial to token holders.
How Monitoring Works
Watchdogs coordinate through multiple channels:
Private Telegram Group: For watchdog coordination
Public Discord Channel: Community discussion and flag raising
Automated Bot Notifications: Alerts for new proposals with summaries
Self-Organization: At least three reviews required before execution
Monitoring tools include:
Mento Governance UI - Human-readable proposal details
Governor Contract - Raw on-chain data
TimelockController - Execution queue
Current Watchdog Members
Initial watchdogs serve 12-month terms from governance activation:
Bogdan Dumitru - Mento Labs
Bayo Sodimu - Mento Labs
Phillip Paetz - Mento Labs
Baransel Tekin - Mento Labs
Luuk Weber - Kolektivo Labs
Martin Chrzanowski - cLabs
Martin Volpe - cLabs
Silas Boyd-Wiziker - Valora
The group can replace inactive members and elect a Watchdog Secretary responsible for:
Rotating members annually
Replacing non-responsive members
Ensuring smooth process operation
Implementing process improvements
Technical Veto Process
To veto a proposal, watchdogs must:
Identify the Timelock Operation ID from bot notifications
Initiate or sign a cancel transaction in the Safe multisig
Call the cancel function on the TimelockController
Notify other watchdogs of the action
The technical steps involve interacting with the Safe interface and TimelockController contract detailed instructions are maintained in the watchdog operational guide.
Guiding Principles
When evaluating proposals, watchdogs follow these principles:
Safety over timeliness: Better to veto and request resubmission than risk harm
Transparency first: All concerns should be communicated publicly
Technical accuracy: Focus on code matching descriptions
Stakeholder protection: Prioritize the most vulnerable users
Err on caution: When in doubt, protect the protocol
Progressive Decentralization
The watchdog system is explicitly temporary. The community will evaluate:
Participation rates: Higher engagement reduces need for watchdogs
Proposal quality: Better submissions require less oversight
Tool development: Automated verification can replace manual review
Track record: History of safe governance builds confidence
Through governance, the community can:
Reduce required signers (e.g., from 3-of-8 to 2-of-5)
Limit veto powers to specific proposal types
Ultimately sunset the watchdog system entirely
For Proposal Authors
To ensure smooth watchdog review:
Match description to code exactly
Test thoroughly and provide results
Engage early for complex proposals
Document clearly what each action does
Allow time for proper review
Well-prepared proposals pass review quickly, while unclear submissions face delays or vetoes.
Accountability
Watchdog operations maintain transparency through:
Public identities of all members
On-chain records of all multisig actions
Open communication channels
Performance accountability to the community
This ensures watchdogs remain aligned with their protective mission while avoiding overreach.
Next Steps
To understand Mento's complete governance framework:
Understanding Mento Governance - Core governance mechanics
Participating in Governance - How to propose and vote
Governance Forum - Join the discussion
Last updated