Enable RARI Staking

An audit wasn’t mentioned in the milestones I think, are you doing an audit specifically for the RARI contracts?

We’re auditing the generic contract. It’ll be used by Arbitrum, Rari, and any other governance that uses it. The audit wasn’t mentioned in the timeline because we expected to finish it in November, but it’s taken longer to schedule than we expected.

Considering the tight timeline, I’m curious: what additional measures are being taken to ensure staking contract security ahead of the audit, considering the timeline now extends?

We’re designing the system with security in mind from the get-go. We’re focusing on a trust-minimized system with safeguards in case any of the pieces (like the oracle) go offline or go rogue. You can read more about the system and see the code here: GitHub - withtally/govstaking

1 Like

Thanks @rafso for clarifying, look forward to the next updates :+1:

1 Like

Hi all, the first audit for Staker wrapped up about two weeks ago.

The second audit, which is a public contest, is under way on Sherlock this week. That audit contest wraps up this week. We’re running into the EOY break, so we will be a little slow the last week of December.

Here are the remaining steps to go-live:

  • Dec 22-24: Fix anything uncovered by the audit contest.
  • early January: Configure reward source. That work is tracked in the Staking Incentives thread
  • early January: Connect the staking contracts to the UI
  • (optimistically) mid- or (pessimistically) late-January: all the pieces should be in place to make a DAO proposal to turn on staking rewards
1 Like