GEB Docs
Search…
Stability Fee Treasury
The protocol's invoice processor

1. Summary

The StabilityFeeTreasury is meant to allow other contracts or EOAs to pull funds (stability fees) in order to finance their operations. The treasury is set up as a secondaryReceiver in the TaxCollector. Anyone can periodically call the contract in order to recompute an optimal amount of fees that should be kept in the treasury and send any additional surplus to the extraSurplusReceiver.

2. Contract Variables & Functions

Variables
    authorizedAccounts[usr: address] - addAuthorization/removeAuthorization - auth mechanisms
    allowance[receiver: address] - total withdrawal allowance
    pulledPerBlock[usr: address, blockNr: uint256] - total amount pulled by a user on a specific block
    safeEngine - address of the SAFEEngine
    systemCoin - system coin address (Coin.sol)
    coinJoin - system coin adapter address
    extraSurplusReceiver - address that receives extra unused funds from the treasury
    treasuryCapacity - maximum amount of stability fees should be kept in the treasury
    minimumFundsRequired - minimum amount of stability fees that must be kept in the treasury at all times
    expensesMultiplier - multiplier for the expenses incurred since the last transferSurplusFunds call. Ensures there's a buffer of funds on top of the expected expenses until the next
    transferSurplusFunds call
    surplusTransferDelay - delay between two transferSurplusFunds calls
    expensesAccumulator - total expenses incurred since treasury deployment
    accumulatorTag - latest snapshot of expensesAccumulator
    latestSurplusTransferTime - last timestamp when transferSurplusFunds was called
    contractEnabled - global settlement flag
Data Structures
    Allowance - struct that specifies the total and the per-block withdrawal allowance for an address. Contains:
      total - the total allowance (in RAD)
      perBlock - the per-block allowance (in RAD)
Modifiers
    isAuthorized - checks whether an address is part of authorizedAddresses (and thus can call authed functions).
    accountNotTreasury - checks that the receiver account for treasury funds is not the treasury itself
Functions
    modifyParameters() - authorized function for changing treasury parameters
    disableContract() - disable the treasury and transfer all of its funds to theextraSurplusReceiver
    joinAllCoins() - join any ERC20 system coins that the treasury has into internal coin form (SAFEEngine.coinBalance)
    getAllowance(account: address) - get the total and the per-block allowance for a user
    setTotalAllowance(account: address, rad: uint256) - authorized function that changes the total allowed amount an address can withdraw from the treasury
    setPerBlockAllowance(account: address, rad: uint256) - authorized function that changes the amount that an address can withdraw from the treasury every block
    giveFunds(account: address, rad: uint256) - governance controlled function that transfers stability fees from the treasury to a destination address
    takeFunds(account: address, rad: uint256) - governance controlled function that transfers stability fees from a target address to the treasury
    pullFunds(dstAccount: address, token: address, wad: uint256) - take funds from the treasury. Reverts if the caller is not allowed to withdraw or if their per-block allowance doesn't allow it
    transferSurplusFunds() - recalculate the amount of stability fees that should remain in the treasury and transfer additional funds to the extraSurplusReceiver
Events
    AddAuthorization - emitted when a new address becomes authorized. Contains:
      account - the new authorized account
    RemoveAuthorization - emitted when an address is de-authorized. Contains:
      account - the address that was de-authorized
    ModifyParameters - emitted when a parameter is updated.
    DisableContract - emitted when the contract is disabled.
    SetTotalAllowance - emitted when the total allowance for an address is set. Contains:
      account - the account whose allowance was changed
      rad - the new total allowance for the account
    SetPerBlockAllowance - emitted when the per-block allowance for an address is set. Contains:
      account - the account whose per-block allowance was changed
      rad - the new total allowance for the account
    GiveFunds - emitted when governance offers funds to an address. Contains:
      account - the account that received funds
      rad - the amount of funds that were given
      expensesAccumulator - the sum of all the expenses incurred since the contract was deployed
    TakeFunds - emitted when governance calls the treasury to take funds from an address. Contains:
      account - the account the treasury takes system coins from
      rad - the amount of (internal) system coins to take (expressed as RAD)
    PullFunds - emitted when an approved address pulls funds from the treasury. Contains:
      sender - the msg.sender that called pullFunds
      dstAccount - the address that received funds
      token - the address of the token being transferred (in this case it's always the address of the ERC20 system coin)
      rad - the total amount of internal system coins transferred
      expensesAccumulator - the sum of all the expenses incurred since the contract was deployed
    TransferSurplusFunds - emitted when surplus funds above the optimum amount are sent to the accounting engine. Contains:
      extraSurplusReceiver - the address that received the extra funds
      fundsToTransfer - the amount of funds sent

3. Walkthrough

The treasury is funded by stability fees coming from the TaxCollector or by anyone who is willing to send system coins (either internally or as ERC20 tokens) to it. Governance can also use takeFunds to transfer internal system coins from a source address to the treasury. Governance is in charge with setting up authorized addresses that can pullFunds out of the treasury (if their total or per-block allowance permits) as well as setting treasury parameters in order to determine the optimum amount of funds that should remain in the contract at any time. We define "optimum" as a multiplier (expensesMultiplier) of the latest expenses incurred by the treasury since the last transferSurplusFunds call.
transferSurplusFunds is the way the treasury recalculates the amount of funds it should keep in reserves and transfers any surplus to the extraSurplusReceiver. Note that there is a surplusTransferDelay time delay between recalculating the optimum and transferring surplus out of the contract.
Sending Funds to extraSurplusReceiveror to the Treasury Itself
In case governance wants to send funds to extraSurplusReceiver using giveFunds, expensesAccumulator will not increase. In case an address wants to pullFunds and send them to the extraSurplusReceiver, pullFunds will revert. pullFunds will silently fail if the dstAccount is the treasury contract itself, whereas giveFunds will revert.
Last modified 6mo ago