Multisig governance

In order to modify our code or the parameters of our smart contracts, a multisig needs to be used. Let's see what this means.

What is a multisig?

Multisig is a tool composed of multiple wallets that share the power on the decisions taken.

With a multisig tool, one signature from one wallet is not enough; you need multiple signatures from different private keys, distributed across multiple parties and often on multiple continents. In order to validate any decision, a majority of the members will have to sign with their private key.

Thanks to this, it is possible to distribute the governance power among multiple wallet holders.

Marinade decided that while waiting for DAO tooling, which will enable MNDE holders to directly vote on decisions, the best and most transparent way to ensure that our protocol is maximally decentralized was to use Anchor's Framework Multisig tools.

With our multisigs (introduced below), a decision can only be implemented if it is validated by a majority of our multisig owners. This empowers our DAO and is a first step toward fully decentralized governance.

Marinade multisigs

Main multisig

Our first multisig is composed of 13 wallets, distributed among some of the most reputable parties in the Solana ecosystem:

• Jupiter

• Mango

• Marinade team (3 votes)

• Miton C

• Orca

• Phantom

• Raydium

• Solend

• Solflare

• Staking Facilities

• Triton.one

This multisig controls contract-code upgrades. To modify our smart contract, this multisig has to confirm it. For a decision governed by this multisig to go through, 6 out of 13 wallets must sign the upgrade.

This system includes multiple trusted parties to ensure that only agreed-upon decisions are integrated into the protocol.

This multisig ensures that no one is the sole owner of the code and can act maliciously without being stopped by other parties.

Treasury multisig - Now under Marinade Council

Multisig has many advantages but a big multisig like our main one can be unnecessary for other needs. Marinade's second multisig controls all the treasury-related decisions. This multisig is owned by the Marinade team and composed of 7 different wallets shared among the Marinade team. This multisig controls the protocol treasury and the community MNDE account used to feed liquidity mining incentives to all our ecosystem partners. A majority of 4 out of 7 needs to be reached in order to execute related decisions.

Operational multisig - Now under Marinade Council

Finally, Marinade has a third multisig used to modify operational parameters. This wallet is also controlled by the Marinade team and comprises 5 different wallets, spread among Marinade stakeholders.

This multisig can modify the following operational parameters of the mSOL-SOL liquidity pool:

• liquidity-target: 106,000 SOL

• max-fee: 9%

• min-fee: 0.1%

This multisig can also change the following operational parameters of the protocol:

• liquidity-sol-cap (maximum SOL amount in the mSOL-SOL liquidity pool)

• min-deposit: 0.000000001 SOL (minimum SOL amount that can be staked)

• min-stake: 1 SOL (minimum SOL amount for stake/unstake actions executed by our bot and for depositing a stake account)

• min-withdraw (minimum SOL amount that can be withdrawn)

• slots-for-stake-delta: 3 hours (number of hours before the end of the epoch at which the bot starts to stake/unstake)

• staking-sol-cap: 11M (maximum SOL amount that can be staked in the protocol)

• rewards-fee: 6% (fees of the protocol)

For example, the multisig was used to remove the cap of staked SOL on Marinade (staking-sol-cap).

The rewards-fee parameter is 6%. If changed, it could never go above 10% (that limit is set in the code).

Marinade aims to become a fully decentralized protocol, governed by MNDE holders. When DAO tooling is available and MNDE token is properly distributed, most of these powers will be delegated and managed by the DAO.