Treasury

📋 Contract Overview

Property	Value
📁 File	src/Treasury.sol
🔧 Type	Upgradeable UUPS Proxy
⚙️ Solidity	0.8.33
📜 License	MIT

🎯 Purpose: Multi-token vault holding DAO funds with built-in safety rails that prevent rapid drainage—even through governance attacks.

---

🛡️ Safety Rails

🛡️ Treasury Safety Rails

These limits cannot be bypassed, even by governance votes.

Limit	Value	Purpose
📝 Per Proposal	10%	Prevents single large withdrawal
📅 Daily	5%	Limits daily outflow
📆 Monthly	20%	Caps monthly spending
🏦 Reserve Floor	15%	Maintains minimum reserves

⚙️ Specifications

🔐 Roles

🪙 Tokens

---

🔧 Functions

📥 Deposits

📥 Deposit Functions

Deposit Tokens

function deposit(address token, uint256 amount) external

Access: Anyone (typically REVENUE_SOURCE_ROLE)

Deposits supported tokens into treasury.

Deposit ETH

function depositETH() external payable

Access: Anyone

Deposits ETH into treasury.

📤 Withdrawals

⚙️ Management

👁️ View

---

🛡️ Safety Rail Mechanics

Safety rails reset automatically on a rolling basis.

📅 Daily Reset

function _resetDailyIfNeeded() internal {
    if (block.timestamp >= lastDailyReset + 1 days) {
        dailyWithdrawals = 0;
        lastDailyReset = block.timestamp;
    }
}

Daily limit resets every 24 hours.

📆 Monthly Reset

✅ Validation

---

🔒 Attack Resistance

Even if governance is compromised, the treasury cannot be drained quickly.

Scenario	Without Limits	With Limits
🎯 Governance attack	100% drained	Max 10% per proposal
🔓 Compromised multisig	Rapid drainage	Max 5% daily
⏱️ Extended attack	Full drainage	Max 20% monthly
🛡️ Any attack	Empty treasury	15% always preserved

Attack Timeline

Day	Max Damage	Cumulative	Response Time
1	5%	5%	Community alerted
2	5%	10%	Investigation begins
3	5%	15%	Countermeasures deployed
Week 1	~20%	~20%	Monthly cap hit

---

📜 Events & Errors

📢 Events

event Deposit(address indexed token, address indexed from, uint256 amount);
event Withdrawal(address indexed token, address indexed to, uint256 amount);
event ETHDeposit(address indexed from, uint256 amount);
event ETHWithdrawal(address indexed to, uint256 amount);
event TokenAdded(address indexed token, uint8 decimals);
event TokenRemoved(address indexed token);
event MultisigEnabled(address indexed multisig);

⛔ Errors

---

🔗 Contract Interactions

Contract	Interaction
⚖️ Governance	Calls withdraw after proposal approval
💼 DAOBusiness	Deposits revenue
🏠 RentalAndRebate	Deposits rent payments
🏪 BLTBYBank	Transfers token sale proceeds
💵 OperatingBudgetVault	Receives allocated funds

---

🔄 Upgrade Considerations

Treasury is upgradeable via UUPS proxy to allow future improvements.

Upgrade Reason	Example
🛡️ New safety features	Additional rate limits
🐛 Bug fixes	Security patches
🪙 New token types	Support new assets
📊 Enhanced reporting	Better analytics

Upgrades require governance approval.

---

💻 Integration Examples

Depositing Revenue

// Contract with REVENUE_SOURCE_ROLE
await treasury.deposit(usdcAddress, amount);

Governance Withdrawal

// Called by Governance contract after proposal passes
await treasury.withdraw(usdcAddress, recipientAddress, amount);

Checking Available

const available = await treasury.getAvailableToWithdraw();
// Returns max withdrawable given current limits

---

🔗 Related Pages

Governancehttps://github.com/urbanarray/builtbydocs/blob/main/docs/developers/contracts/operating-budget.mdhttps://github.com/urbanarray/builtbydocs/blob/main/docs/developers/contracts/dao-business.mdTreasury