Security Council
A small, trusted multisig group with emergency authority to pause a protocol or override its normal governance process in the event of a critical bug or attack.
A security council is a defined group of trusted individuals or entities, typically operating through a multi-signature wallet (see Kaavon's "Multi-Signature Wallet" glossary definition), granted emergency powers to act faster than a protocol's normal, often slower governance process would allow — most commonly the ability to pause the protocol, freeze specific functions, or in some designs, approve emergency upgrades in response to an active exploit or critical discovered vulnerability. This exists specifically because a standard governance vote with a timelock (see Kaavon's "Timelock" glossary definition) delay is often far too slow to respond to an attack unfolding in real time.
A security council represents a deliberate, usually time-limited or scope-limited centralization tradeoff: the protocol accepts that a small group holds significant emergency power, in exchange for the ability to respond quickly to existential threats that could otherwise drain user funds before slower community governance could act. Well-designed security councils typically have their powers explicitly limited in scope and duration, with actions subject to retroactive community review, specifically to limit the risk of that emergency power being misused or overextended beyond genuine emergencies.
Examples
- A protocol's security council might pause a vulnerable smart contract function within minutes of an exploit being detected, far faster than a standard governance vote and timelock would allow.
- Because a security council concentrates meaningful emergency power in a small group, well-designed ones limit their authority to specific, narrowly defined emergency actions rather than unrestricted control.
Learn more
Multi-Signature Wallet
Read the Multi-Signature Wallet glossary definition
Timelock
Read the Timelock glossary definition
Veto Power
Read the Veto Power glossary definition
Governance Capture
Read the Governance Capture glossary definition
The Drift Protocol Heist: How Hackers Stole $280M Without Touching a Smart Contract
Read the article