Beanstalk Farms

BFP-73 proposes that a multisig should take over control of the admin functionality of Beanstalk, as currently Publius maintains sole control of the admin keys.

However, the current proposal leads to all the signers of the multisig being anonymous and chosen by Publius. The community has raised concerns that there is no ability to verify the existence of these individuals, and must trust Publius both has not chosen sybil identities and can safely guard the identity of these individuals (since anonymity is the motivation for their proposal).

The team posturing that anonymous signers are of upmost importance, while having a doxxed entity (Publius) knowing all of the signers identities seems counterintuitive. The motivation behind anonymous signers is to be said to prevent entities such as governments to deploy malicious code to Beanstalk. However, this can lead to a scenario where said entity compels Publius to reveal the signers’ identities without being able to inform anyone of the compromise. Now only the malicious entity knows of the identities and the community has no way to respond.

This proposal postures that some or all multisig signers should have their pseudonymous identities revealed, in order to provide transparency to the community on the legitimacy of the signers.

For example, if Silo Chad or Safisynai were to be chosen as signers, the community need not be concerned on their real identities. The community has engaged with these individuals enough to gain confidence in their real existence, and that they are not merely alternative identities of Publius/other signers.

NOTE: Voting for the signers to be revealed DOES NOT mean the signers will be doxxed! Simply their community handles can be revealed, or if a business is one of the signers, simply their business name (e.g many multisigs in DeFi have investment funds as one of their signers).

There are options for different amount of signer identities being revealed (note that Publius is already considered a doxxed signer). For example if the community chooses “50% - 1” and the signers of the multisig are 7, then 2 new signers must have their identities revealed (as Publius counts as one of them, until he is removed)