Review: decide about timelock controller

[gpersoon]

Review: decide about timelock controller

[HickupHH3]

My understanding is that TimelockController supports native / ERC20 token transfers already (in general, arbitrary code execution). Proposals have to be made and executed on the ArenaGovernor, which then calls TimelockController.

It is important to note that any asset sent to the Governor contract will be inaccessible. All funds should be held by the TimelockController. https://docs.openzeppelin.com/contracts/4.x/api/governance#GovernorTimelockControl

TODO: write tests to ensure this is the case.

[MrToph]

Yes, everything needs to go through the Timelock, the timelock is also the owner of all contracts. The Timelock just executes governor proposals, so you can transfer funds if there's a proposal that reached quorum

[sockdrawermoney]

Yeah, my assumption was a governance vote to either release funds to an EOA for distribution or to directly distribute them from the governance action.

[MrToph]

I always assumed the distribution of awards should come with a governance vote but would be good to double-check @adamavenir