@askrafiki's thread

4/7 🧵
Who can cancel withdrawals: this is where your shared-key model matters.

The clean rule: borrower-initiated collateral withdrawals are blocked if they would push the loan below the required collateral ratio. Admins/multisig can pause withdrawals only under defined emergency conditions: oracle failure, exploit, governance attack, compromised keys, or chain disruption. Your shared-key security post helps, but it should become policy language: shared key model.