⌚Timelock

Penpie has implemented Timelock controller contracts as the owner of its proxyAdmin contract. In simple terms, this means Penpie contracts can no longer be upgraded instantly. Any contract upgrade now requires a minimum 3-day lock period — once an upgrade request is submitted, it can only be executed after at least three days.

This strengthens security, preventing scenarios where attackers swiftly upgraded contracts with malicious versions to execute an exploit. With this safeguard in place, any scheduled upgrade to Penpie’s core contracts will undergo a mandatory 3-day review period, giving us ample time to assess the changes and cancel any upgrade if necessary.