Require a Timelock for Emergency Surplus Withdrawal

[Cedarich]

Complexity: Hard (200)

Description
withdraw_surplus at line ~1271 lets the admin move surplus funds immediately. A compromised
admin key can therefore extract funds with no observation window, and the two-step admin transfer
added previously does not help because withdrawal is a single step.

Acceptance Criteria

• Surplus withdrawal is a propose-then-execute flow with a configurable delay
• A pending withdrawal is queryable and cancellable by the admin
• Executing before the delay elapses fails with a distinct error
• Proposal, cancellation, and execution each emit events
• Tests cover the full lifecycle including boundary timing

[Emelie-Dev]

@Emelie-Dev has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hi, I would love to work on this issue.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Emelie-Dev to this issue.

[drips-wave]

Congratulations, @Emelie-Dev! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on August 31, 2026.

🧑‍💻 @Emelie-Dev: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊

[babawo96]

@babawo96 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

I have reviewed this issue and I would like to work on it in

ℹ️ Repo Maintainers: To accept this application, review their application or assign @babawo96 to this issue.

[Joyful12-tech]

@Joyful12-tech has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hello maintainer I’d like to work on this issue. I can deliver according to the requirements and will submit quality work.
Please assign me. Thank you

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Joyful12-tech to this issue.

[Emelie-Dev]

@Cedarich good day, please i was unassigned from this issue.

[Okorie2000-code]

@Okorie2000-code has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

i would love to work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Okorie2000-code to this issue.

[NnamdiCyber]

@NnamdiCyber has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

I’d like to work on this issue because it addresses an important area of the project and presents a great opportunity to make a meaningful contribution. I’m particularly interested in delivering a solution that is reliable, maintainable, and aligned with the project’s existing architecture and development standards.

I have experience working across software development, including backend and frontend development, APIs, databases, testing, DevOps, and blockchain-based applications. I’m comfortable understanding existing codebases, identifying the root cause of issues, implementing clean and scalable solutions, and writing thorough tests to prevent regressions.

My approach would be to first understand the existing implementation and project conventions, then develop the solution in a focused and incremental way. I’ll ensure the changes are well-tested, documented where necessary, and do not introduce unnecessary complexity or break existing functionality. I’m also committed to clear communication, responding to review feedback, and delivering a polished contribution that provides real value to the project.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @NnamdiCyber to this issue.