Recovery guide

Use this if Loop's website or keepers are unavailable. Your treasury owns the buyback account and can act on it directly from its Safe (or any tool that can send a transaction from the Safe). Loop's keepers are not needed and cannot stop you.

1. Pause - call pause() on the account. New orders stop and the open order is invalidated in the same transaction. A guardian can also do this.
2. Return everything - call exit(): it pauses, invalidates the open order and sends all funding and purchased tokens back to the treasury.
3. Or withdraw part - call withdraw(token, amount). Funds can only go to the treasury. Pause first if an order is open.
4. Remove Loop's keepers - call setOperator(keeper, false) for each keeper.
5. Release an expired order - anyone can call release() after the order's expiry.

Chain congestion, a token freeze or a failure in another protocol can delay any of these steps. Exit is not unconditionally instant.