★ Single admin EOA

Aave v3's assessment for RD-F-027 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No EOA holds any admin role. All sensitive roles (upgrade, emergency, governance) are held by multisig or timelock contracts. Protocol is 50 months old with no deployer-EOA admin retention.

Sources #

GitHub
Aave Address Book - Governance V3 EthereumGovernanceV3Ethereum.sol address bookretrieved 2026-04-27

Methodology #

Determine whether the effective upgrade/owner/rescue role is held by a single EOA (not a multisig) with no timelock on sensitive operations.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol aave-v3 factor RD-F-027 score green collected_at 2026-04-27 23:28:46