defirisk.co
rubric v1.7.0

Admin key custody type

Across Protocol's assessment for RD-F-025 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Admin key custody type | Multisig (3-of-5 Gnosis Safe) controls HubPool, ConfigStore, and all SpokePool upgrades via cross-chain relay. No standalone timelock contract. oSnap (UMA OO-based 3-day liveness) applies to Snapshot proposals but not to direct Council multisig execution. | Profile §6; Etherscan label "Hub Pool Owner MultiSig"; forum.across.to/t/across-governance-operating-manual/1447 | yellow

Sources #

  • Curator note
    Extracted from 02-governance-admin.md — RD-F-025; no URL citedretrieved 2026-04-28

Methodology #

Read the effective admin/owner/upgrader role on deployed contracts and classify as: EOA / multisig / multisig+timelock / full DAO+timelock / immutable.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol across-protocol factor RD-F-025 score gray collected_at 2026-04-30 21:19:18