Guardian/pause-keeper distinct from upgrader

Evidence summary #

Guardian / pause-keeper role distinct from upgrader | No distinct guardian role identified. `setPaused()` is callable by HubPool owner (Council multisig), the same entity that controls upgrades. No secondary "emergency pause only" address distinct from the upgrader. | HubPool ABI on Etherscan: `setPaused(bool) onlyOwner`; no separate guardian address | yellow

Sources #

Methodology #

Determine whether a pauser/guardian role exists and is held by an address distinct from the upgrader address.

See the full factor methodology and distribution across all protocols →