★ Rescue/emergencyWithdraw without timelock
Across Protocol's assessment for RD-F-041 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Rescue / emergencyWithdraw without timelock | **RED CRITICAL.** `haircutReserves(address, int256)` on HubPool is callable by owner (Council multisig) with no timelock. This function directly reduces `utilizedReserves`, decreasing the protocol's liability to LPs — effectively haircut LP balances without their consent. `setPaused(bool)` allows immediate pause of all bridge operations. `emergencyDeleteProposal()` allows deletion of pending root bundles. All three are executable immediately by a ...
Sources #
- Curator noteExtracted from 02-governance-admin.md — RD-F-041; no URL citedretrieved 2026-04-28
Methodology #
Determine whether a `rescue(…)` or `emergencyWithdraw(…)` function exists callable by admin without a timelock delay on execution.
See the full factor methodology and distribution across all protocols →