defirisk.co
rubric v1.7.0

Admin = deployer EOA after 7 days

Across Protocol's assessment for RD-F-043 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Admin = deployer EOA + no transfer in 7d | Protocol is 4.5 years old. HubPool deployed 2021-11-06 with Council multisig as deployer-linked admin. Risk Labs Deployer `0x9a8f92a830` has no current admin role on HubPool, ConfigStore, or SpokePools (labeled deployer by Etherscan, not owner). No evidence of deployer EOA retention. | Etherscan: HubPool contract creator vs current owner mismatch; profile §3 deployer address; governance manual | green

Sources #

  • Curator note
    Extracted from 02-governance-admin.md — RD-F-043; no URL citedretrieved 2026-04-28

Methodology #

Determine whether, at t = deploy+7d, the admin address still equals the deployer EOA with no evidence of transfer to a multisig.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol across-protocol factor RD-F-043 score gray collected_at 2026-04-30 21:19:18