Admin key custody type
Aerodrome Finance's assessment for RD-F-025 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Core contract upgrade authority: NON-UPGRADEABLE (strongest GREEN tier per PD-047 2026-05-21). Core AMM contracts (VotingEscrow, Voter, Minter, PoolFactory, GaugeFactory, FactoryRegistry, Pool implementation) are deployed as immutable bytecode with no proxy pattern; no Past Implementations history on any core contract. Code replacement is structurally impossible regardless of how the admin key is held. The 3-of-7 team Gnosis Safe and 3-of-5 Emergency Council control fee parameters and gauge weights only — captured in RD-F-026/032/033/034; they cannot upgrade or replace core logic. RD-F-021/022/143 are not_applicable for the core contracts.
Sources #
- DocsAerodrome Finance PERMISSIONS.mdPERMISSIONS.md — role assignments and governance structureretrieved 2026-05-04
- Aerodrome Team Multisig Safe Config (threshold=3, owners=7)Safe Transaction Service API Base endpoint — team multisigretrieved 2026-05-04
Methodology #
Read the effective admin/owner/upgrader role on deployed contracts and classify as: EOA / multisig / multisig+timelock / full DAO+timelock / immutable.
See the full factor methodology and distribution across all protocols →