Role separation: upgrade ≠ fee ≠ oracle

Evidence summary #

Upgrade/configuration: DAO Multisig (6-of-11) via Authorizer. Fee collection: ProtocolFeesCollector (0xce886865...) — separate contract. Treasury: Treasury Multisig (5-of-7, 0x0EFcCBb9...). Oracle/rate-provider config: pool-level, not a single protocol role. OpCo Safe (3-of-4) for operational spending. Some concentration at the DAO Multisig level across configuration types. Not full role separation across all three dimensions.

Sources #

Methodology #

Determine whether the upgrade role, fee-collection role, and oracle-config role are assigned to distinct addresses.

See the full factor methodology and distribution across all protocols →