Timelock on sensitive actions

BENQI's assessment for RD-F-033 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No timelock on any sensitive action category. Compound V2 Comptroller admin can call _setCollateralFactor, _setReserveFactor, _setInterestRateModel, _setPriceOracle, _setBorrowPaused, _setMintPaused, _reduceTiereserves (reserve drain) — all without timelock delay. BenqiChainlinkOracle has Set Admin function (oracle swap without delay). sAVAX admin controls staking parameters and upgrade authority without timelock. All five action types (mint/pause/rescue/setOracle/upgrade) are untimelocked.

Sources #

Docs
Risks & Audits | BENQIBENQI risks docs acknowledge upgrade and parameter risks without mentioning timelock protectionretrieved 2026-05-16
Etherscan
Benqi Finance: Comptroller | SnowTraceComptroller on Snowtrace — Compound V2 fork with full admin-callable parameter functions, no timelock protectionretrieved 2026-05-16

Methodology #

For each sensitive action category (mint / pause / rescue / setOracle / upgrade), determine whether execution requires going through the declared timelock.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol benqi factor RD-F-033 score red collected_at 2026-05-16 11:02:12