Upgrade multisig signer configuration (M/N)
BlackRock USD Institutional Digital Liquidity Fund (BUIDL)'s assessment for RD-F-026 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
DSToken role architecture defines ROLE_MASTER, ROLE_ISSUER, ROLE_TRANSFER_AGENT, ROLE_EXCHANGE — at least 2+ Securitize addresses hold admin roles. Specific addresses not publicly disclosed; cannot enumerate holders without direct RPC getRoleMember() calls.
Sources #
- GitHubhttps://github.com/securitize-io/dstokenretrieved 2026-04-26
Methodology #
Read `threshold` and `getOwners()` on the multisig controlling upgrade / sensitive ops. Store as `required` (M) and `total` (N); render as "M/N". For EOA admins record `required=1, total=1` (display "1/1"). Null when admin is immutable or full DAO with no fixed signer set.
See the full factor methodology and distribution across all protocols →