Upgrade multisig signer configuration (M/N)

Centrifuge's assessment for RD-F-026 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Distinct admin roles: ProtocolGuardian 0xCEb7eD5d5B3bAD3088f6A1697738B60d829635c6, OpsGuardian 0x055589229506Ee89645EF08ebE9B9a863486d0dE, Guardian Safe 0xD9D30ab47c0f096b0AA67e9B8B1624504a63e7FD (Eth), separate Guardian contracts per chain, Root contract itself. Roles distributed across multiple contracts with separation of emergency vs ops.

Sources #

URL
https://docs.centrifuge.io/developer/security/guardian/retrieved 2026-04-27

Methodology #

Read `threshold` and `getOwners()` on the multisig controlling upgrade / sensitive ops. Store as `required` (M) and `total` (N); render as "M/N". For EOA admins record `required=1, total=1` (display "1/1"). Null when admin is immutable or full DAO with no fixed signer set.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol centrifuge factor RD-F-026 score green collected_at 2026-04-30 21:19:10