defirisk.co
rubric v1.7.0

Admin has mint() with unlimited max

Chainlink CCIP's assessment for RD-F-042 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

CCIP admin (Chainlink Labs via MCMS) does not control a protocol governance token with unlimited mint. LINK has a fixed total supply. Bridge token pools use burn/mint where the token issuer (not CCIP admin) controls supply. No CCIP admin mint(...) with unlimited max exists.

Sources #

Methodology #

Determine whether an admin-callable `mint` on a protocol token has no supply cap or an unlimited maximum supply.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol chainlink-ccip factor RD-F-042 score not_applicable collected_at 2026-05-16 01:55:09