defirisk.co
rubric v1.7.0

delegatecall/call in proposal execution without allowlist

Circle USYC's assessment for RD-F-039 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Not applicable by RWA regime (PD-042). No on-chain governance executor, no proposal execution path, no delegatecall in governance context.

Sources #

  • Internal
    00-data-cache.jsonData cache governor_address: null; profile section 6 no DAO governanceretrieved 2026-05-16

Methodology #

Determine whether the governance executor contract uses `delegatecall` or `call` with proposal-supplied target, without enforcing an allowlist of permitted targets.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol circle-usyc factor RD-F-039 score not_applicable collected_at 2026-05-15 21:56:43