★ Admin = deployer EOA after 7 days

Circle USYC's assessment for RD-F-043 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

[CRITICAL] EOA admin from May 2023 deployment through May 2026 - over 36 months. Circle acquired Hashnote Jan 2025 but no admin-key rotation to a corporate multisig is observable. A new sub-EOA (0x13FF8Ca) was funded in Jul 2025 post-acquisition but this is EOA-to-EOA delegation, not EOA-to-multisig transfer.

Sources #

Etherscan
USYC ETH proxy - admin history since deployUSYC ETH proxy deployed May 2023; upgrade executing EOA 0x13FF8Ca first tx Jul 2025; no multisig transfer observedretrieved 2026-05-16
URL
Circle acquisition press release Jan 2025Circle announces acquisition of Hashnote Jan 21 2025 - no admin rotation post-acquisition observableretrieved 2026-05-16

Methodology #

Determine whether, at t = deploy+7d, the admin address still equals the deployer EOA with no evidence of transfer to a multisig.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol circle-usyc factor RD-F-043 score red collected_at 2026-05-15 21:56:43