defirisk.co
rubric v1.7.0

Timelock duration on upgrades

Curve Finance's assessment for RD-F-032 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No TimelockController contract. Aragon 7-day vote duration (604,800 seconds) serves as effective timelock for Ownership/Parameter votes (168h >> 48h threshold = green on those tracks). However, Emergency DAO actions use 24-hour voting window (< 48h threshold). Overall yellow because the emergency path is below the 48h green threshold.

Sources #

  • Docs
    Curve DAO Aragon governance parametersaragon.org/how-to/curve-dao: Emergency DAO 24-hour voting window, 66% support, 51% quorumretrieved 2026-04-28
  • Docs
    Curve DAO: Protocol Ownershipcurve.readthedocs.io/dao-ownership.html: 'each vote lasts for one week and cannot be executed until the entire week has passed'; Emergency DAO: 24-hour windowretrieved 2026-04-28

Methodology #

Read the timelock delay (in hours) between a queued upgrade proposal and its executable state.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol curve-v2 factor RD-F-032 score yellow collected_at 2026-04-28 19:48:40