UUPS _authorizeUpgrade correctly permissioned

Dolomite's assessment for RD-F-021 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

DolomiteMargin core is immutable (no UUPS pattern). Arbitrum module proxy contracts (ExpiryProxy, DepositWithdrawalProxy, GenericTraderProxyV1, LiquidatorProxyV5, EventEmitterRegistryProxy) are upgradeable but their exact proxy pattern (UUPS/Transparent/Beacon) was not confirmed via direct Arbiscan source read (403 on fetch attempt). Cannot confirm _authorizeUpgrade restriction without source inspection.

Sources #

Docs
Dolomite Core Proxiesdocs.dolomite.io/smart-contract-addresses/core-proxies: proxy contracts listed but pattern not specifiedretrieved 2026-05-16

Methodology #

Determine whether the UUPS implementation defines `_authorizeUpgrade(address)` restricted to owner/admin/timelock (not open to arbitrary callers).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol dolomite factor RD-F-021 score gray collected_at 2026-05-16 11:12:56