External keeper/relayer not redundant
Ethena's assessment for RD-F-062 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
GATEKEEPER_ROLE is the primary on-chain emergency halt keeper. Off-chain minting infrastructure (Pyth/Redstone feed aggregation, order signing backend) relies on Ethena's own backend systems. Whether the GATEKEEPER_ROLE is held by a redundant multi-party arrangement vs. single team key is not confirmed in available sources. If the off-chain backend experiences an outage, no redundant third-party relayer is declared. Single-backend dependency for the off-chain minting validation layer is a keeper-redundancy gap.
Sources #
- Docshttps://docs.ethena.fi/solution-design/key-trust-assumptionsretrieved 2026-04-28
- https://docs.ethena.fi/solution-design/minting-usde/user-security-measuresretrieved 2026-04-28
Methodology #
Determine whether the protocol depends on a single keeper or relayer (Gelato, Chainlink Automation, custom) with no redundancy or failover.
See the full factor methodology and distribution across all protocols →