UUPS _authorizeUpgrade correctly permissioned
Frax Finance's assessment for RD-F-021 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
The frxUSD OFT adapter (0x566a6442) is a TransparentUpgradeableProxy — uses ProxyAdmin for upgrades, NOT UUPS. All other core contracts (sfrxETH, FraxlendPairs, FraxEtherRedemptionQueueV2, FraxGovernorAlpha/Omega) are non-upgradeable contracts with constructors. UUPS _authorizeUpgrade pattern is not used in the Frax deployment architecture reviewed.
Sources #
- EtherscanfrxUSD OFT Adapter EtherscanfrxUSD OFT adapter is TransparentUpgradeableProxy — not UUPSretrieved 2026-05-17
Methodology #
Determine whether the UUPS implementation defines `_authorizeUpgrade(address)` restricted to owner/admin/timelock (not open to arbitrary callers).
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol frax factor RD-F-021 score not_applicable collected_at 2026-05-16 20:44:31