defirisk.co
rubric v1.7.0

Timelock duration on upgrades

Frax Finance's assessment for RD-F-032 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Alpha TimelockController (0x821794): min delay ~86,400s (~1 day). Omega path: effective delay = 2-day veto window only (no post-veto timelock). frxUSD: NO timelock on admin actions per LlamaRisk explicit confirmation. Operative path (Omega + frxUSD) has 48h effective delay at best, 0h for direct multisig executions on frxUSD. Falls short of the 48-72h best-practice tier for $298M TVL protocols.

Sources #

Methodology #

Read the timelock delay (in hours) between a queued upgrade proposal and its executable state.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol frax factor RD-F-032 score yellow collected_at 2026-05-16 20:44:31