defirisk.co
rubric v1.7.0

Hot-patch deploys without timelock (last 30 days)

Hyperlane's assessment for RD-F-138 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Cannot assess without upgrade event log query. Timelock delay confirmed 24h (86400s) via U18 resolution. If all upgrades route through the Timelock, hot-patches are impossible. However, ProxyAdmin v1 direct path (3-of-6 Safe, no Timelock) could bypass this. No Upgraded events queried.

Sources #

  • Internal
    Data cache00-data-cache.json: no upgrade events in cache; Timelock delay now confirmed 86400s via U18retrieved 2026-05-17

Methodology #

Count upgrades executed in the last 30 days without going through the declared timelock path.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol hyperlane factor RD-F-138 score gray collected_at 2026-05-16 23:03:56