★ delegatecall/call in proposal execution without allowlist

Hyperliquid's assessment for RD-F-039 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No on-chain governor or proposal execution contract exists. HIPs are stake-weighted validator declarations, not smart-contract proposal payloads with delegatecall execution. Bridge2 contains no proposal execution path. Not applicable for this architecture.

Sources #

GitHub
Bridge2.sol constructor — hot/cold validator parametersBridge2.sol sourceretrieved 2026-04-28
Docs
HIPs — validator declarations, no on-chain governorHyperliquid governance modelretrieved 2026-04-28

Methodology #

Determine whether the governance executor contract uses `delegatecall` or `call` with proposal-supplied target, without enforcing an allowlist of permitted targets.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol hyperliquid factor RD-F-039 score not_applicable collected_at 2026-04-28 13:58:49