defirisk.co
rubric v1.7.0

Flash-loanable voting weight

Jupiter's assessment for RD-F-036 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

JUP governance uses staked JUP with 30-day unstaking period, creating a meaningful lock against flash-loan voting attacks. Governance is voluntarily paused since June 2025, so attack surface is dormant. Pre-pause, the staking lock substantially mitigated flash-loan governance attacks. Scored yellow because: (1) staking checkpoint behavior at proposal creation vs continuous cannot be confirmed from closed-source Realms implementation; (2) governance pause itself is a governance failure mode.

Sources #

Methodology #

Determine whether governance voting power is a function of current token balance of a transferable token with no lock or checkpoint, making it flash-loan susceptible.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol jupiter factor RD-F-036 score yellow collected_at 2026-04-29 11:51:25