defirisk.co
rubric v1.7.0

Quorum achievable via single-entity flash loan

Jupiter's assessment for RD-F-037 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

JUP governance requires staked (locked) JUP with 30-day unstaking period. Flash loan cannot achieve governance quorum: attacker cannot acquire JUP, stake it, and vote within a single atomic transaction. Quorum was set at 30% of total staked JUP. With ~672M JUP staked, quorum is ~200M tokens which cannot be flash-loan staked. Governance is currently paused (dormant risk).

Sources #

Methodology #

Determine whether the governance quorum threshold is ≤ the largest available flash-loan notional in the governance token at reference DEX depth.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol jupiter factor RD-F-037 score green collected_at 2026-04-29 11:51:25