Hot-patch deploys without timelock (last 30 days)

Evidence summary #

Frequent binary releases of the aggregator (metis-binary) occur without any documented timelock process. Squads multisig signature threshold is the only control — zero additional time delay. This is the Solana-native equivalent of hot-patch deploys without timelock. However, the multisig threshold (≥4 signers required) is a meaningful control even without a timelock delay.

Sources #

Methodology #

Count upgrades executed in the last 30 days without going through the declared timelock path.

See the full factor methodology and distribution across all protocols →