defirisk.co
rubric v1.7.0

Admin key custody type

JustLend DAO's assessment for RD-F-025 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Full DAO+timelock custody. GovernorBravo + 48h Timelock is the admin path. CertiK 2022 audit confirmed ownership transfer: Unitroller/CEther/CErc20Delegator -> Timelock -> GovernorBravo. Protocol states 'no admin key, no rug vectors.' Tronscan API confirms GovernorBravoDelegator is_proxy=true with proxy_implementation TB5EbocVaTwYj6v8Vd3Vw5CRoDss8oNMP8 and Timelock TRWNvb15NmfNKNLhQpxefFz7cNjrYjEw7x has standard Compound Timelock method signatures.

Sources #

  • Etherscan
    JustLend GovernorBravoDelegator — Tronscan APITronscan API: GovernorBravoDelegator TEqiF5JbhDPD77yjEfnEMncGRZNDt2uogD — is_proxy=true, proxy_implementation=TB5EbocVaTwYj6v8Vd3Vw5CRoDss8oNMP8retrieved 2026-05-17
  • Audit
    JustLend CertiK Security Assessment (April 2022)CertiK security assessment April 8 2022: 'CEther, Unitroller and CErc20Delegator contracts transferred ownership to a Timelock contract with a minimal 48 hours delay, and the Timelock contract transferred ownership to a governance contract to increase transparency and user involvement.'retrieved 2026-05-17
  • Etherscan
    JustLend Timelock — Tronscan APITronscan API: Timelock TRWNvb15NmfNKNLhQpxefFz7cNjrYjEw7x — name=Timelock, verification_status=2, methods: executeTransaction, queueTransaction, setDelay, setPendingAdmin, acceptAdminretrieved 2026-05-17

Methodology #

Read the effective admin/owner/upgrader role on deployed contracts and classify as: EOA / multisig / multisig+timelock / full DAO+timelock / immutable.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol justlend factor RD-F-025 score green collected_at 2026-05-17 10:25:32