Hot-patch deploys without timelock (last 30 days)
JustLend DAO's assessment for RD-F-138 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No evidence of hot-patch deploys outside the Timelock path in the last 30 days. March 2026 GitHub activity was a config change (removing dev private key), not a contract deployment. Cannot confirm absence of hot-patches without TRON event indexing for implementation changes.
Sources #
- GitHubJustLend Protocol GitHub — March 2026 commitGitHub last commit March 2026: 'Merge pull request #26 from justlend/feature/security-config' — security config change, not a contract deployment.retrieved 2026-05-17
Methodology #
Count upgrades executed in the last 30 days without going through the declared timelock path.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol justlend factor RD-F-138 score gray collected_at 2026-05-17 10:25:32