★ Admin has mint() with unlimited max
Liquid Collective (LsETH)'s assessment for RD-F-042 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No bare admin-callable mint() on LsETH. LsETH shares minted internally via _mintShares()/_mintRawShares() triggered only by Allowlist-gated deposits and earnings reporting. TLC governance token has fixed 1B supply (INITIAL_SUPPLY = 1_000_000_000e18), all minted at initTLCV1 — no ongoing mint. Admin controls the Allowlist (setAllowlist — onlyAdmin, no timelock) which governs who can deposit and thus trigger share minting — indirect admin influence over the minting path but not a direct unlimited mint function. Yellow because admin has indirect control over deposit eligibility without timelock.
Sources #
- GitHubTLC.1.sol — fixed 1B supply, no ongoing mint capabilityliquid-collective/liquid-collective-protocol/blob/main/contracts/src/TLC.1.sol — INITIAL_SUPPLY = 1_000_000_000e18, minted at initretrieved 2026-05-17
- River.1.sol — no admin-callable mint; shares minted by deposit flow onlyliquid-collective/liquid-collective-protocol/blob/main/contracts/src/River.1.sol — _mintShares() internal, no admin mint()retrieved 2026-05-17
Methodology #
Determine whether an admin-callable `mint` on a protocol token has no supply cap or an unlimited maximum supply.
See the full factor methodology and distribution across all protocols →