defirisk.co
rubric v1.7.0

Role separation: upgrade ≠ fee ≠ oracle

Lombard Finance's assessment for RD-F-035 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

ABI exposes changeRedeemFee() (fee), changeAssetRouter() (router/oracle config), and upgrade path as structurally distinct. However, actual address assignments for fee/oracle-config roles vs. upgrade role could not be confirmed as pointing to distinct addresses from public reads. May all route to the same multisig.

Sources #

  • Etherscan
    https://etherscan.io/address/0x072072317469ebb6c340a47e41561c9c3b782bd9#coderetrieved 2026-05-05

Methodology #

Determine whether the upgrade role, fee-collection role, and oracle-config role are assigned to distinct addresses.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol lombard factor RD-F-035 score yellow collected_at 2026-05-05 12:03:08