Admin/upgrade transaction in mempool
M^0's assessment for RD-F-102 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Deployer EOA 0xf2f1acbe0ba726fee8d75f3e32900526874740bb is the proxy admin of HubPortal (0xD925C84b...), Portal Lite (0x36f586A3...), SwapFacility (0xB6807116...), and WrappedM (0x437cc333...). These are upgradeable proxies with no timelock on proxy admin control. Any upgradeTo()/upgradeToAndCall() call from this EOA would immediately satisfy the signal criteria. Deployer EOA was active 2026-05-12 (bridge management). No current admin/upgrade tx observed in mempool (static assessment cannot confirm in real time — T-09 phase-2 infrastructure required). Yellow because structural absence of timelock on bridge proxy upgrades creates persistent fire-risk: signal would fire immediately on any unexpected upgrade without advance governance notice.
Sources #
- InternalM0 protocol profile — realtime-intel-analyst flags for proxy admin assessmentProfile Section 11 realtime-intel-analyst flags: 'Immutable core contracts (non-proxy) — F099 (oracle manipulation), F103 (pause/unpause), F106 (admin key rotation), F182 may have structural N/A or limited applicability for the immutable core contracts. Assess against the proxy/upgradeable periphery contracts (HubPortal, Portal Lite, SwapFacility).'retrieved 2026-05-16
- M0 HubPortal ERC1967 Proxy — deployer EOA is proxy creator, upgrade control unconfirmedHubPortal 0xD925C84b55E4e44a53749fF5F2a5A13F63D128fd — ERC1967 proxy deployed by M0: Deployer (0xf2f1acbe0ba726fee8d75f3e32900526874740bb); no ProxyAdmin contract or timelock confirmed on proxy admin slotretrieved 2026-05-16
Methodology #
Detect an admin-role or upgrade transaction appearing in the mempool before confirmation.
See the full factor methodology and distribution across all protocols →