defirisk.co
rubric v1.7.0

Admin key custody type

Meteora's assessment for RD-F-025 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

DLMM upgrade authority is off-curve PDA controlled by Squads v3 multisig CoEsykatDegLB7pcMJia79JSriDdi71nPnjgeSfw623k. Effective admin custody type is multisig with no on-chain timelock. MET governance: forum-based, not yet on-chain (July 2025 forum: no viable DAO voting plan). Other programs (DAMM v1/v2, DBC, Alpha Vault, M3M3, Dynamic Vault, Mercurial legacy) upgrade authorities not individually decoded this pass. SolanaCompass references Realms SafeSnap but not confirmed operational.

Sources #

Methodology #

Read the effective admin/owner/upgrader role on deployed contracts and classify as: EOA / multisig / multisig+timelock / full DAO+timelock / immutable.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol meteora factor RD-F-025 score yellow collected_at 2026-05-16 10:03:05