Admin key custody type

Pendle Finance's assessment for RD-F-025 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Hybrid admin custody: ProxyAdmin owned by Deployer 1 EOA (single EOA for proxy upgrades); Governance Safe 3-of-5; Dev Multisig 2-of-5; Treasury 2-of-6. Effective upgrade posture is EOA despite multisig presence elsewhere.

Sources #

URL
Safe API Governance Safe configurationSafe API: Governance Safe 3-of-5; Dev Multisig 2-of-5; Treasury 2-of-6retrieved 2026-04-29
Etherscan
Pendle ProxyAdmin on EtherscanProxyAdmin 0xA28c08f165116587D4F3E708743B4dEe155c5E64 — owner is Pendle Deployer 1 EOAretrieved 2026-04-29

Methodology #

Read the effective admin/owner/upgrader role on deployed contracts and classify as: EOA / multisig / multisig+timelock / full DAO+timelock / immutable.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol pendle factor RD-F-025 score yellow collected_at 2026-04-28 21:09:40