Guardian/pause-keeper distinct from upgrader
Polymarket's assessment for RD-F-034 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No separate guardian/pause-keeper role. CTFExchange V2 admin multisig (0x3dce0a29) holds both pause authority and operator-management. pUSD owner controls both UUPS upgrade and MINTER_ROLE grants. Same entity controls all sensitive roles.
Sources #
- GitHubCollateralToken.sol — _authorizeUpgrade onlyOwner (no timelock); addMinter onlyOwnerPolymarket/ctf-exchange-v2/src/collateral/CollateralToken.solretrieved 2026-04-29
- Auth.sol — no timelock mechanism; addAdmin/addOperator execute immediatelyPolymarket/ctf-exchange-v2/src/exchange/mixins/Auth.solretrieved 2026-04-29
Methodology #
Determine whether a pauser/guardian role exists and is held by an address distinct from the upgrader address.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol polymarket factor RD-F-034 score red collected_at 2026-04-29 16:25:39