defirisk.co
rubric v1.7.0

Admin has mint() with unlimited max

QuickSwap's assessment for RD-F-042 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

New QUICK (0xB5C064...) is a Polygon bridge child token. Supply changes occur via Polygon bridge gateway deposit() mechanism, not via a direct admin-callable mint(). QuickSwap docs document a 1B token cap. No direct unlimited admin mint() found on the QUICK token. Yellow because V2 feeToSetter (deployer EOA) can redirect all LP fees to any address (indirect value extraction by admin without limit). No unlimited direct mint confirmed.

Sources #

Methodology #

Determine whether an admin-callable `mint` on a protocol token has no supply cap or an unlimited maximum supply.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol quickswap factor RD-F-042 score yellow collected_at 2026-05-16 08:48:31