Security-Council threshold reduction (RT)
QuickSwap's assessment for RD-F-182 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
F182 (Security-Council threshold reduction event, Cat 6B batch-24). QuickSwap does not have a formal Security Council; the 2-of-4 MultiSigWalletWithDailyLimit is the admin. Threshold reduction from 2-of-4 to 1-of-4, timelock removal (no timelock exists), or new-signer addition within 14 days of threshold change would trigger. Polygonscan review of multisig: no RequirementChange or OwnerAddition/OwnerRemoval events visible in recent 25 transactions. Threshold confirmed at 2-of-4. Last admin action: January 24, 2026 (routine confirmation). Key note: because there is NO timelock, the detection window for any threshold change followed by malicious tx is maximally compressed (seconds to minutes). Current posture: no threshold-change event observed; signal not firing.
Sources #
- InternalQuickSwap protocol profile section 600-profile.md section 6: timelock_address null; TRUE NEGATIVE for timelock; 2-of-4 threshold confirmed; owners enumeratedretrieved 2026-05-16
- QuickSwap admin multisig | PolygonScanMultiSigWalletWithDailyLimit 0xdB74C5D4...: constructor shows 4 owners, 2-of-4 threshold, daily limit 0; recent txs show only Confirm/Submit/Execute — no RequirementChange or owner change events visibleretrieved 2026-05-16
Methodology #
Detect in real-time whether the bridge/protocol Security Council multisig executes a threshold reduction (e.g. 3/5 → 2/5), timelock removal, or new-signer addition within ≤14 days of either of those events.
See the full factor methodology and distribution across all protocols →