Hot-patch deploys without timelock (last 30 days)

Save (formerly Solend)'s assessment for RD-F-138 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

The upgrade path is a single EOA with no timelock — every deploy is inherently without timelock by structural reality. Any upgrade executed since launch (including v2 in 2023) bypassed any timelock. No specific hot-patches in last 30 days documented in public sources, but structural reality makes this a permanent red condition.

Sources #

Internal
Save profile — no timelock.research/protocols/save/00-profile.md §6 — no on-chain upgrade timelock detectedretrieved 2026-05-17
Internal
SOLANA_GOVERNANCE.md — no timelock on BPF upgradesSOLANA_GOVERNANCE.md — Solana BPFLoaderUpgradeable has no built-in timelock; single-EOA upgrade authority can deploy instantlyretrieved 2026-05-17

Methodology #

Count upgrades executed in the last 30 days without going through the declared timelock path.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol save factor RD-F-138 score red collected_at 2026-05-17 15:20:15