defirisk.co
rubric v1.7.0

Upgrade multisig signer configuration (M/N)

Spark Protocol's assessment for RD-F-026 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

DSPauseProxy imposes a 48-hour on-chain timelock on all governance-initiated changes to SparkLend. Timelock is enforced in MakerDAO's Pause contract and cannot be bypassed by Phoenix Labs.

Detail #

{"required": null, "total": null, "display": "DAO", "governance": "DSPauseProxy (48-hour timelock, MakerDAO/Sky on-chain governance; no fixed-signer multisig on upgrade path)", "checked_at": "2026-04-27T01:00:42Z"}

Sources #

Methodology #

Read `threshold` and `getOwners()` on the multisig controlling upgrade / sensitive ops. Store as `required` (M) and `total` (N); render as "M/N". For EOA admins record `required=1, total=1` (display "1/1"). Null when admin is immutable or full DAO with no fixed signer set.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol spark factor RD-F-026 score green collected_at 2026-04-27 01:00:42