Hot-patch deploys without timelock (last 30 days)
Sushi (SushiSwap) — v2 + v3 + Trident + BentoBox/Kashi + SushiXSwap's assessment for RD-F-138 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Core contracts are immutable; no proxy hot-patches possible. RouteProcessor deployments bypass any timelock (Ops Multisig direct deployment). No specific hot-patch in the last 30 days confirmed from available sources. On-chain event query for last 30d not performed.
Sources #
- Internal00-profile.md §3Profile §3 — core contracts immutable; RouteProcessor series deployed directretrieved 2026-05-17
Methodology #
Count upgrades executed in the last 30 days without going through the declared timelock path.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol sushi factor RD-F-138 score gray collected_at 2026-05-16 19:50:37