Admin key custody type
Veda (BoringVault)'s assessment for RD-F-025 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Per-vault RolesAuthority model. liquidETH cluster: deployer EOA owned RolesAuthority Jun 2024–Apr 2026. Ownership transferred Apr 20 + May 4 2026 to TimelockController (0x80Ce8a917beec6Db0f632F2710916fcaA621874A) with minDelay=0. TimelockController's sole proposer/executor = 3-of-5 Gnosis Safe 0xD6E47E0F34ECc031E676254fd8b0E61b656a15a5 (U18 confirmed). Categorical: nominally multisig+timelock but timelock delay = 0.
Sources #
- EtherscanRolesAuthority readContract — owner confirmedRolesAuthority 0x4df6b733 readContract: owner = 0x0463e60c (ether.fi: Deployer 4)retrieved 2026-05-17
- TransferOwnership tx — RolesAuthority to TimelockControllertx 0xb19dec5edbadc94cb7e6aca07a7f138b6a623dc827585528c0ad4f7205114d4e — transferOwnership from EOA to TimelockController 0x80Ce8a917 on May 4 2026retrieved 2026-05-17
Methodology #
Read the effective admin/owner/upgrader role on deployed contracts and classify as: EOA / multisig / multisig+timelock / full DAO+timelock / immutable.
See the full factor methodology and distribution across all protocols →