defirisk.co
rubric v1.7.0

Admin key custody type

Veda (BoringVault)'s assessment for RD-F-025 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Per-vault RolesAuthority model. liquidETH cluster: deployer EOA owned RolesAuthority Jun 2024–Apr 2026. Ownership transferred Apr 20 + May 4 2026 to TimelockController (0x80Ce8a917beec6Db0f632F2710916fcaA621874A) with minDelay=0. TimelockController's sole proposer/executor = 3-of-5 Gnosis Safe 0xD6E47E0F34ECc031E676254fd8b0E61b656a15a5 (U18 confirmed). Categorical: nominally multisig+timelock but timelock delay = 0.

Sources #

Methodology #

Read the effective admin/owner/upgrader role on deployed contracts and classify as: EOA / multisig / multisig+timelock / full DAO+timelock / immutable.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol veda factor RD-F-025 score yellow collected_at 2026-05-17 12:41:22