★ Admin = deployer EOA after 7 days

Wormhole's assessment for RD-F-043 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Admin = deployer EOA + no multisig transfer in 7d | Deployer EOA is not the current admin. Guardian-based governance was in effect from launch (August 2021). Etherscan upgrade history shows governance has always been through guardian VAA, not a single deployer EOA. | Etherscan Upgraded events (earliest: Aug 4, 2021, Block 12959638); Governance.sol | **green**

Sources #

Curator note
Extracted from 02-governance-admin.md — RD-F-043; no URL citedretrieved 2026-04-28

Methodology #

Determine whether, at t = deploy+7d, the admin address still equals the deployer EOA with no evidence of transfer to a multisig.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol wormhole factor RD-F-043 score gray collected_at 2026-04-28 01:38:43