defirisk.co
rubric v1.7.0

Bridge uses same key custody for >30% validators

Wormhole's assessment for RD-F-156 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Bridge uses same key custody for >30% of validators | 19 guardians across distinct organizations. Jump Crypto (historically a major actor, was both guardian and financial backer post-2022-hack) status post-2023 spin-out (Wormhole Foundation independence) needs verification. No evidence that any single custodian holds >30% of guardian keys. Most are independent validator companies with their own key management. Cannot confirm definitively without OSINT. | Profile §6 guardian list; profile note...

Sources #

  • Curator note
    Extracted from 03-oracle-deps.md — RD-F-156; no URL citedretrieved 2026-04-28

Methodology #

Determine whether >30% of bridge validators share a single key custodian.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol wormhole factor RD-F-156 score gray collected_at 2026-04-28 01:38:43