Guardian/pause-keeper distinct from upgrader
Yearn Finance's assessment for RD-F-034 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
EMERGENCY_MANAGER (shutdown trigger) and role_manager/upgrader (role authority) are distinct roles in V3 architecture. However, ychad multisig controls both via role_manager — not fully independent. Different function/purpose but same root authority. Structurally separated at the role level, converge at ychad.
Sources #
- DocsYearn Multisig — Yearn Docsdocs.yearn.fi/developers/security/multisig — ychad governs protocolretrieved 2026-05-16
- VaultV3.vy — yearn-vaults-v3 GitHubVaultV3.vy — 14-role enum, EMERGENCY_MANAGER separate from role_manager; TECH_SPEC.md confirms rolesretrieved 2026-05-16
Methodology #
Determine whether a pauser/guardian role exists and is held by an address distinct from the upgrader address.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol yearn-finance factor RD-F-034 score yellow collected_at 2026-05-16 08:34:32