★ Admin = deployer EOA after 7 days
Across Protocol's assessment for RD-F-043 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Admin = deployer EOA + no transfer in 7d | Protocol is 4.5 years old. HubPool deployed 2021-11-06 with Council multisig as deployer-linked admin. Risk Labs Deployer `0x9a8f92a830` has no current admin role on HubPool, ConfigStore, or SpokePools (labeled deployer by Etherscan, not owner). No evidence of deployer EOA retention. | Etherscan: HubPool contract creator vs current owner mismatch; profile §3 deployer address; governance manual | green
Sources #
- Curator noteExtracted from 02-governance-admin.md — RD-F-043; no URL citedretrieved 2026-04-28
Methodology #
Determine whether, at t = deploy+7d, the admin address still equals the deployer EOA with no evidence of transfer to a multisig.
See the full factor methodology and distribution across all protocols →