defirisk.co
rubric v1.7.0

Low-threshold multisig vs TVL

Axelar Network's assessment for RD-F-028 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Custom Multisig for operator/mintLimiter functions: 3-of-6 threshold for $144M TVS. Peer norm for $100M+ TVL is ≥4-of-7. 3-of-6 is below peer norm. All 6 signer addresses unattested — no public identity confirmations. Gateway upgrade path uses validator-quorum (much stronger). ITS surface has single bare EOA (worse than low-threshold multisig, captured by RD-F-027 red).

Sources #

  • Etherscan
    Custom Multisig readContract — EtherscanMultisig 0xCC940AE49C78F20E3F13F3cF37e996b98Ac3EC68: getThreshold()=3, 6 owners, signerEpoch=3retrieved 2026-05-17
  • Etherscan
    ITS admin EOA — EtherscanITS admin 0x6f24A47Fc8AE5441Eb47EFfC3665e70e69Ac3F05 is bare EOA (worse than low-threshold multisig) — see F027 for ITS surfaceretrieved 2026-05-17

Methodology #

Determine whether the multisig threshold is abnormally low relative to TVL peer cohort (e.g., 2-of-3 for a protocol with >$100M TVL where peer norm is 5-of-8).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol axelar factor RD-F-028 score yellow collected_at 2026-05-16 21:57:49