Hot-patch deploys without timelock (last 30 days)

Evidence summary #

No timelock exists on the primary admin path (RD-F-032 red). Core contracts are immutable so traditional proxy hot-patches are impossible. Parameter/permission changes by the 6-of-11 multisig execute without timelock. The November 2025 emergency response executed immediate factory disabling and gauge killing without timelock — intentionally as emergency response. Cannot confirm specific parameter changes in last 30 days.

Sources #

Methodology #

Count upgrades executed in the last 30 days without going through the declared timelock path.

See the full factor methodology and distribution across all protocols →