Deprecated contract paused but pause reversible by live admin
Balancer (v2 + v3)'s assessment for RD-F-167 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
v2 TimelockAuthorizer (0x9E3cD0606...) is DEPRECATED in the deployments registry — not connected to the Vault. Original Authorizer (0xA331D84eC860...) is also superseded. These are authorization contracts (not TVL-holding contracts). They are not formally paused; they are simply bypassed by routing through the current AuthorizerWithAdaptorValidation. The DAO Multisig still theoretically holds pause-role on these deprecated contracts. No evidence of significant TVL held by deprecated authorization contracts.
Sources #
- EtherscanBalancer: TimelockAuthorizer (deprecated)TimelockAuthorizer 0x9E3cD0606Db55ac68845bB60121847823712ae05retrieved 2026-05-05
- Balancer Deployments Registry — DEPRECATED entriesTimelockAuthorizer DEPRECATED status in mainnet.jsonretrieved 2026-05-05
Methodology #
Determine whether a deprecated-and-paused contract's pause state is revertible by a currently-live admin role.
See the full factor methodology and distribution across all protocols →