★ Admin = deployer EOA after 7 days

Cap (cUSD / stcUSD)'s assessment for RD-F-043 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Admin role (DEFAULT_ADMIN_ROLE on AccessControl) is held by dev multisig, not the deployer EOA. Deployer EOA retains only Timelock EXECUTOR role by design from launch. Grant/revoke operations on AccessControl were performed via the Timelock from launch.

Sources #

Etherscan
AccessControl contract — admin is dev multisigAccessControl (0x7731...): Grant Access operations performed via Timelock, not direct deployer EOA calls to AccessControl. Admin = dev multisig.retrieved 2026-05-17

Methodology #

Determine whether, at t = deploy+7d, the admin address still equals the deployer EOA with no evidence of transfer to a multisig.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol cap factor RD-F-043 score green collected_at 2026-05-17 10:56:24