defirisk.co
rubric v1.7.0

Admin/upgrade transaction in mempool

Chainlink CCIP's assessment for RD-F-102 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

T-09 v1 production signal (v1 phase 2 infra required). Applicable for upgradeable contracts (OnRamp/OffRamp/TokenPools via MCMS+RBACTimelock). Router (0x80226fc0ee2b096224eeac085bb9a8cba1146f7d) is immutable — exempt from this signal. ARM/RMN proxy upgrades (via ARMProxy 0x411dE17f12D1A34ecC7F45f49844626267c75e81) would transit timelock. No unusual admin/upgrade tx detected in mempool context from public sources. 2-day RBACTimelock provides a 48-hour detection window before execution. MCMS multi-party sign-off requirement before timelock queue reduces probability of undetected admin tx.

Sources #

  • Etherscan
    ARMProxy — EtherscanARMProxy 0x411dE17f12D1A34ecC7F45f49844626267c75e81 — proxy pattern, upgradeable via governanceretrieved 2026-05-16
  • Etherscan
    CCIP Router — EtherscanCCIP Router (Ethereum) 0x80226fc0ee2b096224eeac085bb9a8cba1146f7d — immutable by design per profile §3retrieved 2026-05-16

Methodology #

Detect an admin-role or upgrade transaction appearing in the mempool before confirmation.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol chainlink-ccip factor RD-F-102 score green collected_at 2026-05-16 01:55:09