Admin key custody type

Circle USYC's assessment for RD-F-025 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

All EVM proxy upgrade authority is held by EOAs. Ethereum USYC upgrades executed by 0x13FF8Cabb86eDf94a2dF4f98773bda4005182dD6 (unlabeled EOA funded by Hashnote Deployer). BSC USYC proxy constructor sets admin to 0xb2b98e8672d4aad438f6ffec581cfe6f745496ff (Hashnote Deployer EOA). No multisig, no timelock, no DAO. Categorical: EOA.

Sources #

Etherscan
Hashnote Deployer EOA - Etherscan0xb2b98e8672d4aad438f6ffec581cfe6f745496ff labelled Hashnote Deployer, EOA type confirmedretrieved 2026-05-16
Etherscan
USYC ETH proxy upgrade tx #9 Dec 2025Upgrade tx 0x3a1fae1d446d0ee2b4e6b35038f9214694228a7c530745b90eed8ac3baa2b53c FROM 0x13FF8Cabb86eDf94a2dF4f98773bda4005182dD6retrieved 2026-05-16
Internal
00-data-cache.json governance fieldsData cache safe_multisigs: [], governor_address: null, timelock_address: nullretrieved 2026-05-16

Methodology #

Read the effective admin/owner/upgrader role on deployed contracts and classify as: EOA / multisig / multisig+timelock / full DAO+timelock / immutable.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol circle-usyc factor RD-F-025 score red collected_at 2026-05-15 21:56:43