Admin key custody type

Concrete's assessment for RD-F-025 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

ConcreteFactory owner is a 3-of-5 Gnosis Safe (0xdc29BD10CB9000dffBb5aAcD30606c66f07c866C, Safe 1.4.1). VaultProxy admin is the ConcreteFactory. No timelock interposed. Pattern: multisig without timelock — yellow by rubric (multisig present but no delay).

Sources #

Etherscan
ConcreteFactory Proxy — EtherscanConcreteFactory proxy 0x0265d73a: TransparentUpgradeableProxy; upgrade executed via Safe execTransaction March 19, 2026retrieved 2026-05-17
URL
Safe Transaction Service — Concrete factory owner SafeSafe API: threshold=3, owners=5, nonce=26, version=1.4.1 for 0xdc29BD10CB9000dffBb5aAcD30606c66f07c866Cretrieved 2026-05-17

Methodology #

Read the effective admin/owner/upgrader role on deployed contracts and classify as: EOA / multisig / multisig+timelock / full DAO+timelock / immutable.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol concrete factor RD-F-025 score yellow collected_at 2026-05-17 14:36:59