defirisk.co
rubric v1.7.0

Low-threshold multisig vs TVL

Convex Finance's assessment for RD-F-028 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

3-of-5 Gnosis Safe at $613M TVL. Threshold is within the cohort norm for this TVL range (3/5 to 5/9 is typical for $500M-$1B protocols). However, two risk amplifiers: (1) all 5 signers are anonymous/pseudonymous with no public identity attestations -- effective trust is 3 of 5 unknown individuals; (2) no general timelock backstop on routine admin calls means a 3-signer compromise has immediate effect on fee rates, pool management, and vote delegation. Not abnormally low by count, but amplified by anonymity.

Sources #

  • Internal
    Data cache -- Safe API multisig configuration.research/protocols/convex-finance/00-data-cache.json safe_multisigs[0] threshold=3, owner_count=5retrieved 2026-05-16
  • Docs
    Convex Finance -- Multisig Admin Rights3-of-5 multisig confirmed; team anonymous per profileretrieved 2026-05-16

Methodology #

Determine whether the multisig threshold is abnormally low relative to TVL peer cohort (e.g., 2-of-3 for a protocol with >$100M TVL where peer norm is 5-of-8).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol convex-finance factor RD-F-028 score yellow collected_at 2026-05-16 02:41:28