★ Admin = deployer EOA after 7 days
Convex Finance's assessment for RD-F-043 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Deployer EOA (0x947B7742C403f20e5FaCcDAc5E092C943E7D0277) does not hold current admin roles on core protocol contracts. BoosterOwner is owned by the 3-of-5 multisig (0xa3C5A1e...). Protocol has been live 5 years (since May 2021); ownership was transferred to multisig structure at or shortly after launch. Recent deployer transactions route through the multisig (exec transaction pattern observed). Deployer is a historical artifact not a current admin.
Sources #
- EtherscanBoosterOwner -- EtherscanBoosterOwner 0x3cE640... owner() = 0xa3C5A1e (multisig, not deployer)retrieved 2026-05-16
- Convex Finance Deployer EOA -- EtherscanDeployer 0x947B7742... recent txs show exec transactions through multisig; not direct admin callsretrieved 2026-05-16
Methodology #
Determine whether, at t = deploy+7d, the admin address still equals the deployer EOA with no evidence of transfer to a multisig.
See the full factor methodology and distribution across all protocols →