Upgrade multisig signer configuration (M/N)

crvUSD (Curve Stablecoin)'s assessment for RD-F-026 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

ControllerFactory admin is 1/1 (single EOA). Emergency DAO is 5/9 (adequate for its limited role). Aragon governance uses veCRV with no fixed signer set (display: DAO). Primary upgrade-equivalent path for the CDP system is 1/1 EOA.

Sources #

Etherscan
ControllerFactory readContractControllerFactory admin() = 0xbabe61887f1de2713c6f97e567623453d3c79f67 (1/1 EOA)retrieved 2026-05-16
Internal
00-data-cache.json safe_multisigsData cache safe_multisigs[0]: threshold=5, owners=9 for Emergency DAO 0x467947EE34aF926cF1DCac093870f613C96B1E0cretrieved 2026-05-16

Methodology #

Read `threshold` and `getOwners()` on the multisig controlling upgrade / sensitive ops. Store as `required` (M) and `total` (N); render as "M/N". For EOA admins record `required=1, total=1` (display "1/1"). Null when admin is immutable or full DAO with no fixed signer set.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol crvusd factor RD-F-026 score red collected_at 2026-05-16 19:09:40