Role separation: upgrade ≠ fee ≠ oracle

Evidence summary #

Upgrade role: Operations Multisig; Pause role: Pauser Multisig; Rewards/fee parameters: controlled via ELIP process through Protocol Council; Oracle: no price oracle in EigenLayer core. Distinct role holders confirmed for principal roles. Minor concentration: Operations Multisig holds both timelock admin and canceler roles.

Sources #

Methodology #

Determine whether the upgrade role, fee-collection role, and oracle-config role are assigned to distinct addresses.

See the full factor methodology and distribution across all protocols →