Emergency-veto multisig present

Ethena's assessment for RD-F-040 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

GATEKEEPER_ROLE holders (Ethena staff + external market makers/exchanges, ≥3 EOAs) can pause mint/redeem in EthenaMinting. Meaningful emergency halt capability. However, no formal veto multisig for governance proposals (because governance is off-chain). Specific gatekeeper addresses not published.

Sources #

Docs
Matrix of Multisig and Timelocks — Gatekeepers role: 'Disables mint/redeems...cannot re-enable'https://docs.ethena.fi/solution-design/key-trust-assumptions/matrix-of-multisig-and-timelocksretrieved 2026-04-28

Methodology #

Determine whether an emergency-veto or guardian multisig exists with power to cancel malicious proposals before execution.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol ethena factor RD-F-040 score yellow collected_at 2026-04-28 13:58:51