Guardian/pause-keeper distinct from upgrader
ether.fi's assessment for RD-F-034 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
PROTOCOL_PAUSER role is distinct from PROTOCOL_UPGRADER role. EtherFiAdmin.pause() uses PROTOCOL_PAUSER. Upgrade authorization uses onlyProtocolUpgrader() via RoleRegistry. These are separate roles assignable to distinct addresses.
Sources #
- GitHubEtherFiAdmin — separate pause/upgrade rolesEtherFiAdmin.sol — PROTOCOL_PAUSER vs upgrader rolesretrieved 2026-04-28
- LiquidityPool — upgrade vs admin role separationLiquidityPool.sol — _authorizeUpgrade uses onlyProtocolUpgraderretrieved 2026-04-28
Methodology #
Determine whether a pauser/guardian role exists and is held by an address distinct from the upgrader address.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol ether-fi factor RD-F-034 score green collected_at 2026-04-28 13:58:46