Upgrade multisig signer configuration (M/N)
Fluid's assessment for RD-F-026 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Avocado multisig at 0x4F6F977: _requiredSigners (uint8) and _signersCount in storage slot 1 per AvocadoMultisigVariables.sol but not readable via static WebFetch (JS-rendered Etherscan tab). Default threshold = 1; max signers = 90. Specific M/N for this instance not confirmed.
Sources #
- GitHubAvocadoMultisigVariables: _requiredSigners (uint8), _signersCount (uint8), default threshold = 1Instadapp/avocado-contracts-public AvocadoMultisigVariables.solretrieved 2026-04-29
- Avocado contract — 27 txs, proxy confirmed, threshold opaque via static fetch0x4F6F977aCDD1177DCD81aB83074855EcB9C2D49eretrieved 2026-04-29
Methodology #
Read `threshold` and `getOwners()` on the multisig controlling upgrade / sensitive ops. Store as `required` (M) and `total` (N); render as "M/N". For EOA admins record `required=1, total=1` (display "1/1"). Null when admin is immutable or full DAO with no fixed signer set.
See the full factor methodology and distribution across all protocols →