UUPS _authorizeUpgrade correctly permissioned

Frax Finance's assessment for RD-F-021 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

The frxUSD OFT adapter (0x566a6442) is a TransparentUpgradeableProxy — uses ProxyAdmin for upgrades, NOT UUPS. All other core contracts (sfrxETH, FraxlendPairs, FraxEtherRedemptionQueueV2, FraxGovernorAlpha/Omega) are non-upgradeable contracts with constructors. UUPS _authorizeUpgrade pattern is not used in the Frax deployment architecture reviewed.

Sources #

Etherscan
frxUSD OFT Adapter EtherscanfrxUSD OFT adapter is TransparentUpgradeableProxy — not UUPSretrieved 2026-05-17

Methodology #

Determine whether the UUPS implementation defines `_authorizeUpgrade(address)` restricted to owner/admin/timelock (not open to arbitrary callers).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol frax factor RD-F-021 score not_applicable collected_at 2026-05-16 20:44:31