★ Admin has mint() with unlimited max
Frax Finance's assessment for RD-F-042 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
frxUSD includes minter_mint(address, uint256) callable by addresses added via addMinter(address). The contract owner (Comptroller 3-of-5) can call addMinter() to add any address, which can then mint arbitrary amounts. No hard on-chain supply cap enforced in the contract — caps are governance-set per custodian but contract does not enforce a global hard ceiling. Architecture permits expanding minting authority to unlimited if the multisig chose to do so. Not currently unlimited, but pathway exists.
Sources #
- URLfrxUSD Token Review | Chaos LabsChaos Labs: each custodian operates under a governance-set limit for minting frxUSDretrieved 2026-05-17
- FrxUSD Implementation | EtherscanfrxUSD impl 0x0000000048d2c8 source: minter_mint(address,uint256) and addMinter(address) functions; no hard supply cap in contractretrieved 2026-05-17
Methodology #
Determine whether an admin-callable `mint` on a protocol token has no supply cap or an unlimited maximum supply.
See the full factor methodology and distribution across all protocols →