Admin key custody type

Hyperliquid's assessment for RD-F-025 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Bridge2 proxy admin is a Hyper Foundation multisig (undisclosed address, threshold unknown). L1 critical operations require 2/3 stake-weighted cold-validator quorum. Operational parameters controlled by Hyperliquid Labs via closed-source L1 binary. Classification: multisig without timelock on upgrades. Admin type is multisig but transparency is low.

Sources #

URL
HYPERLIQUID Critical Infrastructure Risk Assessment February 2026mefai Feb 2026 risk assessmentretrieved 2026-04-28
URL
Cross-Chain Transfer Mechanism in Hyperliquid: Architecture and Proxy DesignMedium proxy-design analysisretrieved 2026-04-28

Methodology #

Read the effective admin/owner/upgrader role on deployed contracts and classify as: EOA / multisig / multisig+timelock / full DAO+timelock / immutable.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol hyperliquid factor RD-F-025 score yellow collected_at 2026-04-28 13:58:49