★ Single admin EOA
Jupiter Perpetual Exchange's assessment for RD-F-027 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Upgrade authority 5myNNmEmPm3UAnJ2ggLEpnTFb9t9Gk8369wKw6n3uAKx confirmed is_on_curve=FALSE (off-curve PDA, no private key exists). SOLANA_GOVERNANCE.md Step2: off-curve = PDA, cannot be a single-key ed25519 keypair. Transaction trace sig pmpDzKGTLCvhJ7DQ58hFkCEfPB4eorHbDohcjaUBaEpGEWEGeQ21SiVDJvr5EUKfqhmobKYHfV3dGgjsSa1Ztuq confirms this PDA is controlled by Squads v4 program SQDS4ep65T869zMMBKyuUq6aD6EgTu8psMjkvj52pCf via parent multisig AxkJ8oH5aDu4ZRWfsujPtxdb6Vhq4gDehpoReBgrUUSm. No single private key can sign upgrades unilaterally. Single-admin-EOA condition is falsified. Updated from not_assessed: deterministic on-chain result.
Sources #
- DocsSquads Multisig Program Management — off-curve PDA methodologySOLANA_GOVERNANCE.md Step2: off-curve discriminator is authoritative for Solana PDA classification; Squads vault PDAs are System-Program-owned by design (not EVM Safe pattern); on-curve=EOA, off-curve=PDA only signable by controlling programretrieved 2026-05-16
- Squads v4 program SQDS4ep65T on SolscanMainnet RPC on-chain derivation (SOLANA_GOVERNANCE.md 4-step): getAccountInfo(PERPHjGB...)→ProgramData→upgrade_authority=5myNNm...; is_on_curve=FALSE; tx sig pmpDzKGTLC...→Squads v4 CPI; parent multisig AxkJ8oH5...; decoded threshold=4/members=7/time_lock=86400sretrieved 2026-05-16
Methodology #
Determine whether the effective upgrade/owner/rescue role is held by a single EOA (not a multisig) with no timelock on sensitive operations.
See the full factor methodology and distribution across all protocols →