★ Rescue/emergencyWithdraw without timelock

Evidence summary #

Aggregator and perps programs are closed-source binaries — cannot enumerate admin-callable functions. No rescue/emergencyWithdraw function documented in public sources. Jupiter Lend has admin-controlled operations (LendingAdmin account) but no explicit rescue/sweep function identified in reviewed code. Structural gray for closed-source programs; cannot confirm presence or absence of rescue function.

Sources #

Methodology #

Determine whether a `rescue(…)` or `emergencyWithdraw(…)` function exists callable by admin without a timelock delay on execution.

See the full factor methodology and distribution across all protocols →