Admin key custody type
JustLend DAO's assessment for RD-F-025 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Full DAO+timelock custody. GovernorBravo + 48h Timelock is the admin path. CertiK 2022 audit confirmed ownership transfer: Unitroller/CEther/CErc20Delegator -> Timelock -> GovernorBravo. Protocol states 'no admin key, no rug vectors.' Tronscan API confirms GovernorBravoDelegator is_proxy=true with proxy_implementation TB5EbocVaTwYj6v8Vd3Vw5CRoDss8oNMP8 and Timelock TRWNvb15NmfNKNLhQpxefFz7cNjrYjEw7x has standard Compound Timelock method signatures.
Sources #
- EtherscanJustLend GovernorBravoDelegator — Tronscan APITronscan API: GovernorBravoDelegator TEqiF5JbhDPD77yjEfnEMncGRZNDt2uogD — is_proxy=true, proxy_implementation=TB5EbocVaTwYj6v8Vd3Vw5CRoDss8oNMP8retrieved 2026-05-17
- JustLend CertiK Security Assessment (April 2022)CertiK security assessment April 8 2022: 'CEther, Unitroller and CErc20Delegator contracts transferred ownership to a Timelock contract with a minimal 48 hours delay, and the Timelock contract transferred ownership to a governance contract to increase transparency and user involvement.'retrieved 2026-05-17
- JustLend Timelock — Tronscan APITronscan API: Timelock TRWNvb15NmfNKNLhQpxefFz7cNjrYjEw7x — name=Timelock, verification_status=2, methods: executeTransaction, queueTransaction, setDelay, setPendingAdmin, acceptAdminretrieved 2026-05-17
Methodology #
Read the effective admin/owner/upgrader role on deployed contracts and classify as: EOA / multisig / multisig+timelock / full DAO+timelock / immutable.
See the full factor methodology and distribution across all protocols →