defirisk.co
rubric v1.7.0

Admin EOA signing from new geography/device

Kamino Lend's assessment for RD-F-107 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Gray — off-chain signing telemetry requires team opt-in. Admin is Squads multisig not single EOA. Signal practically always gray for team-opt-in dependent monitoring.

Detail #

Upgrade authority is Squads multisig, not a single EOA. Off-chain signing geography/device fingerprint monitoring would require team integration with Squads signing telemetry. This is not available from public sources.

Sources #

  • Curator note
    Off-chain admin signing telemetry requires team opt-in (device fingerprint, geography). Upgrade authority is Squads multisig — mitigates single-signer risk but makes off-chain telemetry inaccessible without team integration.retrieved 2026-04-27

Methodology #

Detect whether an admin/upgrader EOA signs from a geography or device fingerprint inconsistent with prior signing history.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol kamino-lend factor RD-F-107 score gray collected_at 2026-04-30 21:19:16