Hot-patch deploys without timelock (last 30 days)
Liquid Collective (LsETH)'s assessment for RD-F-138 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Zero hot-patch deploys in last 30 days (and zero in last 6 months). Proxy Admin Safe last transaction was ~206 days before assessment date per Etherscan label. No upgrade pattern detected. All historical upgrades appear to follow an audit-then-deploy pattern (Spearbit/Certora audits precede each upgrade batch). No bypassed-timelock pattern — though the timelock is absent by design, the upgrade cadence is not hot-patch.
Sources #
- EtherscanProxy Admin Safe — no recent transactions, no hot-patch pattern0x8EE3fC0Bcd7B57429203751C5bE5fdf1AB8409f3 — last tx Oct 22, 2025 (~206 days before assessment)retrieved 2026-05-17
Methodology #
Count upgrades executed in the last 30 days without going through the declared timelock path.
See the full factor methodology and distribution across all protocols →