★ Rescue/emergencyWithdraw without timelock
Lista DAO's assessment for RD-F-041 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
GitHub search for rescue/emergencyWithdraw returned zero results in lista-dao-contracts. Interaction.sol has no named rescue function. However, rely()/deny() in Interaction.sol allows admin to arbitrarily grant/revoke permissions without timelock — functional admin escalation path without a named rescue function. No single-call full-drain path confirmed.
Sources #
- GitHubLista DAO Interaction.sol — admin function analysisInteraction.sol: no rescue function; admin functions lack timelock protectionretrieved 2026-05-12
- Lista DAO GitHub code search — rescue/emergencyWithdraw absentGitHub search repo:lista-dao/lista-dao-contracts rescue emergencyWithdraw: zero resultsretrieved 2026-05-12
Methodology #
Determine whether a `rescue(…)` or `emergencyWithdraw(…)` function exists callable by admin without a timelock delay on execution.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol lista-dao factor RD-F-041 score yellow collected_at 2026-05-12 17:54:05