defirisk.co
rubric v1.7.0

Admin = deployer EOA after 7 days

M^0's assessment for RD-F-043 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Deployer EOA 0xf2f1acbe0ba726fee8d75f3e32900526874740bb (labeled M0: Deployer) is currently proxy admin/owner of SwapFacility, HubPortal, and Portal Lite. Protocol launched 2024-05-07 — well beyond 7-day window. Deployer EOA still active (last tx 2026-05-12, setSupportedBridgingPath on HubPortal). Core contracts are immutable with no admin — deployer EOA risk limited to periphery only.

Sources #

Methodology #

Determine whether, at t = deploy+7d, the admin address still equals the deployer EOA with no evidence of transfer to a multisig.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol m0 factor RD-F-043 score yellow collected_at 2026-05-16 09:46:19