★ Rescue/emergencyWithdraw without timelock
Marinade Finance's assessment for RD-F-041 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
pause(), resume(), emergency_unstake(), and withdraw_stake_account() exist in the program. These are gated by pause_authority (4/7 Council) and/or admin_authority. No timelock on these functions — Council multisig signature is the only gate. Not a raw-EOA rescue path (multisig required) but timelock absence is a yellow finding.
Sources #
- GitHubMarinade lib.rs — instruction listingmarinade-finance/liquid-staking-program lib.rs — pause, resume, emergency_unstake, withdraw_stake_account instructionsretrieved 2026-05-16
- Marinade governance update Oct-2023Marinade blog Oct-2023 — emergency pause feature introduced in v2 upgraderetrieved 2026-05-16
Methodology #
Determine whether a `rescue(…)` or `emergencyWithdraw(…)` function exists callable by admin without a timelock delay on execution.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol marinade factor RD-F-041 score yellow collected_at 2026-05-16 08:48:35