Guardian/pause-keeper distinct from upgrader

Evidence summary #

PAUSER_ROLE is a distinct named role from DEFAULT_ADMIN_ROLE in AccessControl, but the management multisig holds DEFAULT_ADMIN_ROLE and can reassign any role — functional separation is limited. No separate guardian confirmed for Flux Finance.

Sources #

Methodology #

Determine whether a pauser/guardian role exists and is held by an address distinct from the upgrader address.

See the full factor methodology and distribution across all protocols →