Role separation: upgrade ≠ fee ≠ oracle

OpenEden's assessment for RD-F-035 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Upgrade role = Safe 0x8Ec4dD2D. Oracle update role = OPERATOR_ROLE on Price Oracle (0xFa2E954c). Fee collection = treasury addresses configured by Safe but distinct addresses from the upgrader. Three roles are held by distinct addresses.

Sources #

Etherscan
TBILL Price Oracle role separation confirmationTBILL Price Oracle 0xCe9a6626: DEFAULT_ADMIN_ROLE = Safe 0x8Ec4dD2D, OPERATOR_ROLE = 0xFa2E954c (distinct)retrieved 2026-05-16

Methodology #

Determine whether the upgrade role, fee-collection role, and oracle-config role are assigned to distinct addresses.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol openeden factor RD-F-035 score green collected_at 2026-05-16 10:11:45