Admin key custody type

Orca's assessment for RD-F-025 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Upgrade authority is Squads v4 vault PDA (multisig + on-chain 24h timelock). Pipeline-verified: verified_type=squads_v4_vault, verified_time_lock_seconds=86400. Fee authority and config authority roles exist in WhirlpoolConfig and are controlled through the same Squads multisig. Classification: multisig+timelock.

Sources #

URL
Orca Whirlpool Parameters — fee authority and config authority roleshttps://dev.orca.so/Architecture%20Overview/Whirlpool%20Parameters/retrieved 2026-05-16
Internal
Orca data cache — solana_multisigscache sources.solana_multisigs[0]: verified_type=squads_v4_vault, verified_time_lock_seconds=86400, retrieved_at=2026-05-16T02:13:34Zretrieved 2026-05-16
GitHub
Whirlpool program lib.rs (Anchor/Rust — confirms non-EVM substrate)https://github.com/orca-so/whirlpools/blob/main/programs/whirlpool/src/lib.rsretrieved 2026-05-16

Methodology #

Read the effective admin/owner/upgrader role on deployed contracts and classify as: EOA / multisig / multisig+timelock / full DAO+timelock / immutable.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol orca factor RD-F-025 score green collected_at 2026-05-16 02:39:16