defirisk.co
rubric v1.7.0

Admin = deployer EOA after 7 days

Orca's assessment for RD-F-043 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Current upgrade authority is Squads v4 multisig PDA, not the deployer EOA. Whirlpools launched March 2022; governance and multisig structure was established from early operations. Squads v4 verified as current controller. No deployer-as-sole-admin pattern at any point in accessible history.

Sources #

  • Internal
    Data cache — Squads v4 vault is current and verified upgrade authoritycache sources.solana_multisigs[0]: verified_type=squads_v4_vault; role=whirlpools_program_upgrade_authorityretrieved 2026-05-16
  • URL
    Orca Whirlpools launch announcement (2022-03-23)https://medium.com/orca-so/introducing-whirlpools-concentrated-liquidity-on-orca-3987c131a44dretrieved 2026-05-16

Methodology #

Determine whether, at t = deploy+7d, the admin address still equals the deployer EOA with no evidence of transfer to a multisig.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol orca factor RD-F-043 score green collected_at 2026-05-16 02:39:16