Admin key custody type

PancakeSwap's assessment for RD-F-025 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Hybrid custody: team-claimed multisig + legacy Timelock (6h delay). No on-chain Governor. Snapshot signaling with team execution. Admin for CAKE token = MasterChef; MasterChef owner = unconfirmed. FAQ states 'chefs use multisig for all contracts' but Safe API returned null and no Safe address identified.

Sources #

Docs
PancakeSwap FAQ — SecurityPancakeSwap FAQ — multisig and timelock mentionretrieved 2026-04-28
Etherscan
PancakeSwap Timelock — BscScanBscScan Timelock 0xA1f482Dc58145Ba2210bC21878Ca34000E2e8fE4retrieved 2026-04-28

Methodology #

Read the effective admin/owner/upgrader role on deployed contracts and classify as: EOA / multisig / multisig+timelock / full DAO+timelock / immutable.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol pancakeswap factor RD-F-025 score yellow collected_at 2026-04-28 19:10:57