★ delegatecall/call in proposal execution without allowlist

Evidence summary #

Not applicable. Solana does not support delegatecall. Sanctum uses MetaDAO futarchy governance, not an EVM-style Governor/Timelock executor. Proposal execution in futarchy settles via conditional market outcomes — no arbitrary calldata execution. Even if a decision passes, it must be executed by the multisig which is constrained to normal Solana instruction types.

Sources #

Methodology #

Determine whether the governance executor contract uses `delegatecall` or `call` with proposal-supplied target, without enforcing an allowlist of permitted targets.

See the full factor methodology and distribution across all protocols →