★ Rescue/emergencyWithdraw without timelock
Sky Lending (formerly MakerDAO)'s assessment for RD-F-041 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
MCD Vat verified source has no rescue/sweep/withdraw/emergencyWithdraw function. Admin functions: rely, deny, file, init, cage. cage() = sets live=0 (irreversible shutdown, not fund withdrawal). Emergency spells bypass GSM for parameter pauses only (not fund-withdrawal paths). No admin drain path without governance vote.
Sources #
- Etherscanhttps://etherscan.io/address/0x35D1b3F3D7966A1DFe207aa4514C12a259A0492B#coderetrieved 2026-04-28
- https://github.com/sky-ecosystem/dss-emergency-spellsretrieved 2026-04-28
- https://github.com/sky-ecosystem/dss/blob/master/src/vat.solretrieved 2026-04-28
Methodology #
Determine whether a `rescue(…)` or `emergencyWithdraw(…)` function exists callable by admin without a timelock delay on execution.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol sky-lending factor RD-F-041 score green collected_at 2026-04-28 00:43:18