defirisk.co
rubric v1.7.0

Role separation: upgrade ≠ fee ≠ oracle

Stake DAO's assessment for RD-F-035 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

GOVERNANCE address (0xB0552b6860CE5C0202976Db056b5e3Cc4f9CC765) is distinct from PROXY_ADMIN (0xfE612c237A81527a86f2Cac1FD19939CF4F91B9B). However oracle-config role not separately enumerated, and PROXY_ADMIN owner unconfirmed. Partial separation visible; not all three roles confirmed as distinct.

Sources #

  • GitHub
    SDEthereum Address BookSDEthereum address book: GOVERNANCE=0xB0552b..., PROXY_ADMIN=0xfE612c..., TIMELOCK=0xD3cFc4... — three distinct addressesretrieved 2026-05-16

Methodology #

Determine whether the upgrade role, fee-collection role, and oracle-config role are assigned to distinct addresses.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol stake-dao factor RD-F-035 score yellow collected_at 2026-05-16 12:29:20