★ delegatecall/call in proposal execution without allowlist

SUNSwap (sun.io)'s assessment for RD-F-039 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

SUN DAO governance is veSUN gauge-weight voting, not a proposal-execution engine with delegatecall or arbitrary call. GaugeController admin functions are discrete (add_type, add_gauge, change_type_weight, change_gauge_weight, transfer_ownership) — no delegatecall or call with user-supplied target. N/A by factor definition.

Sources #

GitHub
GaugeController.vy — no delegatecall execution pathsun-dao-contracts GaugeController.vy: admin functions are discrete gauge management calls, no delegatecall or arbitrary executionretrieved 2026-05-17

Methodology #

Determine whether the governance executor contract uses `delegatecall` or `call` with proposal-supplied target, without enforcing an allowlist of permitted targets.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sunswap factor RD-F-039 score not_applicable collected_at 2026-05-17 14:37:31