defirisk.co
rubric v1.7.0

Timelock duration on upgrades

Superstate's assessment for RD-F-032 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No timelock contract exists for USTB or USCC proxy upgrades. All 4 USTB upgrades (Dec 2024, Feb 2025, Apr 2025, Jul 2025) and 4 USCC upgrades were executed directly by the owning EOA through the ProxyAdmin in a single transaction with zero delay between decision and execution. Data-cache governance.timelock_address = null. No TimelockController or equivalent contract found in superstateinc/ustb GitHub repo. Timelock duration = 0 hours.

Sources #

Methodology #

Read the timelock delay (in hours) between a queued upgrade proposal and its executable state.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol superstate factor RD-F-032 score red collected_at 2026-05-16 00:06:37