Admin key custody type

Sushi (SushiSwap) — v2 + v3 + Trident + BentoBox/Kashi + SushiXSwap's assessment for RD-F-025 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Effective admin is multisig without on-chain timelock. Ops Multisig (0x19B3Eb3Af5D93b77a5619b047De0EED7115A19e7) is a Gnosis Safe 1.3.0 active as of 2026-05-15. Treasury Multisig (0xe94B5EEC1fA96CEecbD33EF5Baa8d00E4493F4f3) is Gnosis Safe 1.1.1. No active on-chain timelock wired to live governance. Legacy Timelock (0x9a8541...) is inactive since 2020-09-27 with $0 balance. Classified: multisig without timelock.

Sources #

Etherscan
SushiSwap: Operation Multisig — EtherscanSushiSwap Operation Multisig Etherscan page — Gnosis Safe 1.3.0 label confirmedretrieved 2026-05-17
Etherscan
Sushi: Timelock — Etherscan (inactive)Legacy Timelock — last tx 2020-09-27, balance $0retrieved 2026-05-17
Internal
00-data-cache.json safe_multisigs[0]data-cache safe_multisigs[0] Safe API response: type Gnosis Safe 1.3.0, threshold 3, owners 5retrieved 2026-05-17

Methodology #

Read the effective admin/owner/upgrader role on deployed contracts and classify as: EOA / multisig / multisig+timelock / full DAO+timelock / immutable.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sushi factor RD-F-025 score yellow collected_at 2026-05-16 19:50:37