Timelock on sensitive actions

Synapse Protocol's assessment for RD-F-033 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

GOVERNANCE_ROLE (fee/pause) and NODEGROUP_ROLE (mint/withdraw) actions have zero timelock. Only upgrades nominally timelocked at 3 minutes, which is effectively no delay.

Sources #

GitHub
https://github.com/synapsecns/synapse-contracts/blob/master/contracts/bridge/SynapseBridge.solretrieved 2026-04-26

Methodology #

For each sensitive action category (mint / pause / rescue / setOracle / upgrade), determine whether execution requires going through the declared timelock.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol synapse factor RD-F-033 score red collected_at 2026-04-26 21:35:35