defirisk.co
rubric v1.7.0

Timelock on sensitive actions

Usual (USD0 / bUSD0 / USUAL)'s assessment for RD-F-033 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No sensitive action (upgrade, mint, pause, oracle-set, floor-price-update, emergencyWithdraw) is timelocked. Role-gating via RegistryAccess is the sole control mechanism. The January 2025 floor price change demonstrated that economically-significant parameter changes can be activated immediately without delay — the FLOOR_PRICE_UPDATER_ROLE can act with no on-chain queue.

Sources #

Methodology #

For each sensitive action category (mint / pause / rescue / setOracle / upgrade), determine whether execution requires going through the declared timelock.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol usual factor RD-F-033 score red collected_at 2026-05-16 20:39:44