Signer rotation recency
Veda (BoringVault)'s assessment for RD-F-031 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Significant signer-set change: TimelockController deployed May 4 2026 (13 days ago) with Safe 0xD6E47E0F (3-of-5, U18 confirmed) as sole proposer/executor. Prior structure: deployer EOA directly. This is a major governance restructuring event within the last 30 days. The 3-of-5 Safe was created Dec 18 2025 (~5 months ago). Recent rapid change warrants yellow — new structure is young and untested under adversarial conditions.
Sources #
- EtherscanSafe 0xD6E47E0F — creation date Dec 18 2025Safe 0xD6E47E0F creation tx Dec 18 2025retrieved 2026-05-17
- TimelockController deployment — governance restructuring eventTimelockController deployment tx 0x85bd5824d3a488785ffd5d8ee1ef21da9b21ebd9350fbb9021dab4bfa485b7b9 — May 4 2026, new governance structure; Safe Transaction Service confirmed 3-of-5retrieved 2026-05-17
Methodology #
Measure the number of months since the most recent signer-set change (add/remove signer) on the admin multisig; flag if threshold was reduced within 14 days of a timelock removal or new-signer addition.
See the full factor methodology and distribution across all protocols →