defirisk.co
rubric v1.7.0

Admin key custody type

Wormhole's assessment for RD-F-025 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Admin key custody type | Hybrid: Guardian-multisig (19 nodes, 13/19 threshold) for Core Bridge upgrades + W token DAO (MultiGov) for protocol parameters. No traditional Gnosis Safe or OZ Timelock. | Governance.sol GitHub; Profile §6; Wormhole Docs guardians page | green

Sources #

  • Curator note
    Extracted from 02-governance-admin.md — RD-F-025; no URL citedretrieved 2026-04-28

Methodology #

Read the effective admin/owner/upgrader role on deployed contracts and classify as: EOA / multisig / multisig+timelock / full DAO+timelock / immutable.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol wormhole factor RD-F-025 score gray collected_at 2026-04-28 01:38:43