defirisk.co
rubric v1.7.0

Admin has mint() with unlimited max

Wormhole's assessment for RD-F-042 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Admin has `mint(…)` with unlimited max | W token has documented 10B hard cap (confirmed via tokenomics blog). Minting authority assigned to NTT Manager contracts (cross-chain transfers only). Guardian set cannot directly call mint on W token ERC-20 at `0xb0ffa8`. No unlimited mint path via guardian governance found. The W token implementation uses `AccessControlDefaultAdminRulesUpgradeable`; full minter role analysis requires NTT Manager owner verification. | W token Etherscan (proxy note, su...

Sources #

  • Curator note
    Extracted from 02-governance-admin.md — RD-F-042; no URL citedretrieved 2026-04-28

Methodology #

Determine whether an admin-callable `mint` on a protocol token has no supply cap or an unlimited maximum supply.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol wormhole factor RD-F-042 score gray collected_at 2026-04-28 01:38:43