DeFi Admin Key OpSec Risk Assessment

	B	C	D	E	F	G	H	I	J
1
2	This information is now being maintained & updated at:
3	https://defiwatch.net
4
5	For more info on this spreadsheet, watch this video:
6	https://youtu.be/U9fVIPhWj6c
7
8	Disclaimer: This data was collected via a combination of conversations with core teams and indepdendent research of publicly available materials. I'm just a guy sharing some interesting data that I collected. Nothing in this spreadsheet constitutes investment advice. All of these protocols are still experimental and risky to use. I make no warranties as to the validity or accuracy of this data. Expect some errors or oversights. Use this as a guide and DYOR. Please direct edits & additions to https://t.me/chrisblec. Be sure to include links & sources.
9
10
11
12		↓ Mouse over these headers for more information on each column. ↓
13		Current Admin Key Config - Time Lock	Current Admin Key Config - Multisig	Claimed Admin Key OpSec	Verified Admin Key OpSec	Is security of deposited funds dependent on opsec of admin key?	Admin Key Address	Documentation on Admin Key Powers	Additional Info (if any)
14	Compound	2 days	No	"Offline multi-party process"	Unverifiable	Yes	Link	Open Zeppelin Audit Summary	Blog Post
15	TokenSets	No	2-of-3	"Ledger hw wallets"	Unverifiable	Yes	Link	Whitepaper (Section 10)	Trail of Bits Audit Report (page 32)
16	Aave	No	3-of-5 tokens (Aragon DAO)	"Voting keys in cold storage"	Unverifiable	Yes	Link	Open Zeppelin Audit Summary	Aave Security Report
17	dYdX	3 days	2-of-3	None	Unverifiable	Yes	Link	Help Center Article	Bramah Audit (Highly Privileged Accounts)
18	bZx	12 hours	No	None	Unverifiable	Yes	Link	Blog post (Governance - maybe outdated)
19	PoolTogether	No	2-of-N (Gnosis)	None	Unverifiable	Yes	Link	Open Zeppelin Audit Disclosures	Open Zeppelin Audit Summary
20	Dharma	7 days	3-of-5	None	Unverifiable	Yes	Link	Tweet	Github ReadMe (section: Upgradeability)
21	DDEX	3 days	2-of-3	None	Unverifiable	Yes	Link	None found
22	Synthetix	Unknown	Unknown	None	Unverifiable	Yes	Unknown	None found	Currently advertised as centralized
23	Nuo	Unknown	Unknown	None	Unverifiable	Likely	Unknown	None found
24	Maker	Decentralized governance		N/A	N/A	No	N/A	N/A	Risk due to decentralized governance mechanism
25	Instadapp	No admin key or upgrade abilities		N/A	N/A	No	N/A	N/A	Systematic risk via Compound admin key
26	Uniswap	No admin key or upgrade abilities		N/A	N/A	No	N/A	N/A	Tokens offer varying level of admin key risk
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100