BlackHartBlackHart
Scores/Kinetiq/Provenance/Governance & Upgradeability
D5

Governance & Upgradeability

Admin key concentration, timelock coverage, upgrade mechanisms, and Maximum Extractable Value by Admin (MEVA).

Weight 10%85% confidence
62
Moderate
info

How This Score Is Built

Admin key concentration, timelock coverage, upgrade mechanisms, and Maximum Extractable Value by Admin (MEVA).

+23Strong positive
+12Positive
+5Slight positive
−15Strong negative
−8Negative
−3Slight negative

Scoring Tree

BRI Formula
300 + 700 × ∏(Dᵢ/100)^wᵢ
688
Current BRI
D5Governance & Upgradeability
Weight 9%
62
(62/100)^0.093 = 0.9565
Sub-Scores
Admin Multisig
75
Timelock
30
Upgrade Control
60
Contributing Factors
+16ON-CHAIN (cast): the upgrade/admin authority is a Gnosis Safe v1.3.0 multisig at 0x18A82c968b992D28D4D812920eB7b4305306f8F1 with 8 owners and a 4-of-8 threshold (nonce 60, actively used). This is a strong governance signal — upgrades and admin actions require 4 independent signers, not a single key. Raised D5 from 55 to 62 with high confidence (directly read).
+16Owners: 0x806e5F.., 0x99ed25.., 0x07C789.., 0xF0B3a9.., 0xFCADDd.., 0xDc1c4B.., 0x9bD23f.., 0x64cbED..
+16All 6 core contracts are UUPS-upgradeable (Initializable + UUPS) — the multisig can swap any implementation; remains a material (but multi-sig-gated) rug-adjacent surface
+16PauserRegistry centralizes pause/unpause under the same 4/8 Safe (PAUSE_ALL/PAUSER/UNPAUSER all held by 0x18A82c..)
-38DATA GAP / residual: no on-chain TIMELOCK observed in front of the Safe — upgrades execute immediately on 4/8 approval (no user exit window). This is the main residual governance concern and is why the score is 62, not higher.
Evidence Sources
blackhart_analysisMay 30sha256:7157e487b43b....

Sub-Score Breakdown

Admin Multisig
75
Timelock
30
Upgrade Control
60

Score Composition

-38

DATA GAP / residual: no on-chain TIMELOCK observed in front of the Safe — upgrades execute immediately on 4/8 approval (no user exit window). This is the main residual governance concern and is why the score is 62, not higher.

Negative
+16

ON-CHAIN (cast): the upgrade/admin authority is a Gnosis Safe v1.3.0 multisig at 0x18A82c968b992D28D4D812920eB7b4305306f8F1 with 8 owners and a 4-of-8 threshold (nonce 60, actively used). This is a strong governance signal — upgrades and admin actions require 4 independent signers, not a single key. Raised D5 from 55 to 62 with high confidence (directly read).

Positive
+16

Owners: 0x806e5F.., 0x99ed25.., 0x07C789.., 0xF0B3a9.., 0xFCADDd.., 0xDc1c4B.., 0x9bD23f.., 0x64cbED..

Positive
+16

All 6 core contracts are UUPS-upgradeable (Initializable + UUPS) — the multisig can swap any implementation; remains a material (but multi-sig-gated) rug-adjacent surface

Positive
+16

PauserRegistry centralizes pause/unpause under the same 4/8 Safe (PAUSE_ALL/PAUSER/UNPAUSER all held by 0x18A82c..)

Positive

Evidence Chain (1 files)

BlackHart AnalysisMay 30, 2026, 12:00 AM
sha256:7157e487b43b...

Score History

No dimension-level score changes recorded yet.

Methodology: 2.1Formula: 1.1Weights: 1.1
How is Governance & Upgradeability scored?← Back to Provenance Ledger