Who can upgrade Sanctum SPL Stake Pool
Squads 6 of 11 · no delay
- Type
- Squads 6 of 11
- Threshold
- 6 of 11 signers
- Signers
- 11 listed
- Time lock
- None
- Config authority
- None: changes go through the multisig
- Effective delay
- no delay
- Address
- AApf…vP6b
Solana · Liquid staking
Forward Industries SOL
- TVL
- $281.03M
- Context only: never changes a rating
- 24h fees
- $40.43K
- +35.7% vs 7 days earlier
- Upgrade controller
- Squads 6 of 11 · no delay
- Weakest control over the core programs
- Stage
- Unrated
- Insufficient evidence to assign a Stage
- Last on-chain change
- None recorded
- Snapshot 2026-10-24 · read at Solana slot 460,976,623
Six risk factors independent ratings, never combined into one score
- Upgrade controlMediumSquads v3 multisig, 6 of 11 voters, time lock 0 s
- Upgrade delayHightime lock 0 s
- Admin powersLowthe registry lists no admin accounts; the evidence is the core programs' upgrade reads
- Code transparencyHighno public source
- Oracle dependencyNot applicablethe registry lists no price feeds; the evidence is the core programs' upgrade reads
- DependenciesLowall 1 callees rated Low on upgrade control
Summary
- Solana
- Liquid staking
- Squads-controlled
Forward Industries SOL is a liquid staking protocol on Solana. This page shows who can change it, how fast, and the on-chain account behind every rating.
Embed the Stage badge
HTML
<a href="https://celebtir.com/protocols/forward-sol/"><img src="https://celebtir.com/badges/forward-sol.svg" alt="Forward Industries SOL on Celebtir: Unrated"></a>Markdown
[](https://celebtir.com/protocols/forward-sol/)Value
Show as table
| Date | TVL |
|---|---|
| 2026-10-21 | $297.96M |
| 2026-10-24 | $281.03M |
Asset groups
| Group | Value | Share |
|---|---|---|
| Stablecoins | $0 | 0.0% |
| SOL and staked SOL | $281.03M | 100.0% |
| BTC | $0 | 0.0% |
| Other | $0 | 0.0% |
Tokens used
| Token | Used as | Worst rating |
|---|---|---|
| fwdSOL | deposit | Highnew supply can be minted by unrecognized controller 3ndM…2xnA |
Activity
Volume unavailable: no volume metric for this category; fees only.
Show as table
| Date | Fees |
|---|---|
| 2026-09-24 | $43.49K |
| 2026-09-25 | $0 |
| 2026-09-26 | $44.89K |
| 2026-09-27 | $47.58K |
| 2026-09-28 | $45.98K |
| 2026-09-29 | $0 |
| 2026-09-30 | $45.73K |
| 2026-10-01 | $46.14K |
| 2026-10-02 | $46K |
| 2026-10-03 | $0 |
| 2026-10-04 | $46.85K |
| 2026-10-05 | $46.79K |
| 2026-10-06 | $46.53K |
| 2026-10-07 | $0 |
| 2026-10-08 | $42.59K |
| 2026-10-09 | $42.48K |
| 2026-10-10 | $34.29K |
| 2026-10-11 | $34.74K |
| 2026-10-12 | $32.62K |
| 2026-10-13 | $36.84K |
| 2026-10-14 | $0 |
| 2026-10-15 | $36.06K |
| 2026-10-16 | $35.67K |
| 2026-10-17 | $35.32K |
| 2026-10-18 | $41.5K |
| 2026-10-19 | $42.01K |
| 2026-10-20 | $42.54K |
| 2026-10-21 | $42.82K |
| 2026-10-22 | $40.76K |
| 2026-10-23 | $40.43K |
Risk summary
- HighAn approved upgrade takes effect immediately. Withdrawal completion within that period is not established by these configuration facts.
- HighThe source of deployed program SP12…yvhY is not public, so users cannot review its behavior from published source.
- MediumCore program code can be replaced by 6 of 11 votersA multisig member with the Vote permission. Celebtir counts signers, not all members, when it compares a threshold. of multisigAn account that acts only when enough of its members approve. On Solana this is usually a Squads multisig. AApf…vP6b.
Risk analysis
Upgrade control
MediumSquadsThe multisig program most Solana protocols use to hold upgrade and admin keys (version 4 is supported). v3 multisig, 6 of 11 voters, time lockA wait between approving a change and the change taking effect, which gives users time to leave. 0 s
To improve: a multisig of 5+ voters at a 60%+ thresholdHow many signers of a multisig must approve before it can act. → LOW, or make the program immutableNo key can change it: the upgrade authority was removed, or the program was deployed with a loader that cannot upgrade.
Upgrade delay
Hightime lock 0 s
To improve: a time lock of 24 h+ → MEDIUM; 5 days+ → LOW
Admin powers
Lowthe registry lists no admin accounts; the evidence is the core programs' upgrade reads
To improve: none: LOW is the lowest risk level
Code transparency
Highno public source
To improve: publish the program's source → MEDIUM
Technical evidence (1 account)
- SP12…yvhY verified_build Solana slot 460,976,333
Oracle dependency
Not applicablethe registry lists no price feeds; the evidence is the core programs' upgrade reads
To improve: not applicable: nothing to improve
Dependencies
Lowall 1 callees rated Low on upgrade control
To improve: none: LOW is the lowest risk level
Stage
Unrated · 1 missing for Stage 0
StagesA protocol's headline level, from Stage 0 (the team can change everything quickly) to Stage 2 (users are protected even from the team). Stages describe control, not code security. describe who can change the protocol and how fast. They don't measure code security.
- Stage 0
- Stage 1
- Stage 2
Stage 0 2 of 3 met
- Met: core programs identified in the registry
- Missing: public source for every core program
- Met: upgrade control readable for every core program
Stage 1 4 of 6 met
- Met: upgrade control rated Low or Medium
Satisfied criterion and evidence
MEDIUM: Squads v3 multisig, 6 of 11 voters, time lock 0 s
Published Stage criteria - Missing: upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisig
Unmet criterion
SP12…yvhY: effective time lock 0 s; needs 5 days+ or an emergency multisig of 8+ voters at 75%+
Published Stage criteria - Met: admin powers rated Low or Medium
Satisfied criterion and evidence
LOW: the registry lists no admin accounts; the evidence is the core programs' upgrade reads
Published Stage criteria - Met: no multisig has a single-key config authorityA key that can change a Squads multisig's members, threshold and time lock without a vote. If it is set, it, not the multisig, is the real controller.
- Missing: verified buildsProof that the deployed program was built from a public commit, checked by OtterSec's verification service. for all core programs
- Met: every factor could be read (Unknown caps the Stage at 0)
Stage 2 1 of 2 met
- Missing: core programs immutable, or upgradeable only through on-chain governance with a long delay
- Met: no key can move or freeze user funds
Satisfied criterion and evidence
no admin keyA key stored in a protocol's own accounts that can change parameters, pause the protocol or move funds, without upgrading its code. can move or freeze funds
Published Stage criteria
Control graph
Click a box for its facts and evidenceThe on-chain account, field and slot a fact was read from, with a link to check it on Solscan.. Arrows point from who holds a power to what it controls. Controllers shared across protocols
Loading the interactive graph…
List view
- Key Unrecognized 3ndM…2xnA High
- can mint · no delay → fwdSOL
- Multisig Squads 6 of 11 · no delay AApf…vP6b Medium
- can upgrade · no delay → Sanctum SPL Stake Pool
- Token fwdSOL cPQP…sctm High
- used as deposit → Forward Industries SOL
- ← Unrecognized can mint · no delay
- Protocol Forward Industries SOL Unrated.
- ← Sanctum SPL Stake Pool core program
- ← fwdSOL used as deposit
Permissions
Unrecognized 3ndM…2xnA
Show in control graph| Power | Over | Delay | Evidence |
|---|---|---|---|
| Mint tokens | fwdSOL (Forward Industries) | no delay |
Squads 6 of 11 · no delay AApf…vP6b
Show in control graph| Power | Over | Delay | Evidence |
|---|---|---|---|
| Upgrade the code | Sanctum SPL Stake Pool | no delay |
Held by no one
- Freeze tokens: fwdSOL (Forward Industries) (renounced or immutable)
Programs
| Program | Role | Loader | Upgrade controller | Verification | Last upgrade |
|---|---|---|---|---|---|
| Sanctum SPL Stake Pool SP12…yvhY | Core | Upgradeable loader | Squads 6 of 11 · no delay | No public source | None found yet |
Upgrades & governance
- Upgrades
- 0
- Last upgrade
- None
- Average interval
- Not enough upgrades
- Last 30 days
- 0
History is still filling: 800 of 1,200 transactions examined so far.
No upgrades were found in the transactions examined so far.
Updates
No changes have been recorded for this protocol since tracking began.
Dependencies and sources
Called programs
- Stak…1111 Immutable Low
Registry sources
Registry entry last reviewed 2026-10-19 by celebtir-loop-draft. Report an error · Markdown version