# Jito

> Not investment advice. Ratings describe on-chain configuration only and may contain errors.

Snapshot 2026-10-24, methodology v0.2. Source: Celebtir, CC BY 4.0.

## Summary

- Chain: Solana
- Category: liquid-staking
- Stage: Stage 0
- TVL: $1.05B
- Website: https://www.jito.network/
- Core programs controlled by a Squads multisig

## Value

Asset groups unavailable: asset groups exceed the TVL.
- JitoSOL (deposit): worst rating High. new supply can be minted by unrecognized controller 6iQK…pVSS owned by program 1111…1111

## Activity

- 24h volume: unavailable: no volume metric for this category; fees only
- 24h fees: $145.75K (+13.9% over 7 days)

## Risk summary

- High: An approved upgrade takes effect immediately. Withdrawal completion within that period is not established by these configuration facts.
- Medium: The deployed code of SPoo1Ku8WFXoNDMHPsrGSTSG1Y47rzgn41SLUNakuHy has not been verified against its public source.

## Risk analysis

- Upgrade control: **Low**. Squads v3 multisig, 6 of 10 voters, time lock 0 s. To improve: none: LOW is the lowest risk level.
  - Evidence: [EmiU8AQkB2sswTxVB6aCmsAJftoowZGGDXuytm6X65R3](https://solscan.io/account/EmiU8AQkB2sswTxVB6aCmsAJftoowZGGDXuytm6X65R3) `upgrade_authority` at slot 460976701
  - Evidence: [3yqoHFE4nBGchuVH5rJuZMFvsmnaDTuLLdvGPDUEJcbW](https://solscan.io/account/3yqoHFE4nBGchuVH5rJuZMFvsmnaDTuLLdvGPDUEJcbW) `threshold, time_lock, members, config_authority` at slot 460976702
- Upgrade delay: **High**. time lock 0 s. To improve: a time lock of 24 h+ → MEDIUM; 5 days+ → LOW.
  - Evidence: [EmiU8AQkB2sswTxVB6aCmsAJftoowZGGDXuytm6X65R3](https://solscan.io/account/EmiU8AQkB2sswTxVB6aCmsAJftoowZGGDXuytm6X65R3) `upgrade_authority` at slot 460976701
  - Evidence: [3yqoHFE4nBGchuVH5rJuZMFvsmnaDTuLLdvGPDUEJcbW](https://solscan.io/account/3yqoHFE4nBGchuVH5rJuZMFvsmnaDTuLLdvGPDUEJcbW) `threshold, time_lock, members, config_authority` at slot 460976702
- Admin powers: **Low**. the registry lists no admin accounts; the evidence is the core programs' upgrade reads. To improve: none: LOW is the lowest risk level.
  - Evidence: [EmiU8AQkB2sswTxVB6aCmsAJftoowZGGDXuytm6X65R3](https://solscan.io/account/EmiU8AQkB2sswTxVB6aCmsAJftoowZGGDXuytm6X65R3) `upgrade_authority` at slot 460976701
  - Evidence: [3yqoHFE4nBGchuVH5rJuZMFvsmnaDTuLLdvGPDUEJcbW](https://solscan.io/account/3yqoHFE4nBGchuVH5rJuZMFvsmnaDTuLLdvGPDUEJcbW) `threshold, time_lock, members, config_authority` at slot 460976702
- Code transparency: **Medium**. source public at https://github.com/jito-foundation, but the deployed build is not verified. To improve: verify the deployed build against public source (OtterSec) → LOW.
  - Evidence: [SPoo1Ku8WFXoNDMHPsrGSTSG1Y47rzgn41SLUNakuHy](https://solscan.io/account/SPoo1Ku8WFXoNDMHPsrGSTSG1Y47rzgn41SLUNakuHy) `verified_build` at slot 460976700
- Oracle dependency: **Not applicable**. the registry lists no price feeds; the evidence is the core programs' upgrade reads. To improve: not applicable: nothing to improve.
  - Evidence: [EmiU8AQkB2sswTxVB6aCmsAJftoowZGGDXuytm6X65R3](https://solscan.io/account/EmiU8AQkB2sswTxVB6aCmsAJftoowZGGDXuytm6X65R3) `upgrade_authority` at slot 460976701
  - Evidence: [3yqoHFE4nBGchuVH5rJuZMFvsmnaDTuLLdvGPDUEJcbW](https://solscan.io/account/3yqoHFE4nBGchuVH5rJuZMFvsmnaDTuLLdvGPDUEJcbW) `threshold, time_lock, members, config_authority` at slot 460976702
- Dependencies: **Low**. all 1 callees rated Low on upgrade control. To improve: none: LOW is the lowest risk level.
  - Evidence: [SPoo1Ku8WFXoNDMHPsrGSTSG1Y47rzgn41SLUNakuHy](https://solscan.io/account/SPoo1Ku8WFXoNDMHPsrGSTSG1Y47rzgn41SLUNakuHy) `transaction sample (50 transactions)` at slot 460976887
  - Evidence: [6WU8Nxarf9fudRK5atWwjLY4vFaw5UrrWhL88qz7iCMJ](https://solscan.io/account/6WU8Nxarf9fudRK5atWwjLY4vFaw5UrrWhL88qz7iCMJ) `upgrade_authority` at slot 460976990

## Stage

Stage 0. Stages describe who can change the protocol and how fast. They don't measure code security.

- [x] Stage 0: core programs identified in the registry (1 core programs)
- [x] Stage 0: public source for every core program (all core programs have public source)
- [x] Stage 0: upgrade control readable for every core program (upgrade control read for all core programs)
- [x] Stage 1: upgrade control rated Low or Medium (LOW: Squads v3 multisig, 6 of 10 voters, time lock 0 s)
- [ ] Stage 1: upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisig (SPoo1Ku8WFXoNDMHPsrGSTSG1Y47rzgn41SLUNakuHy: effective time lock 0 s; needs 5 days+ or an emergency multisig of 8+ voters at 75%+)
- [x] Stage 1: admin powers rated Low or Medium (LOW: the registry lists no admin accounts; the evidence is the core programs' upgrade reads)
- [x] Stage 1: no multisig has a single-key config authority (no single-key config authority)
- [ ] Stage 1: verified builds for all core programs (not verified: SPoo1Ku8WFXoNDMHPsrGSTSG1Y47rzgn41SLUNakuHy)
- [x] Stage 1: every factor could be read (Unknown caps the Stage at 0) (no Unknown factors)
- [ ] Stage 2: core programs immutable, or upgradeable only through on-chain governance with a long delay (upgradeable without 30 days+ governance delay: SPoo1Ku8WFXoNDMHPsrGSTSG1Y47rzgn41SLUNakuHy)
- [x] Stage 2: no key can move or freeze user funds (no admin key can move or freeze funds)

## Control graph

- SPL Stake Pool → Jito: core program
- JitoSOL → Jito: used as deposit
- Unrecognized → JitoSOL: can mint · no delay
- Squads 6 of 10 · no delay → SPL Stake Pool: can upgrade · no delay

## Permissions

- Unrecognized [6iQKfEyhr3bZMotVkW6beNZz5CPAkiwvgV2CTje9pVSS](https://solscan.io/account/6iQKfEyhr3bZMotVkW6beNZz5CPAkiwvgV2CTje9pVSS)
  - Mint tokens: JitoSOL (Jito), no delay
- Squads 6 of 10 · no delay [3yqoHFE4nBGchuVH5rJuZMFvsmnaDTuLLdvGPDUEJcbW](https://solscan.io/account/3yqoHFE4nBGchuVH5rJuZMFvsmnaDTuLLdvGPDUEJcbW)
  - Upgrade the code: SPL Stake Pool, no delay
- Held by no one: Freeze tokens (JitoSOL (Jito))

## Programs

- SPL Stake Pool [SPoo1Ku8WFXoNDMHPsrGSTSG1Y47rzgn41SLUNakuHy](https://solscan.io/account/SPoo1Ku8WFXoNDMHPsrGSTSG1Y47rzgn41SLUNakuHy): core, Upgradeable loader, controller Squads 6 of 10 · no delay, public source at https://github.com/jito-foundation, not verified, last upgrade none found

## Upgrades & governance

- Upgrades: 0 so far (history still filling)
- Last upgrade: none
- Average interval: not enough upgrades

## Updates

No changes have been recorded for this protocol since tracking began.

## Dependencies and sources

- Calls [Stake11111111111111111111111111111111111111](https://solscan.io/account/Stake11111111111111111111111111111111111111): Immutable, rated Low
- Registry source for multisig Squads v4 (3yqoHFE4nBGchuVH5rJuZMFvsmnaDTuLLdvGPDUEJcbW): https://solscan.io/account/3yqoHFE4nBGchuVH5rJuZMFvsmnaDTuLLdvGPDUEJcbW
- Registry source for program SPL Stake Pool (SPoo1Ku8WFXoNDMHPsrGSTSG1Y47rzgn41SLUNakuHy): https://spl.solana.com/stake-pool
- Registry entry last reviewed: 2026-10-19 by celebtir-loop-draft

Web page: /protocols/jito/