Highaccepts cbBTC as collateral, which is rated High (Supply control: new supply can be minted by single key CTQE…wy3p; Freeze and seize powers: balances can be frozen by single key DSFA…AVnz)
Highaccepts INF as collateral, which is rated High (Supply control: new supply can be minted by unrecognized controller AYhu…CGvW owned by program 5ocn…x9kx)
Highaccepts JitoSOL as collateral, which is rated High (Supply control: new supply can be minted by unrecognized controller 6iQK…pVSS owned by program 1111…1111)
Highaccepts JLP as collateral, which is rated High (Supply control: new supply can be minted by unrecognized controller AVzP…QK49 owned by program PERP…qQJu; Freeze and seize powers: balances can be frozen by unrecognized controller AVzP…QK49 owned by program PERP…qQJu)
Highaccepts JupSOL as collateral, which is rated High (Supply control: new supply can be minted by unrecognized controller EMju…QDNw owned by program 1111…1111)
Highbalances can be frozen by unrecognized controller CkzL…BZNA; new supply can be minted by unrecognized controller CkzL…BZNA
Activity
Volume unavailable: no volume metric for this category; fees only.
FeesDaily fees in US dollars, from DefiLlama.Show as table
Fees
Date
Fees
2026-09-24
$138.66K
2026-09-25
$156.88K
2026-09-26
$156.48K
2026-09-27
$152.98K
2026-09-28
$152.9K
2026-09-29
$156.95K
2026-09-30
$142.61K
2026-10-01
$133.54K
2026-10-02
$131.66K
2026-10-03
$129.93K
2026-10-04
$130.83K
2026-10-05
$133.01K
2026-10-06
$138.06K
2026-10-07
$139.27K
2026-10-08
$132.36K
2026-10-09
$155.42K
2026-10-10
$152.28K
2026-10-11
$131.91K
2026-10-12
$171.63K
2026-10-13
$164.3K
2026-10-14
$163.89K
2026-10-15
$163.86K
2026-10-16
$185.3K
2026-10-17
$159.88K
2026-10-18
$161K
2026-10-19
$180.46K
2026-10-20
$129.59K
2026-10-21
$125.99K
2026-10-22
$116.08K
2026-10-23
$136.08K
Risk summary
HighAn approved upgrade takes effect after 12 h. Withdrawal completion within that period is not established by these configuration facts.
MediumProtocol parameters can be changed by 4 of 7 votersA multisig member with the Vote permission. Celebtir counts signers, not all members, when it compares a threshold. of multisigAn account that acts only when enough of its members approve. On Solana this is usually a Squads multisig.5Y93…eASF using authority.
MediumThe deployed code of jup3…ndc9 has not been verified against its public source.
MediumThe deployed code of jupZ…T9Vd has not been verified against its public source.
MediumThe deployed code of jupe…3wZC has not been verified against its public source.
MediumThe deployed code of jupg…N6XS has not been verified against its public source.
MediumThe deployed code of jupr…Bdzi has not been verified against its public source.
5 programs: SquadsThe multisig program most Solana protocols use to hold upgrade and admin keys (version 4 is supported). v4 multisig, 4 of 6 voters, time lockA wait between approving a change and the change taking effect, which gives users time to leave. 12 h
authority can change parameters, held by Squads v4 multisig, 4 of 7 voters, time lock 6 h; authority can change parameters, held by Squads v4 multisig, 4 of 7 voters, time lock 6 h; authority can change parameters, held by Squads v4 multisig, 4 of 7 voters, time lock 6 h
To improve: limit admin keysA key stored in a protocol's own accounts that can change parameters, pause the protocol or move funds, without upgrading its code. to parameters behind a 24 h+ time lock, or renounce them → LOW
StagesA protocol's headline level, from Stage 0 (the team can change everything quickly) to Stage 2 (users are protected even from the team). Stages describe control, not code security. describe who can change the protocol and how fast. They don't measure code security.
Stage 0 (current)
Stage 1
Stage 2
Stage 0 3 of 3 met
✓Met: core programs identified in the registrySatisfied criterion and evidence
✗Missing: upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisigUnmet criterion
jup3…ndc9: effective time lock 12 h; jupZ…T9Vd: effective time lock 12 h; jupe…3wZC: effective time lock 12 h; jupg…N6XS: effective time lock 12 h; jupr…Bdzi: effective time lock 12 h; needs 5 days+ or an emergency multisig of 8+ voters at 75%+
✓Met: admin powers rated Low or MediumSatisfied criterion and evidence
MEDIUM: authority can change parameters, held by Squads v4 multisig, 4 of 7 voters, time lock 6 h; authority can change parameters, held by Squads v4 multisig, 4 of 7 voters, time lock 6 h; authority can change parameters, held by Squads v4 multisig, 4 of 7 voters, time lock 6 h
✓Met: no multisig has a single-key config authorityA key that can change a Squads multisig's members, threshold and time lock without a vote. If it is set, it, not the multisig, is the real controller.Satisfied criterion and evidence
✗Missing:verified buildsProof that the deployed program was built from a public commit, checked by OtterSec's verification service. for all core programsUnmet criterion
✗Missing: core programs immutableNo key can change it: the upgrade authority was removed, or the program was deployed with a loader that cannot upgrade., or upgradeable only through on-chain governance with a long delayUnmet criterion
Click a box for its facts and evidenceThe on-chain account, field and slot a fact was read from, with a link to check it on Solscan.. Arrows point from who holds a power to what it controls. Controllers shared across protocols
Celebtir