# Jupiter Staked SOL

> Not investment advice. Ratings describe on-chain configuration only and may contain errors.

Snapshot 2026-10-24, methodology v0.2. Source: Celebtir, CC BY 4.0.

## Summary

- Chain: Solana
- Category: liquid-staking
- Stage: Stage 0
- TVL: $521.37M
- Website: https://jup.ag/
- Core programs controlled by a Squads multisig

## Value

Asset groups unavailable: asset groups exceed the TVL.
- JupSOL (deposit): worst rating High. new supply can be minted by unrecognized controller EMju…QDNw owned by program 1111…1111

## Activity

- 24h volume: unavailable: no volume metric for this category; fees only
- 24h fees: $74.41K (+15.0% over 7 days)

## Risk summary

- High: An approved upgrade takes effect immediately. Withdrawal completion within that period is not established by these configuration facts.
- Medium: Core program code can be replaced by 6 of 11 voters of multisig AApfiPZgV5MoPU691GwhdDhq5sKEMMH1Uh8S4Z9xvP6b.
- Medium: The deployed code of SPMBzsVUuoHA4Jm6KunbsotaahvVikZs1JyTW6iJvbn has not been verified against its public source.

## Risk analysis

- Upgrade control: **Medium**. Squads v3 multisig, 6 of 11 voters, time lock 0 s. To improve: a multisig of 5+ voters at a 60%+ threshold → LOW, or make the program immutable.
  - Evidence: [HxBTMuB7cFBPVWVJjTi9iBF8MPd7mfY1QnrrWfLAySFd](https://solscan.io/account/HxBTMuB7cFBPVWVJjTi9iBF8MPd7mfY1QnrrWfLAySFd) `upgrade_authority` at slot 460977391
  - Evidence: [AApfiPZgV5MoPU691GwhdDhq5sKEMMH1Uh8S4Z9xvP6b](https://solscan.io/account/AApfiPZgV5MoPU691GwhdDhq5sKEMMH1Uh8S4Z9xvP6b) `threshold, time_lock, members, config_authority` at slot 460977392
- Upgrade delay: **High**. time lock 0 s. To improve: a time lock of 24 h+ → MEDIUM; 5 days+ → LOW.
  - Evidence: [HxBTMuB7cFBPVWVJjTi9iBF8MPd7mfY1QnrrWfLAySFd](https://solscan.io/account/HxBTMuB7cFBPVWVJjTi9iBF8MPd7mfY1QnrrWfLAySFd) `upgrade_authority` at slot 460977391
  - Evidence: [AApfiPZgV5MoPU691GwhdDhq5sKEMMH1Uh8S4Z9xvP6b](https://solscan.io/account/AApfiPZgV5MoPU691GwhdDhq5sKEMMH1Uh8S4Z9xvP6b) `threshold, time_lock, members, config_authority` at slot 460977392
- Admin powers: **Low**. the registry lists no admin accounts; the evidence is the core programs' upgrade reads. To improve: none: LOW is the lowest risk level.
  - Evidence: [HxBTMuB7cFBPVWVJjTi9iBF8MPd7mfY1QnrrWfLAySFd](https://solscan.io/account/HxBTMuB7cFBPVWVJjTi9iBF8MPd7mfY1QnrrWfLAySFd) `upgrade_authority` at slot 460977391
  - Evidence: [AApfiPZgV5MoPU691GwhdDhq5sKEMMH1Uh8S4Z9xvP6b](https://solscan.io/account/AApfiPZgV5MoPU691GwhdDhq5sKEMMH1Uh8S4Z9xvP6b) `threshold, time_lock, members, config_authority` at slot 460977392
- Code transparency: **Medium**. source public at https://github.com/jup-ag, but the deployed build is not verified. To improve: verify the deployed build against public source (OtterSec) → LOW.
  - Evidence: [SPMBzsVUuoHA4Jm6KunbsotaahvVikZs1JyTW6iJvbn](https://solscan.io/account/SPMBzsVUuoHA4Jm6KunbsotaahvVikZs1JyTW6iJvbn) `verified_build` at slot 460977390
- Oracle dependency: **Not applicable**. the registry lists no price feeds; the evidence is the core programs' upgrade reads. To improve: not applicable: nothing to improve.
  - Evidence: [HxBTMuB7cFBPVWVJjTi9iBF8MPd7mfY1QnrrWfLAySFd](https://solscan.io/account/HxBTMuB7cFBPVWVJjTi9iBF8MPd7mfY1QnrrWfLAySFd) `upgrade_authority` at slot 460977391
  - Evidence: [AApfiPZgV5MoPU691GwhdDhq5sKEMMH1Uh8S4Z9xvP6b](https://solscan.io/account/AApfiPZgV5MoPU691GwhdDhq5sKEMMH1Uh8S4Z9xvP6b) `threshold, time_lock, members, config_authority` at slot 460977392
- Dependencies: **Low**. all 1 callees rated Low on upgrade control. To improve: none: LOW is the lowest risk level.
  - Evidence: [SPMBzsVUuoHA4Jm6KunbsotaahvVikZs1JyTW6iJvbn](https://solscan.io/account/SPMBzsVUuoHA4Jm6KunbsotaahvVikZs1JyTW6iJvbn) `transaction sample (50 transactions)` at slot 460976784
  - Evidence: [6WU8Nxarf9fudRK5atWwjLY4vFaw5UrrWhL88qz7iCMJ](https://solscan.io/account/6WU8Nxarf9fudRK5atWwjLY4vFaw5UrrWhL88qz7iCMJ) `upgrade_authority` at slot 460977727

## Stage

Stage 0. Stages describe who can change the protocol and how fast. They don't measure code security.

- [x] Stage 0: core programs identified in the registry (1 core programs)
- [x] Stage 0: public source for every core program (all core programs have public source)
- [x] Stage 0: upgrade control readable for every core program (upgrade control read for all core programs)
- [x] Stage 1: upgrade control rated Low or Medium (MEDIUM: Squads v3 multisig, 6 of 11 voters, time lock 0 s)
- [ ] Stage 1: upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisig (SPMBzsVUuoHA4Jm6KunbsotaahvVikZs1JyTW6iJvbn: effective time lock 0 s; needs 5 days+ or an emergency multisig of 8+ voters at 75%+)
- [x] Stage 1: admin powers rated Low or Medium (LOW: the registry lists no admin accounts; the evidence is the core programs' upgrade reads)
- [x] Stage 1: no multisig has a single-key config authority (no single-key config authority)
- [ ] Stage 1: verified builds for all core programs (not verified: SPMBzsVUuoHA4Jm6KunbsotaahvVikZs1JyTW6iJvbn)
- [x] Stage 1: every factor could be read (Unknown caps the Stage at 0) (no Unknown factors)
- [ ] Stage 2: core programs immutable, or upgradeable only through on-chain governance with a long delay (upgradeable without 30 days+ governance delay: SPMBzsVUuoHA4Jm6KunbsotaahvVikZs1JyTW6iJvbn)
- [x] Stage 2: no key can move or freeze user funds (no admin key can move or freeze funds)

## Control graph

- Sanctum SPL Stake Pool (multi-validator) → Jupiter Staked SOL: core program
- JupSOL → Jupiter Staked SOL: used as deposit
- Unrecognized → JupSOL: can mint · no delay
- Squads 6 of 11 · no delay → Sanctum SPL Stake Pool (multi-validator): can upgrade · no delay

## Permissions

- Unrecognized [EMjuABxELpYWYEwjkKmQKBNCwdaFAy4QYAs6W9bDQDNw](https://solscan.io/account/EMjuABxELpYWYEwjkKmQKBNCwdaFAy4QYAs6W9bDQDNw)
  - Mint tokens: JupSOL (Jupiter), no delay
- Squads 6 of 11 · no delay [AApfiPZgV5MoPU691GwhdDhq5sKEMMH1Uh8S4Z9xvP6b](https://solscan.io/account/AApfiPZgV5MoPU691GwhdDhq5sKEMMH1Uh8S4Z9xvP6b)
  - Upgrade the code: Sanctum SPL Stake Pool (multi-validator), no delay
- Held by no one: Freeze tokens (JupSOL (Jupiter))

## Programs

- Sanctum SPL Stake Pool (multi-validator) [SPMBzsVUuoHA4Jm6KunbsotaahvVikZs1JyTW6iJvbn](https://solscan.io/account/SPMBzsVUuoHA4Jm6KunbsotaahvVikZs1JyTW6iJvbn): core, Upgradeable loader, controller Squads 6 of 11 · no delay, public source at https://github.com/jup-ag, not verified, last upgrade none found

## Upgrades & governance

- Upgrades: 0 so far (history still filling)
- Last upgrade: none
- Average interval: not enough upgrades

## Updates

No changes have been recorded for this protocol since tracking began.

## Dependencies and sources

- Calls [Stake11111111111111111111111111111111111111](https://solscan.io/account/Stake11111111111111111111111111111111111111): Immutable, rated Low
- Registry source for multisig Squads v4 (AApfiPZgV5MoPU691GwhdDhq5sKEMMH1Uh8S4Z9xvP6b): https://solscan.io/account/AApfiPZgV5MoPU691GwhdDhq5sKEMMH1Uh8S4Z9xvP6b
- Registry source for program Sanctum SPL Stake Pool (multi-validator) (SPMBzsVUuoHA4Jm6KunbsotaahvVikZs1JyTW6iJvbn): https://github.com/DefiLlama/DefiLlama-Adapters/blob/main/projects/jupSOL/index.js
- Registry entry last reviewed: 2026-10-19 by celebtir-loop-draft

Web page: /protocols/jupiter-staked-sol/