{
 "version": "v1",
 "generatedAt": "2026-10-15T21:09:14Z",
 "name": "Compound V3 cUSDCv3 (Comet USDC)",
 "named_from": "dashboard",
 "chain": "Ethereum",
 "address": "0xc3d688b66703497daa19211eedff47f25384cdc3",
 "composite": 79,
 "band": "decent",
 "keys_to_move": null,
 "react_hours": 48,
 "money_per_key_usd": null,
 "not_assessed": [
  "how many keys it takes to move it",
  "the money behind one key (no money figure, or no key count)"
 ],
 "sub": {
  "adminKeyScore": 78,
  "multisigScore": 100,
  "timelockScore": 60,
  "oracleAuthorityScore": 52,
  "crossExposureScore": 80
 },
 "requirements": [
  {
   "label": "Admin power is not a bare key",
   "met": true
  },
  {
   "label": "At least a 3-of-5 multisig",
   "met": true
  },
  {
   "label": "A confirmed delay before changes apply, no bypass",
   "met": true
  },
  {
   "label": "Bypass paths of the delay checked and ruled out",
   "met": false
  },
  {
   "label": "Price feed not under one hand",
   "met": false
  },
  {
   "label": "No key shared with another tracked protocol",
   "met": false
  }
 ],
 "exit_window": "a confirmed delay, bypass paths not all checked",
 "tvl_usd": 1300398669.6747403,
 "category": "Lending",
 "at_risk_usd": 273083720.6316955,
 "narrative": {
  "summary": "Comet.governor(), the owner of the proxy admin and the Configurator\u2019s governor all resolve to one Compound Timelock (2-day delay, which is also its floor) answering to the Compound Governor. The bypass found is a 5-of-9 Safe, the pauseGuardian, that can pause supply, transfer, withdraw, absorb and buy instantly.",
  "tag": "$1.36B TVL (all Compound V3 markets on Ethereum)",
  "detail": "The pauseGuardian Safe (no module, no guard) is also the Governor\u2019s proposalGuardian and whitelistGuardian, so it can cancel proposals; its instant pause is a freeze (availability) power, not a fund-redirect one, which is why timelockScore is 60 rather than Uniswap\u2019s 75."
 },
 "score_account": null,
 "paused": null,
 "side_roles": {
  "pauseGuardian()": {
   "kind": "safe",
   "threshold": 5,
   "owners": 9,
   "holder": "0xbbf3\u2026012c"
  }
 },
 "side_pending": null,
 "safe_activity": null,
 "admin_probe": null,
 "held": null,
 "dispute": null,
 "independent_read_reproduce": {
  "rpc": "https://ethereum-rpc.publicnode.com",
  "steps": [
   {
    "what": "the admin slot of the proxy (EIP-1967): the word is the admin address",
    "method": "eth_getStorageAt",
    "params": [
     "0xc3d688b66703497daa19211eedff47f25384cdc3",
     "0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103",
     "latest"
    ]
   },
   {
    "what": "owner() on the address the slot returned (a ProxyAdmin): the holder",
    "method": "eth_call",
    "params": [
     {
      "to": "<address from the slot>",
      "data": "0x8da5cb5b"
     },
     "latest"
    ]
   },
   {
    "what": "delay() on the holder (Compound-style timelock), in seconds",
    "method": "eth_call",
    "params": [
     {
      "to": "0x6d903f6003cca6255d85cca4d3b5e5146dc33925",
      "data": "0x6a42b8f8"
     },
     "latest"
    ]
   },
   {
    "what": "the implementation slot of the proxy (EIP-1967): the code behind it, an upgrade changes this word",
    "method": "eth_getStorageAt",
    "params": [
     "0xc3d688b66703497daa19211eedff47f25384cdc3",
     "0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc",
     "latest"
    ]
   }
  ],
  "curl": "# the admin slot of the proxy (EIP-1967): the word is the admin address\ncurl -s -X POST https://ethereum-rpc.publicnode.com -H 'content-type: application/json' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_getStorageAt\",\"params\":[\"0xc3d688b66703497daa19211eedff47f25384cdc3\",\"0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103\",\"latest\"]}'\n# owner() on the address the slot returned (a ProxyAdmin): the holder\ncurl -s -X POST https://ethereum-rpc.publicnode.com -H 'content-type: application/json' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"<address from the slot>\",\"data\":\"0x8da5cb5b\"},\"latest\"]}'\n# delay() on the holder (Compound-style timelock), in seconds\ncurl -s -X POST https://ethereum-rpc.publicnode.com -H 'content-type: application/json' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6d903f6003cca6255d85cca4d3b5e5146dc33925\",\"data\":\"0x6a42b8f8\"},\"latest\"]}'\n# the implementation slot of the proxy (EIP-1967): the code behind it, an upgrade changes this word\ncurl -s -X POST https://ethereum-rpc.publicnode.com -H 'content-type: application/json' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_getStorageAt\",\"params\":[\"0xc3d688b66703497daa19211eedff47f25384cdc3\",\"0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc\",\"latest\"]}'",
  "block": "latest",
  "note": "read between blocks 26199869 and 26199870 of the chain; this RPC cannot replay the block of the read (it ignores the block tag, or no longer serves old state): the answers are the current ones"
 },
 "history": [
  {
   "t": "2026-10-13T01:45:10Z",
   "composite": 79,
   "from": "push"
  }
 ],
 "feed": "https://raw.githubusercontent.com/RealSpap/authority-risk-oracle-showcase/watch-data/feed/ethereum-l1-sepolia/0xc3d688b66703497daa19211eedff47f25384cdc3.xml",
 "reproduce": {
  "rpc": "https://ethereum-sepolia-rpc.publicnode.com",
  "to": "0xB6F8474ccC71AF477c31c2DF663B3942ddfbf906",
  "data": "0xd47875d0000000000000000000000000c3d688b66703497daa19211eedff47f25384cdc3",
  "block": "0xb5eb8d",
  "composite_word": 6,
  "block_honoured": true,
  "note": null,
  "curl": "curl -s -X POST https://ethereum-sepolia-rpc.publicnode.com -H 'content-type: application/json' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0xB6F8474ccC71AF477c31c2DF663B3942ddfbf906\",\"data\":\"0xd47875d0000000000000000000000000c3d688b66703497daa19211eedff47f25384cdc3\"},\"0xb5eb8d\"]}'"
 },
 "consumer_example": {
  "verdict": "factor",
  "collateral_factor_bps": 6425,
  "text": "collateral factor 64.25% (score 79)"
 },
 "cheapest_fix": {
  "band": "strong",
  "next": 80,
  "axis": "timelock",
  "from": 60,
  "to": 61,
  "what": "a confirmed delay before changes apply"
 },
 "main_gap": {
  "requirement": "Bypass paths of the delay checked and ruled out",
  "reason": "The waiting time may be skipped"
 },
 "independent_read": {
  "path": "EIP-1967 admin -&gt; ProxyAdmin owner()",
  "holder": "0x6d903f6003cca6255d85cca4d3b5e5146dc33925",
  "pending_admin": null,
  "pending_via": null,
  "self_delay_seconds": null,
  "delay_seconds": 172800,
  "kind": "timelock",
  "since": "2026-10-10T06:54:09Z",
  "posture": "admin: a timelock; delay: 48 h on the timelock",
  "exposure": {
   "keys_to_move": null,
   "react_hours": 48,
   "tvl_usd": 1300398669.6747403,
   "money_per_key_usd": null,
   "money_source": "protocol_tvl",
   "held_symbol": null,
   "held_amount": null
  }
 },
 "score_cluster": null,
 "last_pushed": 1791855910,
 "stale": false,
 "methodology_hash": "0x46a1a85b619e7db0f81e543674e8aa0a3a1afba36b7500fe2cb256e0024db645",
 "block": 11922317,
 "live": "https://realspap.github.io/oracle/#chain=all&q=0xc3d688b66703497daa19211eedff47f25384cdc3",
 "page": "https://realspap.github.io/oracle/p/ethereum-l1-0xc3d688b66703497daa19211eedff47f25384cdc3.html",
 "license": "CC BY 4.0, attribution: Authority Risk Oracle, realspap.github.io/oracle"
}