{
 "version": "v1",
 "generatedAt": "2026-10-15T21:09:14Z",
 "name": "HIP-3 dex para (Paragon)",
 "named_from": "dashboard",
 "chain": "Hyperliquid",
 "address": "0x30e96fbd515243d47703e78581b88cba60f51360",
 "composite": 5,
 "band": "critical",
 "keys_to_move": null,
 "react_hours": null,
 "money_per_key_usd": null,
 "not_assessed": [
  "how many keys it takes to move it",
  "the time anyone has to react",
  "the money behind one key (no money figure, or no key count)",
  "the protocol's total value locked (no DefiLlama match)"
 ],
 "sub": {
  "adminKeyScore": 5,
  "multisigScore": 10,
  "timelockScore": 0,
  "oracleAuthorityScore": 10,
  "crossExposureScore": 100
 },
 "requirements": [
  {
   "label": "Admin power is not a bare key",
   "met": false
  },
  {
   "label": "At least a 3-of-5 multisig",
   "met": false
  },
  {
   "label": "A confirmed delay before changes apply, no bypass",
   "met": false
  },
  {
   "label": "Bypass paths of the delay checked and ruled out",
   "met": false
  },
  {
   "label": "Price feed not under one hand",
   "met": false
  },
  {
   "label": "No key shared with another tracked protocol",
   "met": true
  }
 ],
 "exit_window": "none: a change applies at once",
 "tvl_usd": null,
 "category": null,
 "at_risk_usd": null,
 "narrative": {
  "summary": "The deployer is a HyperEVM StakingVault contract, not a bare key. Its HyperCore signing rights come from an OPERATOR_ROLE Safe with threshold 1 over 3 owners, weaker than a single key, so the score was corrected downward.",
  "tag": "corrected down from the single-key reading",
  "detail": "The generic reading (no HyperCore multisig means a single key) was wrong, because the address is a contract. addApiWallet is gated by OPERATOR_ROLE, held by a Safe with threshold 1 over 3 owners: two bare EOAs and a nested 1-of-1 Safe. The docs do not say in words that an API wallet may sign deployer actions; the repo infers it because a contract has no key and the dex is operated. Live weight: about $15.1M open interest and 35 listed assets at the 2026-09-17 read. Its root key is not shared with any other tracked dex. Stored under a derived key because the same address is also the para StakingVault."
 },
 "score_account": null,
 "paused": null,
 "side_roles": null,
 "side_pending": null,
 "safe_activity": null,
 "admin_probe": null,
 "held": null,
 "dispute": null,
 "independent_read_reproduce": null,
 "history": [
  {
   "t": "2026-10-12T05:46:08Z",
   "composite": 5,
   "from": "push"
  }
 ],
 "feed": "https://raw.githubusercontent.com/RealSpap/authority-risk-oracle-showcase/watch-data/feed/hyperliquid-hyperevm/0x30e96fbd515243d47703e78581b88cba60f51360.xml",
 "reproduce": {
  "rpc": "https://998.rpc.thirdweb.com",
  "to": "0x50840a7667baEa9D05ad4ae3dCeb384724b58720",
  "data": "0xd47875d000000000000000000000000030e96fbd515243d47703e78581b88cba60f51360",
  "block": "latest",
  "composite_word": 6,
  "block_honoured": false,
  "note": "this RPC cannot replay the block of the build (it ignores the block tag, or no longer serves old state): the call reproduces the current value, not the one of the build; compare the composite and lastUpdated with this page",
  "curl": "curl -s -X POST https://998.rpc.thirdweb.com -H 'content-type: application/json' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x50840a7667baEa9D05ad4ae3dCeb384724b58720\",\"data\":\"0xd47875d000000000000000000000000030e96fbd515243d47703e78581b88cba60f51360\"},\"latest\"]}'"
 },
 "consumer_example": {
  "verdict": "zero",
  "collateral_factor_bps": 0,
  "text": "collateral factor 0 (score 5 is under MIN_SAFE_SCORE 60)"
 },
 "cheapest_fix": {
  "band": "weak",
  "next": 20,
  "axis": "admin key",
  "from": 5,
  "to": 42,
  "what": "a stronger admin setup (admin power spread beyond one key, or checked by others)"
 },
 "main_gap": {
  "requirement": "Admin power is not a bare key",
  "reason": "One key, or a tiny group, can change it"
 },
 "independent_read": {
  "path": null,
  "holder": null,
  "pending_admin": null,
  "pending_via": null,
  "self_delay_seconds": null,
  "kind": "native",
  "why": "no code at this address on the chain's mainnet: a derived identifier for a native (non-EVM) entity such as HyperCore, or a contract that lives on another chain (a rollup's own L1 contracts); nothing for this reader to compare here"
 },
 "score_cluster": null,
 "last_pushed": 1791783968,
 "stale": false,
 "methodology_hash": "0x36452ea42a84016f691a665855cc3482c3e8bb4d87155901b491b293457a4004",
 "block": 66993098,
 "live": "https://realspap.github.io/oracle/#chain=all&q=0x30e96fbd515243d47703e78581b88cba60f51360",
 "page": "https://realspap.github.io/oracle/p/hyperliquid-0x30e96fbd515243d47703e78581b88cba60f51360.html",
 "license": "CC BY 4.0, attribution: Authority Risk Oracle, realspap.github.io/oracle"
}