{
 "version": "v1",
 "generatedAt": "2026-10-15T21:09:14Z",
 "name": "HIP-3 dex xyz (trade[XYZ])",
 "named_from": "dashboard",
 "chain": "Hyperliquid",
 "address": "0x88806a71d74ad0a510b350545c9ae490912f0888",
 "composite": 9,
 "band": "critical",
 "keys_to_move": null,
 "react_hours": null,
 "money_per_key_usd": null,
 "not_assessed": [
  "how many keys it takes to move it",
  "the time anyone has to react",
  "the money behind one key (no money figure, or no key count)",
  "the protocol's total value locked (no DefiLlama match)"
 ],
 "sub": {
  "adminKeyScore": 10,
  "multisigScore": 15,
  "timelockScore": 0,
  "oracleAuthorityScore": 4,
  "crossExposureScore": 100
 },
 "requirements": [
  {
   "label": "Admin power is not a bare key",
   "met": false
  },
  {
   "label": "At least a 3-of-5 multisig",
   "met": false
  },
  {
   "label": "A confirmed delay before changes apply, no bypass",
   "met": false
  },
  {
   "label": "Bypass paths of the delay checked and ruled out",
   "met": false
  },
  {
   "label": "Price feed not under one hand",
   "met": false
  },
  {
   "label": "No key shared with another tracked protocol",
   "met": true
  }
 ],
 "exit_window": "none: a change applies at once",
 "tvl_usd": null,
 "category": null,
 "at_risk_usd": null,
 "narrative": {
  "summary": "The deployer is a 2-of-3 multisig, but two single keys can halt trading and settle any of its 120 markets at the mark price, so the multisig protects little. Open interest was about $3.9B at the 2026-09-16 read.",
  "tag": "same 3 signers as untracked HIP-4 venue txyz",
  "detail": "Two single-key sub-deployers can call haltTrading, which cancels all orders and settles positions at the mark price, and three single keys can change margin tables, open interest caps and funding parameters. The multisig only guards setSubDeployers and the deployer itself. A 1-of-6 sub-deployer can push the oracle, matching trade[XYZ]'s design of several relayers; protocol clamps (1% per update, 2.5 s apart) limit speed, not direction. No delay was found. The score describes key structure, not misuse. Whether the margin actions could force liquidations is unresolved, so they stay out of the score."
 },
 "score_account": null,
 "paused": null,
 "side_roles": null,
 "side_pending": null,
 "safe_activity": null,
 "admin_probe": null,
 "held": null,
 "dispute": null,
 "independent_read_reproduce": null,
 "history": [
  {
   "t": "2026-10-12T05:46:08Z",
   "composite": 9,
   "from": "push"
  }
 ],
 "feed": "https://raw.githubusercontent.com/RealSpap/authority-risk-oracle-showcase/watch-data/feed/hyperliquid-hyperevm/0x88806a71d74ad0a510b350545c9ae490912f0888.xml",
 "reproduce": {
  "rpc": "https://998.rpc.thirdweb.com",
  "to": "0x50840a7667baEa9D05ad4ae3dCeb384724b58720",
  "data": "0xd47875d000000000000000000000000088806a71d74ad0a510b350545c9ae490912f0888",
  "block": "latest",
  "composite_word": 6,
  "block_honoured": false,
  "note": "this RPC cannot replay the block of the build (it ignores the block tag, or no longer serves old state): the call reproduces the current value, not the one of the build; compare the composite and lastUpdated with this page",
  "curl": "curl -s -X POST https://998.rpc.thirdweb.com -H 'content-type: application/json' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x50840a7667baEa9D05ad4ae3dCeb384724b58720\",\"data\":\"0xd47875d000000000000000000000000088806a71d74ad0a510b350545c9ae490912f0888\"},\"latest\"]}'"
 },
 "consumer_example": {
  "verdict": "zero",
  "collateral_factor_bps": 0,
  "text": "collateral factor 0 (score 9 is under MIN_SAFE_SCORE 60)"
 },
 "cheapest_fix": {
  "band": "weak",
  "next": 20,
  "axis": "admin key",
  "from": 10,
  "to": 38,
  "what": "a stronger admin setup (admin power spread beyond one key, or checked by others)"
 },
 "main_gap": {
  "requirement": "Admin power is not a bare key",
  "reason": "One key, or a tiny group, can change it"
 },
 "independent_read": {
  "path": null,
  "holder": null,
  "pending_admin": null,
  "pending_via": null,
  "self_delay_seconds": null,
  "kind": "native",
  "why": "no code at this address on the chain's mainnet: a derived identifier for a native (non-EVM) entity such as HyperCore, or a contract that lives on another chain (a rollup's own L1 contracts); nothing for this reader to compare here"
 },
 "score_cluster": null,
 "last_pushed": 1791783968,
 "stale": false,
 "methodology_hash": "0x36452ea42a84016f691a665855cc3482c3e8bb4d87155901b491b293457a4004",
 "block": 66993098,
 "live": "https://realspap.github.io/oracle/#chain=all&q=0x88806a71d74ad0a510b350545c9ae490912f0888",
 "page": "https://realspap.github.io/oracle/p/hyperliquid-0x88806a71d74ad0a510b350545c9ae490912f0888.html",
 "license": "CC BY 4.0, attribution: Authority Risk Oracle, realspap.github.io/oracle"
}