{ "version": "v1", "generatedAt": "2026-10-15T21:09:14Z", "name": "Arcus pToken factory + pBTC + pBTC3x", "named_from": "dashboard", "chain": "Robinhood Chain", "address": "0x4472c69d299382f8847ebce4fc6ed8e295510e3e", "composite": 43, "band": "moderate", "keys_to_move": 2, "react_hours": 0, "money_per_key_usd": 48712.87066919806, "not_assessed": [], "sub": { "adminKeyScore": 65, "multisigScore": 55, "timelockScore": 0, "oracleAuthorityScore": 100, "crossExposureScore": 80 }, "requirements": [ { "label": "Admin power is not a bare key", "met": true }, { "label": "At least a 3-of-5 multisig", "met": true }, { "label": "A confirmed delay before changes apply, no bypass", "met": false }, { "label": "Bypass paths of the delay checked and ruled out", "met": false }, { "label": "Price feed not under one hand", "met": true }, { "label": "No key shared with another tracked protocol", "met": false } ], "exit_window": "none: a change applies at once", "tvl_usd": 727970.6889449032, "category": "Derivatives", "at_risk_usd": 414943.29269859486, "narrative": { "summary": "A real 2-of-3 Safe, but it\u2019s a single point of control over every pToken issued through the shared beacon - with zero timelock anywhere.", "detail": "beacon.owner() and the factory\u2019s DEFAULT_ADMIN_ROLE both resolve to the same active 2-of-3 Gnosis Safe. One upgradeTo() call rewrites the shared implementation for pBTC, pBTC3x, and anything deployed later - no timelock anywhere in the chain protects that call. Scored identically across the factory and both live pTokens since they share the exact same authority chain." }, "score_account": null, "paused": null, "side_roles": null, "side_pending": null, "safe_activity": [ { "safe": "robinhood:0x81b8\u202641bd", "nonce": 12, "idle_since": "2026-10-10T21:12:49Z", "last_moved": null, "never_executed": false } ], "admin_probe": null, "held": { "symbol": "USDG", "amount": 97431.825945, "price_usd": 0.9999375501121439, "held_usd": 97425.74133839612, "stale": null, "price_stale": null, "amount_change_pct": 0.0, "vanished": null }, "dispute": null, "independent_read_reproduce": { "rpc": "https://rpc.mainnet.chain.robinhood.com", "steps": [ { "what": "getThreshold() on the holder (a Safe)", "method": "eth_call", "params": [ { "to": "", "data": "0xe75235b8" }, "latest" ] }, { "what": "getOwners() on the holder: the signer set (word 2 is the count)", "method": "eth_call", "params": [ { "to": "", "data": "0xa0e67e2b" }, "latest" ] }, { "what": "getModulesPaginated(0x1, 50) on the holder: the modules (a module executes without the signatures)", "method": "eth_call", "params": [ { "to": "", "data": "0xcc2f845200000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000032" }, "latest" ] }, { "what": "the guard slot of the holder (keccak of guard_manager.guard.address)", "method": "eth_getStorageAt", "params": [ "", "0x4a204f620c8c5ccdca3fd54d003badd85ba500436a431f0cbda4f558c93c34c8", "latest" ] }, { "what": "the implementation slot of the proxy (EIP-1967): the code behind it, an upgrade changes this word", "method": "eth_getStorageAt", "params": [ "0x4472c69d299382f8847ebce4fc6ed8e295510e3e", "0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc", "latest" ] } ], "curl": "# getThreshold() on the holder (a Safe)\ncurl -s -X POST https://rpc.mainnet.chain.robinhood.com -H 'content-type: application/json' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"\",\"data\":\"0xe75235b8\"},\"latest\"]}'\n# getOwners() on the holder: the signer set (word 2 is the count)\ncurl -s -X POST https://rpc.mainnet.chain.robinhood.com -H 'content-type: application/json' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"\",\"data\":\"0xa0e67e2b\"},\"latest\"]}'\n# getModulesPaginated(0x1, 50) on the holder: the modules (a module executes without the signatures)\ncurl -s -X POST https://rpc.mainnet.chain.robinhood.com -H 'content-type: application/json' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"\",\"data\":\"0xcc2f845200000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000032\"},\"latest\"]}'\n# the guard slot of the holder (keccak of guard_manager.guard.address)\ncurl -s -X POST https://rpc.mainnet.chain.robinhood.com -H 'content-type: application/json' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_getStorageAt\",\"params\":[\"\",\"0x4a204f620c8c5ccdca3fd54d003badd85ba500436a431f0cbda4f558c93c34c8\",\"latest\"]}'\n# the implementation slot of the proxy (EIP-1967): the code behind it, an upgrade changes this word\ncurl -s -X POST https://rpc.mainnet.chain.robinhood.com -H 'content-type: application/json' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_getStorageAt\",\"params\":[\"0x4472c69d299382f8847ebce4fc6ed8e295510e3e\",\"0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc\",\"latest\"]}'", "block": "0x55508a0", "note": "read between blocks 89458462 and 89458848 of the chain" }, "history": [ { "t": "2026-10-13T03:26:46Z", "composite": 43, "from": "push" } ], "feed": "https://raw.githubusercontent.com/RealSpap/authority-risk-oracle-showcase/watch-data/feed/robinhood-chain/0x4472c69d299382f8847ebce4fc6ed8e295510e3e.xml", "reproduce": { "rpc": "https://rpc.testnet.chain.robinhood.com/rpc", "to": "0x9BF45734D09bC7CA39238e767B2af9AAc62a7f52", "data": "0xd47875d00000000000000000000000004472c69d299382f8847ebce4fc6ed8e295510e3e", "block": "latest", "composite_word": 6, "block_honoured": false, "note": "this RPC cannot replay the block of the build (it ignores the block tag, or no longer serves old state): the call reproduces the current value, not the one of the build; compare the composite and lastUpdated with this page", "curl": "curl -s -X POST https://rpc.testnet.chain.robinhood.com/rpc -H 'content-type: application/json' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x9BF45734D09bC7CA39238e767B2af9AAc62a7f52\",\"data\":\"0xd47875d00000000000000000000000004472c69d299382f8847ebce4fc6ed8e295510e3e\"},\"latest\"]}'" }, "consumer_example": { "verdict": "zero", "collateral_factor_bps": 0, "text": "collateral factor 0 (score 43 is under MIN_SAFE_SCORE 60)" }, "cheapest_fix": { "band": "decent", "next": 60, "axis": "timelock", "from": 0, "to": 57, "what": "a confirmed delay before changes apply" }, "main_gap": { "requirement": "A confirmed delay before changes apply, no bypass", "reason": "Changes can apply with no waiting time" }, "independent_read": { "path": "beacon owner() (the beacon decides the implementation of every proxy on it)", "holder": "0x81b8\u202641bd", "pending_admin": null, "pending_via": null, "self_delay_seconds": null, "threshold": 2, "owners": 3, "keys_to_act": 2, "keys_lost_to_freeze": 2, "kind": "safe", "since": "2026-10-10T21:07:35Z", "owners_kinds": { "safe": 1, "eoa": 2 }, "posture": "admin: Safe 2-of-3 of 2 plain keys, 1 Safe; delay: none", "shares_admin_with": [ { "chain": "robinhood", "target": "0x9c3663fa9ab976e67b42939486ec4966cb41a0bb" }, { "chain": "robinhood", "target": "0x925f92f055edb79c42b5d45e64a1b74143b90ea0" } ], "cluster_tvl_usd": 727970.6889449032, "exposure": { "keys_to_move": 2, "react_hours": 0, "tvl_usd": 97425.74133839612, "money_per_key_usd": 48712.87066919806, "money_source": "contract", "held_symbol": "USDG", "held_amount": 97431.825945 } }, "score_cluster": null, "last_pushed": 1791862006, "stale": false, "methodology_hash": "0x667dc486af9557a83488110fdb18fe653ba6d3be4773420590ee53b4a052fa45", "block": 136039274, "live": "https://realspap.github.io/oracle/#chain=all&q=0x4472c69d299382f8847ebce4fc6ed8e295510e3e", "page": "https://realspap.github.io/oracle/p/robinhood-0x4472c69d299382f8847ebce4fc6ed8e295510e3e.html", "license": "CC BY 4.0, attribution: Authority Risk Oracle, realspap.github.io/oracle" }