{
 "version": "v1",
 "generatedAt": "2026-10-15T21:09:14Z",
 "name": "Jupiter Perpetual Exchange",
 "named_from": "dashboard",
 "chain": "Solana",
 "address": "H4ND9aYttUVLFmNypZqLjZ52FYiGvdEB45GmwNoKEjTj",
 "composite": 46,
 "band": "moderate",
 "keys_to_move": 4,
 "react_hours": 24,
 "money_per_key_usd": 187618810.88953325,
 "not_assessed": [],
 "sub": {
  "adminKeyScore": 55,
  "multisigScore": 80,
  "timelockScore": 0,
  "oracleAuthorityScore": 100,
  "crossExposureScore": 40
 },
 "requirements": [
  {
   "label": "Admin power is not a bare key",
   "met": true
  },
  {
   "label": "At least a 3-of-5 multisig",
   "met": true
  },
  {
   "label": "A confirmed delay before changes apply, no bypass",
   "met": false
  },
  {
   "label": "Bypass paths of the delay checked and ruled out",
   "met": false
  },
  {
   "label": "Price feed not under one hand",
   "met": true
  },
  {
   "label": "No key shared with another tracked protocol",
   "met": false
  }
 ],
 "exit_window": "none: a change applies at once",
 "tvl_usd": 750475243.558133,
 "category": "Derivatives",
 "at_risk_usd": 405256631.5213918,
 "narrative": {
  "summary": "The perps program's upgrade multisig has a 24-hour delay, but its application admin is a 4-of-7 Squads v3 multisig with no delay field, so the delay is bypassed. That multisig also controls Jupiter Aggregator v6 upgrades.",
  "tag": "admin path bypasses the 24h upgrade delay",
  "detail": "Program upgrade is a Squads v4 multisig, 4-of-8, 24h delay, moved on 2026-02-11 off the no-delay Squads v3 that still holds Aggregator v6. Perpetuals.admin was decoded at offset 51 of the 120-byte account and matches authority index 1 of Squads v3 multisig 7ZyDFz..., 4-of-7: the same multisig as Aggregator v6's upgrade authority, so one compromise reaches two large Jupiter products. The Doves oracle program shares the upgrade vault, but oracle authority for this target is still an open point. One verifier's claim that the admin PDA could not be reproduced was a bug in its own code. DefiLlama listed over $600M TVL."
 },
 "score_account": "7rRd5hs89Rs9uFphLx1bKB1kqWUKbzS9gPy1wckYJv5f",
 "paused": null,
 "side_roles": null,
 "side_pending": null,
 "safe_activity": null,
 "admin_probe": null,
 "held": null,
 "dispute": null,
 "independent_read_reproduce": null,
 "history": null,
 "feed": "https://raw.githubusercontent.com/RealSpap/authority-risk-oracle-showcase/watch-data/feed/solana-devnet/H4ND9aYttUVLFmNypZqLjZ52FYiGvdEB45GmwNoKEjTj.xml",
 "reproduce": null,
 "consumer_example": {
  "verdict": "zero",
  "collateral_factor_bps": 0,
  "text": "collateral factor 0 (score 46 is under MIN_SAFE_SCORE 60)"
 },
 "cheapest_fix": {
  "band": "decent",
  "next": 60,
  "axis": "admin key",
  "from": 55,
  "to": 89,
  "what": "a stronger admin setup (admin power spread beyond one key, or checked by others)"
 },
 "main_gap": {
  "requirement": "A confirmed delay before changes apply, no bypass",
  "reason": "Changes can apply with no waiting time"
 },
 "independent_read": {
  "path": "account owned by program PERPHjGB\u2026 -> program -> ProgramData C258Lj\u2026 -> upgrade authority (a program-derived address, off the curve: a Squads vault or a protocol PDA, no key can sign for it directly) -> Squads v4 vault 0 of multisig AxkJ8oH5aDu4ZRWfsujPtxdb6Vhq4gDehpoReBgrUUSm",
  "holder": "5myNNmEmPm3UAnJ2ggLEpnTFb9t9Gk8369wKw6n3uAKx",
  "threshold": 4,
  "owners": 8,
  "delay_seconds": 86400,
  "owners_kinds": {
   "eoa": 8,
   "pda": 0
  },
  "multisig_program": "Squads v4",
  "keys_to_act": 4,
  "keys_lost_to_freeze": 5,
  "kind": "squads",
  "since": "2026-10-10T06:54:09Z",
  "disagree": "the timelock score says no delay (0), the Squads multisig enforces a native time lock of 24 h",
  "posture": "admin: Squads 4-of-8 of 8 plain keys; delay: 24 h Squads time lock",
  "exposure": {
   "keys_to_move": 4,
   "react_hours": 24,
   "tvl_usd": 750475243.558133,
   "money_per_key_usd": 187618810.88953325,
   "money_source": "protocol_tvl",
   "held_symbol": null,
   "held_amount": null
  }
 },
 "score_cluster": "devnet",
 "last_pushed": 1791859635,
 "stale": false,
 "methodology_hash": "0x4f8c4019b9c9e75b1aaef679a3a699b9ec7926ee504c57696cc693641a2b3b3a",
 "block": null,
 "live": "https://realspap.github.io/oracle/#chain=all&q=H4ND9aYttUVLFmNypZqLjZ52FYiGvdEB45GmwNoKEjTj",
 "page": "https://realspap.github.io/oracle/p/solana-H4ND9aYttUVLFmNypZqLjZ52FYiGvdEB45GmwNoKEjTj.html",
 "license": "CC BY 4.0, attribution: Authority Risk Oracle, realspap.github.io/oracle"
}