Upgrades controlled byMultisig, behind a timelock0x49bD…35B1
Multisig6 of 11 signers must approveWhat they approve then waits in the timelockSafe 0xb369…a46d
Timelock10 days before changes take effect
Track record
Through market stressCame through all 2August 2024 crash — kept 78% of its depositsOctober 2025 liquidation cascade — kept 67% of its deposits
Exploit history
18 Apr 2026 — Cross-Chain Message Spoofing$293.0M lost · Users were fully reimbursedrsETH backing restored in full by May 2026 through the DeFi United recovery, without losses passed to holders · Report
21 Feb 2024 — Infinite Mint at Gain$3.0M lost · No reimbursement recorded