Plain-English definition
What control powers means
Control-power analysis identifies the addresses and governance mechanisms that can upgrade code, pause actions, change prices, move treasury assets, or alter critical configuration.
Proof feature 06 of 10 · smart contract admin key risk
Smart Contract Admin Key and Upgrade Risk
Map upgrade admins, pause guardians, oracle controllers, treasury roles, multisig thresholds, and timelocks that can change protocol behavior.
Questions this page answers
What to verify
- Who can upgrade or pause the protocol?
- What signer threshold and timelock protect the action?
- Can one role change asset, oracle, or withdrawal behavior?
Evidence checklist
Evidence that makes this useful
Each item must be tied to an inspectable source or remain clearly labeled as pending, unavailable, or unidentified.
01
Role map
Owners, admins, guardians, operators, and contract-granted permissions.
02
Control model
EOA, multisig, timelock, governance, threshold, and signer evidence.
03
Change history
Transfers, grants, revocations, upgrades, pauses, and configuration events.
Decision use
How to use this proof
Use control evidence to understand who can change the assumptions that an audit reviewed.
Proof of Audits shows evidence and gaps. It does not guarantee protocol or transaction safety.
Specific answers
Frequently asked questions
Are admin keys always unsafe?
No. The risk depends on scope, threshold, signer independence, timelocks, monitoring, and the powers granted to each role.
Why check authority after an audit?
Authority can change or exercise privileged powers after review, altering the live system without changing the original report.