{"note": {"noteId": 6, "projectId": 6, "author": "0x90b3a1fded70ea72609644e2f0a45091ef02cfd2", "authorName": "Steven Hudspeth", "authorHandle": "hudspeth589", "authorVerified": true, "authorShort": "0x90b3...cfd2", "source": "reef", "status": "", "alsoReports": 0, "separateFrom": 0, "kind": 0, "kindLabel": "finding", "inReplyTo": 0, "fingerprint": "0xc6eb94bc75210bd232dc7f70061bfa4c3d6edacac6b7459b1ef5170cdb076cf0", "content": "{\"facts\":[{\"a\":\"Yes. EIP-1967 implementation 0xD835919c035ccD8AE295c43be4277aa3002d5E2c is controlled by ProxyAdmin 0xcE22c2af6839ea3702DF1A5D3167F5a8d71E9d35.\",\"how\":\"eth_getStorageAt implementation and admin slots on the factory proxy; owner() on the ProxyAdmin.\",\"q\":\"Can the code be replaced?\"},{\"a\":\"Safe 2 of 6 at 0xDEddA08961216adB9Ca09B88986d110127b24270, through ProxyAdmin 0xcE22c2af6839ea3702DF1A5D3167F5a8d71E9d35.\",\"how\":\"owner() on the ProxyAdmin; getThreshold() and getOwners() on the owner address.\",\"q\":\"Who holds that power?\"},{\"a\":\"0 seconds found.\",\"how\":\"delay(), getMinDelay(), and getTimelock() on the owner address did not return a delay.\",\"q\":\"Delay before a change\"},{\"a\":\"No.\",\"how\":\"paused() on the factory proxy did not return a value.\",\"q\":\"Can it be paused?\"}],\"footer\":\"What this can't tell you: audits, team identity, intent, or whether a Safe's signers are distinct people.\",\"receipts\":[{\"block\":71410195,\"call\":\"eth_getStorageAt\",\"data\":\"0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc\",\"fact\":\"Can the code be replaced?\",\"result\":\"0x000000000000000000000000d835919c035ccd8ae295c43be4277aa3002d5e2c\",\"to\":\"0x17AA157AC8C54034381b840Cb8f6bf7Fc355f0de\"},{\"block\":71410195,\"call\":\"eth_getStorageAt\",\"data\":\"0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103\",\"fact\":\"Can the code be replaced?\",\"result\":\"0x000000000000000000000000ce22c2af6839ea3702df1a5d3167f5a8d71e9d35\",\"to\":\"0x17AA157AC8C54034381b840Cb8f6bf7Fc355f0de\"},{\"block\":71410195,\"call\":\"eth_getStorageAt\",\"data\":\"0xa3f0ad74e5423aebfd80d3ef4346578335a9a72aeaee59ff6cb3582b35133d50\",\"fact\":\"Can the code be replaced?\",\"result\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"to\":\"0x17AA157AC8C54034381b840Cb8f6bf7Fc355f0de\"},{\"block\":71410195,\"call\":\"owner()\",\"data\":\"0x8da5cb5b\",\"fact\":\"Who holds that power?\",\"result\":\"0x000000000000000000000000dedda08961216adb9ca09b88986d110127b24270\",\"to\":\"0xcE22c2af6839ea3702DF1A5D3167F5a8d71E9d35\"},{\"block\":71410195,\"call\":\"getThreshold()\",\"data\":\"0xe75235b8\",\"fact\":\"Who holds that power?\",\"result\":\"0x0000000000000000000000000000000000000000000000000000000000000002\",\"to\":\"0xDEddA08961216adB9Ca09B88986d110127b24270\"},{\"block\":71410195,\"call\":\"getOwners()\",\"data\":\"0xa0e67e2b\",\"fact\":\"Who holds that power?\",\"result\":\"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\",\"to\":\"0xDEddA08961216adB9Ca09B88986d110127b24270\"},{\"block\":71410195,\"call\":\"getMinDelay()\",\"data\":\"0xf27a0c92\",\"fact\":\"Delay before a change\",\"result\":\"error: {'code': -32000, 'message': 'execution reverted'}\",\"to\":\"0xDEddA08961216adB9Ca09B88986d110127b24270\"},{\"block\":71410195,\"call\":\"delay()\",\"data\":\"0x6a42b8f8\",\"fact\":\"Delay before a change\",\"result\":\"error: {'code': -32000, 'message': 'execution reverted'}\",\"to\":\"0xDEddA08961216adB9Ca09B88986d110127b24270\"},{\"block\":71410195,\"call\":\"getTimelock()\",\"data\":\"0x6221a54b\",\"fact\":\"Delay before a change\",\"result\":\"error: {'code': -32000, 'message': 'execution reverted'}\",\"to\":\"0xDEddA08961216adB9Ca09B88986d110127b24270\"},{\"block\":71410195,\"call\":\"paused()\",\"data\":\"0x5c975abb\",\"fact\":\"Can it be paused?\",\"result\":\"error: {'code': -32000, 'message': 'execution reverted'}\",\"to\":\"0x17AA157AC8C54034381b840Cb8f6bf7Fc355f0de\"}],\"title\":\"Who can change the rules\",\"v\":1}", "structured": null, "uri": "", "txHash": "0xad1a0eb80976c5276ca164af7b91a08e83c06c7907a94df14943b536b2e99409", "receiptUrl": "https://flare-explorer.flare.network/tx/0xad1a0eb80976c5276ca164af7b91a08e83c06c7907a94df14943b536b2e99409", "blockNumber": 72105812, "voice": null, "voiceReceipt": null, "amendmentReason": null, "amendmentFingerprint": null, "retractedReason": null, "authorTier": 1, "factors": ["Receipt", "Verified"], "withheld": null, "checkResults": [], "parsed": {"facts": [{"a": "Yes. EIP-1967 implementation 0xD835919c035ccD8AE295c43be4277aa3002d5E2c is controlled by ProxyAdmin 0xcE22c2af6839ea3702DF1A5D3167F5a8d71E9d35.", "how": "eth_getStorageAt implementation and admin slots on the factory proxy; owner() on the ProxyAdmin.", "q": "Can the code be replaced?"}, {"a": "Safe 2 of 6 at 0xDEddA08961216adB9Ca09B88986d110127b24270, through ProxyAdmin 0xcE22c2af6839ea3702DF1A5D3167F5a8d71E9d35.", "how": "owner() on the ProxyAdmin; getThreshold() and getOwners() on the owner address.", "q": "Who holds that power?"}, {"a": "0 seconds found.", "how": "delay(), getMinDelay(), and getTimelock() on the owner address did not return a delay.", "q": "Delay before a change"}, {"a": "No.", "how": "paused() on the factory proxy did not return a value.", "q": "Can it be paused?"}], "footer": "What this can't tell you: audits, team identity, intent, or whether a Safe's signers are distinct people.", "receipts": [{"block": 71410195, "call": "eth_getStorageAt", "data": "0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc", "fact": "Can the code be replaced?", "result": "0x000000000000000000000000d835919c035ccd8ae295c43be4277aa3002d5e2c", "to": "0x17AA157AC8C54034381b840Cb8f6bf7Fc355f0de"}, {"block": 71410195, "call": "eth_getStorageAt", "data": "0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103", "fact": "Can the code be replaced?", "result": "0x000000000000000000000000ce22c2af6839ea3702df1a5d3167f5a8d71e9d35", "to": "0x17AA157AC8C54034381b840Cb8f6bf7Fc355f0de"}, {"block": 71410195, "call": "eth_getStorageAt", "data": "0xa3f0ad74e5423aebfd80d3ef4346578335a9a72aeaee59ff6cb3582b35133d50", "fact": "Can the code be replaced?", "result": "0x0000000000000000000000000000000000000000000000000000000000000000", "to": "0x17AA157AC8C54034381b840Cb8f6bf7Fc355f0de"}, {"block": 71410195, "call": "owner()", "data": "0x8da5cb5b", "fact": "Who holds that power?", "result": "0x000000000000000000000000dedda08961216adb9ca09b88986d110127b24270", "to": "0xcE22c2af6839ea3702DF1A5D3167F5a8d71E9d35"}, {"block": 71410195, "call": "getThreshold()", "data": "0xe75235b8", "fact": "Who holds that power?", "result": "0x0000000000000000000000000000000000000000000000000000000000000002", "to": "0xDEddA08961216adB9Ca09B88986d110127b24270"}, {"block": 71410195, "call": "getOwners()", "data": "0xa0e67e2b", "fact": "Who holds that power?", "result": "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", "to": "0xDEddA08961216adB9Ca09B88986d110127b24270"}, {"block": 71410195, "call": "getMinDelay()", "data": "0xf27a0c92", "fact": "Delay before a change", "result": "error: {'code': -32000, 'message': 'execution reverted'}", "to": "0xDEddA08961216adB9Ca09B88986d110127b24270"}, {"block": 71410195, "call": "delay()", "data": "0x6a42b8f8", "fact": "Delay before a change", "result": "error: {'code': -32000, 'message': 'execution reverted'}", "to": "0xDEddA08961216adB9Ca09B88986d110127b24270"}, {"block": 71410195, "call": "getTimelock()", "data": "0x6221a54b", "fact": "Delay before a change", "result": "error: {'code': -32000, 'message': 'execution reverted'}", "to": "0xDEddA08961216adB9Ca09B88986d110127b24270"}, {"block": 71410195, "call": "paused()", "data": "0x5c975abb", "fact": "Can it be paused?", "result": "error: {'code': -32000, 'message': 'execution reverted'}", "to": "0x17AA157AC8C54034381b840Cb8f6bf7Fc355f0de"}], "title": "Who can change the rules", "v": 1}}, "parsed": {"facts": [{"a": "Yes. EIP-1967 implementation 0xD835919c035ccD8AE295c43be4277aa3002d5E2c is controlled by ProxyAdmin 0xcE22c2af6839ea3702DF1A5D3167F5a8d71E9d35.", "how": "eth_getStorageAt implementation and admin slots on the factory proxy; owner() on the ProxyAdmin.", "q": "Can the code be replaced?"}, {"a": "Safe 2 of 6 at 0xDEddA08961216adB9Ca09B88986d110127b24270, through ProxyAdmin 0xcE22c2af6839ea3702DF1A5D3167F5a8d71E9d35.", "how": "owner() on the ProxyAdmin; getThreshold() and getOwners() on the owner address.", "q": "Who holds that power?"}, {"a": "0 seconds found.", "how": "delay(), getMinDelay(), and getTimelock() on the owner address did not return a delay.", "q": "Delay before a change"}, {"a": "No.", "how": "paused() on the factory proxy did not return a value.", "q": "Can it be paused?"}], "footer": "What this can't tell you: audits, team identity, intent, or whether a Safe's signers are distinct people.", "receipts": [{"block": 71410195, "call": "eth_getStorageAt", "data": "0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc", "fact": "Can the code be replaced?", "result": "0x000000000000000000000000d835919c035ccd8ae295c43be4277aa3002d5e2c", "to": "0x17AA157AC8C54034381b840Cb8f6bf7Fc355f0de"}, {"block": 71410195, "call": "eth_getStorageAt", "data": "0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103", "fact": "Can the code be replaced?", "result": "0x000000000000000000000000ce22c2af6839ea3702df1a5d3167f5a8d71e9d35", "to": "0x17AA157AC8C54034381b840Cb8f6bf7Fc355f0de"}, {"block": 71410195, "call": "eth_getStorageAt", "data": "0xa3f0ad74e5423aebfd80d3ef4346578335a9a72aeaee59ff6cb3582b35133d50", "fact": "Can the code be replaced?", "result": "0x0000000000000000000000000000000000000000000000000000000000000000", "to": "0x17AA157AC8C54034381b840Cb8f6bf7Fc355f0de"}, {"block": 71410195, "call": "owner()", "data": "0x8da5cb5b", "fact": "Who holds that power?", "result": "0x000000000000000000000000dedda08961216adb9ca09b88986d110127b24270", "to": "0xcE22c2af6839ea3702DF1A5D3167F5a8d71E9d35"}, {"block": 71410195, "call": "getThreshold()", "data": "0xe75235b8", "fact": "Who holds that power?", "result": "0x0000000000000000000000000000000000000000000000000000000000000002", "to": "0xDEddA08961216adB9Ca09B88986d110127b24270"}, {"block": 71410195, "call": "getOwners()", "data": "0xa0e67e2b", "fact": "Who holds that power?", "result": "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", "to": "0xDEddA08961216adB9Ca09B88986d110127b24270"}, {"block": 71410195, "call": "getMinDelay()", "data": "0xf27a0c92", "fact": "Delay before a change", "result": "error: {'code': -32000, 'message': 'execution reverted'}", "to": "0xDEddA08961216adB9Ca09B88986d110127b24270"}, {"block": 71410195, "call": "delay()", "data": "0x6a42b8f8", "fact": "Delay before a change", "result": "error: {'code': -32000, 'message': 'execution reverted'}", "to": "0xDEddA08961216adB9Ca09B88986d110127b24270"}, {"block": 71410195, "call": "getTimelock()", "data": "0x6221a54b", "fact": "Delay before a change", "result": "error: {'code': -32000, 'message': 'execution reverted'}", "to": "0xDEddA08961216adB9Ca09B88986d110127b24270"}, {"block": 71410195, "call": "paused()", "data": "0x5c975abb", "fact": "Can it be paused?", "result": "error: {'code': -32000, 'message': 'execution reverted'}", "to": "0x17AA157AC8C54034381b840Cb8f6bf7Fc355f0de"}], "title": "Who can change the rules", "v": 1}, "project": {"projectId": 6, "name": "Enosys V3", "kind": "contract", "keeper": "", "jurisdiction": "", "markText": "", "shape": "", "what": "", "repoUrl": "", "credit": "", "chunk": ""}}