{"note": {"noteId": 8, "projectId": 8, "author": "0x90b3a1fded70ea72609644e2f0a45091ef02cfd2", "authorName": "Steven Hudspeth", "authorHandle": "hudspeth589", "authorVerified": true, "authorShort": "0x90b3...cfd2", "source": "reef", "status": "", "alsoReports": 0, "separateFrom": 0, "kind": 0, "kindLabel": "finding", "inReplyTo": 0, "fingerprint": "0xe827c06b7432cedd59c5a6e148c3c92a2ba154897d291dbc81d60bda26a2982c", "content": "{\"facts\":[{\"a\":\"Yes. FXRP token implementation is 0x53cFB685D773CfAA657fF07B70602D3cF27525d3, and assetManager() is 0x2a3Fe068cD92178554cabcf7c95ADf49B4B0B6A8.\",\"how\":\"eth_getStorageAt implementation slot on the FXRP token; assetManager() on the FXRP token.\",\"q\":\"Can the code be replaced?\"},{\"a\":\"Safe 6 of 11 at 0xbe653C54DF337F13Fcb726101388F4a4803049F3, through GovernanceSettings 0x1000000000000000000000000000000000000007.\",\"how\":\"governanceSettings() and governance() on the AssetManager; getThreshold() and getOwners() on the governance address.\",\"q\":\"Who holds that power?\"},{\"a\":\"1 h (3600 seconds).\",\"how\":\"getTimelock() on GovernanceSettings.\",\"q\":\"Delay before a change\"},{\"a\":\"Not probed. FAssets have their own emergency pause; separate row needed.\",\"how\":\"The Sep 15 probe did not resolve the FAssets emergency pause path.\",\"q\":\"Can it be paused?\"}],\"footer\":\"What this can't tell you: audits, team identity, intent, or whether a Safe's signers are distinct people.\",\"receipts\":[{\"block\":71410195,\"call\":\"eth_getStorageAt\",\"data\":\"0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc\",\"fact\":\"Can the code be replaced?\",\"result\":\"0x00000000000000000000000053cfb685d773cfaa657ff07b70602d3cf27525d3\",\"to\":\"0xAd552A648C74D49E10027AB8a618A3ad4901c5bE\"},{\"block\":71410195,\"call\":\"assetManager()\",\"data\":\"0x94217ad1\",\"fact\":\"Can the code be replaced?\",\"result\":\"0x0000000000000000000000002a3fe068cd92178554cabcf7c95adf49b4b0b6a8\",\"to\":\"0xAd552A648C74D49E10027AB8a618A3ad4901c5bE\"},{\"block\":71410195,\"call\":\"governanceSettings()\",\"data\":\"0x62354e03\",\"fact\":\"Who holds that power?\",\"result\":\"0x0000000000000000000000001000000000000000000000000000000000000007\",\"to\":\"0x2a3Fe068cD92178554cabcf7c95ADf49B4B0B6A8\"},{\"block\":71410195,\"call\":\"governance()\",\"data\":\"0x5aa6e675\",\"fact\":\"Who holds that power?\",\"result\":\"0x000000000000000000000000be653c54df337f13fcb726101388f4a4803049f3\",\"to\":\"0x2a3Fe068cD92178554cabcf7c95ADf49B4B0B6A8\"},{\"block\":71410195,\"call\":\"getThreshold()\",\"data\":\"0xe75235b8\",\"fact\":\"Who holds that power?\",\"result\":\"0x0000000000000000000000000000000000000000000000000000000000000006\",\"to\":\"0xbe653C54DF337F13Fcb726101388F4a4803049F3\"},{\"block\":71410195,\"call\":\"getOwners()\",\"data\":\"0xa0e67e2b\",\"fact\":\"Who holds that power?\",\"result\":\"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\",\"to\":\"0xbe653C54DF337F13Fcb726101388F4a4803049F3\"},{\"block\":71410195,\"call\":\"getTimelock()\",\"data\":\"0x6221a54b\",\"fact\":\"Delay before a change\",\"result\":\"0x0000000000000000000000000000000000000000000000000000000000000e10\",\"to\":\"0x1000000000000000000000000000000000000007\"}],\"title\":\"Who can change the rules\",\"v\":1}", "structured": null, "uri": "", "txHash": "0x3c41e3bf4a9ef60fafb70ce2517215a339a482730aa80b13a38f8ebf88babd87", "receiptUrl": "https://flare-explorer.flare.network/tx/0x3c41e3bf4a9ef60fafb70ce2517215a339a482730aa80b13a38f8ebf88babd87", "blockNumber": 72105832, "voice": null, "voiceReceipt": null, "amendmentReason": null, "amendmentFingerprint": null, "retractedReason": null, "authorTier": 1, "factors": ["Receipt", "Verified"], "withheld": null, "checkResults": [], "parsed": {"facts": [{"a": "Yes. FXRP token implementation is 0x53cFB685D773CfAA657fF07B70602D3cF27525d3, and assetManager() is 0x2a3Fe068cD92178554cabcf7c95ADf49B4B0B6A8.", "how": "eth_getStorageAt implementation slot on the FXRP token; assetManager() on the FXRP token.", "q": "Can the code be replaced?"}, {"a": "Safe 6 of 11 at 0xbe653C54DF337F13Fcb726101388F4a4803049F3, through GovernanceSettings 0x1000000000000000000000000000000000000007.", "how": "governanceSettings() and governance() on the AssetManager; getThreshold() and getOwners() on the governance address.", "q": "Who holds that power?"}, {"a": "1 h (3600 seconds).", "how": "getTimelock() on GovernanceSettings.", "q": "Delay before a change"}, {"a": "Not probed. FAssets have their own emergency pause; separate row needed.", "how": "The Sep 15 probe did not resolve the FAssets emergency pause path.", "q": "Can it be paused?"}], "footer": "What this can't tell you: audits, team identity, intent, or whether a Safe's signers are distinct people.", "receipts": [{"block": 71410195, "call": "eth_getStorageAt", "data": "0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc", "fact": "Can the code be replaced?", "result": "0x00000000000000000000000053cfb685d773cfaa657ff07b70602d3cf27525d3", "to": "0xAd552A648C74D49E10027AB8a618A3ad4901c5bE"}, {"block": 71410195, "call": "assetManager()", "data": "0x94217ad1", "fact": "Can the code be replaced?", "result": "0x0000000000000000000000002a3fe068cd92178554cabcf7c95adf49b4b0b6a8", "to": "0xAd552A648C74D49E10027AB8a618A3ad4901c5bE"}, {"block": 71410195, "call": "governanceSettings()", "data": "0x62354e03", "fact": "Who holds that power?", "result": "0x0000000000000000000000001000000000000000000000000000000000000007", "to": "0x2a3Fe068cD92178554cabcf7c95ADf49B4B0B6A8"}, {"block": 71410195, "call": "governance()", "data": "0x5aa6e675", "fact": "Who holds that power?", "result": "0x000000000000000000000000be653c54df337f13fcb726101388f4a4803049f3", "to": "0x2a3Fe068cD92178554cabcf7c95ADf49B4B0B6A8"}, {"block": 71410195, "call": "getThreshold()", "data": "0xe75235b8", "fact": "Who holds that power?", "result": "0x0000000000000000000000000000000000000000000000000000000000000006", "to": "0xbe653C54DF337F13Fcb726101388F4a4803049F3"}, {"block": 71410195, "call": "getOwners()", "data": "0xa0e67e2b", "fact": "Who holds that power?", "result": "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", "to": "0xbe653C54DF337F13Fcb726101388F4a4803049F3"}, {"block": 71410195, "call": "getTimelock()", "data": "0x6221a54b", "fact": "Delay before a change", "result": "0x0000000000000000000000000000000000000000000000000000000000000e10", "to": "0x1000000000000000000000000000000000000007"}], "title": "Who can change the rules", "v": 1}}, "parsed": {"facts": [{"a": "Yes. FXRP token implementation is 0x53cFB685D773CfAA657fF07B70602D3cF27525d3, and assetManager() is 0x2a3Fe068cD92178554cabcf7c95ADf49B4B0B6A8.", "how": "eth_getStorageAt implementation slot on the FXRP token; assetManager() on the FXRP token.", "q": "Can the code be replaced?"}, {"a": "Safe 6 of 11 at 0xbe653C54DF337F13Fcb726101388F4a4803049F3, through GovernanceSettings 0x1000000000000000000000000000000000000007.", "how": "governanceSettings() and governance() on the AssetManager; getThreshold() and getOwners() on the governance address.", "q": "Who holds that power?"}, {"a": "1 h (3600 seconds).", "how": "getTimelock() on GovernanceSettings.", "q": "Delay before a change"}, {"a": "Not probed. FAssets have their own emergency pause; separate row needed.", "how": "The Sep 15 probe did not resolve the FAssets emergency pause path.", "q": "Can it be paused?"}], "footer": "What this can't tell you: audits, team identity, intent, or whether a Safe's signers are distinct people.", "receipts": [{"block": 71410195, "call": "eth_getStorageAt", "data": "0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc", "fact": "Can the code be replaced?", "result": "0x00000000000000000000000053cfb685d773cfaa657ff07b70602d3cf27525d3", "to": "0xAd552A648C74D49E10027AB8a618A3ad4901c5bE"}, {"block": 71410195, "call": "assetManager()", "data": "0x94217ad1", "fact": "Can the code be replaced?", "result": "0x0000000000000000000000002a3fe068cd92178554cabcf7c95adf49b4b0b6a8", "to": "0xAd552A648C74D49E10027AB8a618A3ad4901c5bE"}, {"block": 71410195, "call": "governanceSettings()", "data": "0x62354e03", "fact": "Who holds that power?", "result": "0x0000000000000000000000001000000000000000000000000000000000000007", "to": "0x2a3Fe068cD92178554cabcf7c95ADf49B4B0B6A8"}, {"block": 71410195, "call": "governance()", "data": "0x5aa6e675", "fact": "Who holds that power?", "result": "0x000000000000000000000000be653c54df337f13fcb726101388f4a4803049f3", "to": "0x2a3Fe068cD92178554cabcf7c95ADf49B4B0B6A8"}, {"block": 71410195, "call": "getThreshold()", "data": "0xe75235b8", "fact": "Who holds that power?", "result": "0x0000000000000000000000000000000000000000000000000000000000000006", "to": "0xbe653C54DF337F13Fcb726101388F4a4803049F3"}, {"block": 71410195, "call": "getOwners()", "data": "0xa0e67e2b", "fact": "Who holds that power?", "result": "0x0000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000ebacb762a5dc1f022fce61be0deb5d24239365080000000000000000000000001ff339f9e01a138201c03a42050973a024d568ee000000000000000000000000714783a6e709b878f9181ce43222683fd32eaccd000000000000000000000000968631112f9517450b524bed54b39efb8e6cbac6000000000000000000000000460a7f465e8e9b4189f2ae22a900cc9e5c7372d00000000000000000000000006bc7dca62010d418eb72ccdc58561e00c5868ef1000000000000000000000000e34bb361536610a9dccea5292262e36aff65c06c0000000000000000000000002d40222a08f8d1d51e8e9eae640aaa2f00062ac80000000000000000000000006455dc38fdf739b6fe021b30c7d9672c1c6deb5c00000000000000000000000049893c5dfc035f4ee4e46fac014f6d4bc80f7f920000000000000000000000005d2f75392ddda69a2818021dd6a64937904c8352", "to": "0xbe653C54DF337F13Fcb726101388F4a4803049F3"}, {"block": 71410195, "call": "getTimelock()", "data": "0x6221a54b", "fact": "Delay before a change", "result": "0x0000000000000000000000000000000000000000000000000000000000000e10", "to": "0x1000000000000000000000000000000000000007"}], "title": "Who can change the rules", "v": 1}, "project": {"projectId": 8, "name": "FAssets FXRP", "kind": "contract", "keeper": "", "jurisdiction": "", "markText": "", "shape": "", "what": "", "repoUrl": "", "credit": "", "chunk": ""}}