{"project": {"projectId": 2, "author": "0x90b3a1fded70ea72609644e2f0a45091ef02cfd2", "network": "flare", "kind": "contract", "chainId": 14, "subject": "0xb84f771305d10607dd086b2f89712c0ced379407", "name": "Kinetic kFLR market and Comptroller", "fingerprint": "0x9d018cb09ba59abc30090792b5242b61775f1b7983c643c9b8b48d6340a3903d", "content": "{\"facts\":[{\"a\":\"Yes. kFLR market admin is 0xfaC3F74c3dDed68AAA5Cd6f37793fC792e74A4c7; Comptroller admin is 0x81274d9250C8a36c62d3F45F18BD34D44D433b45; Comptroller implementation is 0x2E7C09c84dBB4d08e103bd00199D2d9424c9734a.\",\"how\":\"admin() on the kFLR market; comptroller() on the kFLR market; admin() and comptrollerImplementation() on the Comptroller.\",\"q\":\"Can the code be replaced?\"},{\"a\":\"timelock 72 h for both: 0xfaC3F74c3dDed68AAA5Cd6f37793fC792e74A4c7 on the market and 0x81274d9250C8a36c62d3F45F18BD34D44D433b45 on the Comptroller.\",\"how\":\"getMinDelay() on both timelock addresses.\",\"q\":\"Who holds that power?\"},{\"a\":\"72 h (259200 seconds) on both.\",\"how\":\"getMinDelay() on both timelock addresses.\",\"q\":\"Delay before a change\"},{\"a\":\"PauseGuardian contract 0x452B97fdcB1bCf333112Bf7920a81161de29F41d; not resolved further.\",\"how\":\"pauseGuardian() on the Comptroller and eth_getCode on the PauseGuardian address.\",\"q\":\"Can it be paused?\"}],\"footer\":\"What this can't tell you: audits, team identity, intent, or whether a Safe's signers are distinct people.\",\"receipts\":[{\"block\":71410195,\"call\":\"admin()\",\"data\":\"0xf851a440\",\"fact\":\"Can the code be replaced?\",\"result\":\"0x000000000000000000000000fac3f74c3dded68aaa5cd6f37793fc792e74a4c7\",\"to\":\"0xb84F771305d10607Dd086B2f89712c0CeD379407\"},{\"block\":71410195,\"call\":\"comptroller()\",\"data\":\"0x5fe3b567\",\"fact\":\"Can the code be replaced?\",\"result\":\"0x0000000000000000000000008041680fb73e1fe5f851e76233dcdfa0f2d2d7c8\",\"to\":\"0xb84F771305d10607Dd086B2f89712c0CeD379407\"},{\"block\":71410195,\"call\":\"admin()\",\"data\":\"0xf851a440\",\"fact\":\"Can the code be replaced?\",\"result\":\"0x00000000000000000000000081274d9250c8a36c62d3f45f18bd34d44d433b45\",\"to\":\"0x8041680Fb73E1Fe5F851e76233DCDfA0f2D2D7c8\"},{\"block\":71410195,\"call\":\"comptrollerImplementation()\",\"data\":\"0xbb82aa5e\",\"fact\":\"Can the code be replaced?\",\"result\":\"0x0000000000000000000000002e7c09c84dbb4d08e103bd00199d2d9424c9734a\",\"to\":\"0x8041680Fb73E1Fe5F851e76233DCDfA0f2D2D7c8\"},{\"block\":71410195,\"call\":\"getMinDelay()\",\"data\":\"0xf27a0c92\",\"fact\":\"Who holds that power?\",\"result\":\"0x000000000000000000000000000000000000000000000000000000000003f480\",\"to\":\"0xfaC3F74c3dDed68AAA5Cd6f37793fC792e74A4c7\"},{\"block\":71410195,\"call\":\"delay()\",\"data\":\"0x6a42b8f8\",\"fact\":\"Who holds that power?\",\"result\":\"error: {'code': -32000, 'message': 'execution reverted'}\",\"to\":\"0xfaC3F74c3dDed68AAA5Cd6f37793fC792e74A4c7\"},{\"block\":71410195,\"call\":\"getTimelock()\",\"data\":\"0x6221a54b\",\"fact\":\"Who holds that power?\",\"result\":\"error: {'code': -32000, 'message': 'execution reverted'}\",\"to\":\"0xfaC3F74c3dDed68AAA5Cd6f37793fC792e74A4c7\"},{\"block\":71410195,\"call\":\"getMinDelay()\",\"data\":\"0xf27a0c92\",\"fact\":\"Who holds that power?\",\"result\":\"0x000000000000000000000000000000000000000000000000000000000003f480\",\"to\":\"0x81274d9250C8a36c62d3F45F18BD34D44D433b45\"},{\"block\":71410195,\"call\":\"delay()\",\"data\":\"0x6a42b8f8\",\"fact\":\"Who holds that power?\",\"result\":\"error: {'code': -32000, 'message': 'execution reverted'}\",\"to\":\"0x81274d9250C8a36c62d3F45F18BD34D44D433b45\"},{\"block\":71410195,\"call\":\"getTimelock()\",\"data\":\"0x6221a54b\",\"fact\":\"Who holds that power?\",\"result\":\"error: {'code': -32000, 'message': 'execution reverted'}\",\"to\":\"0x81274d9250C8a36c62d3F45F18BD34D44D433b45\"},{\"block\":71410195,\"call\":\"pauseGuardian()\",\"data\":\"0x24a3d622\",\"fact\":\"Can it be paused?\",\"result\":\"0x000000000000000000000000452b97fdcb1bcf333112bf7920a81161de29f41d\",\"to\":\"0x8041680Fb73E1Fe5F851e76233DCDfA0f2D2D7c8\"},{\"block\":71410195,\"call\":\"eth_getCode\",\"data\":\"0x\",\"fact\":\"Can it be paused?\",\"result\":\"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\",\"to\":\"0x452B97fdcB1bCf333112Bf7920a81161de29F41d\"}],\"title\":\"Who can change the rules\",\"v\":1}", "txHash": "0x9da859abdc71e4cc4c2f4919920b26683ef266d3f383f5c59df38b679de07d45", "receiptUrl": "https://flare-explorer.flare.network/tx/0x9da859abdc71e4cc4c2f4919920b26683ef266d3f383f5c59df38b679de07d45", "blockNumber": 72105775, "jurisdiction": "", "markText": "", "shape": "", "keeper": "", "what": "", "repoUrl": "", "credit": "", "chunk": ""}, "notes": [{"noteId": 2, "projectId": 2, "author": "0x90b3a1fded70ea72609644e2f0a45091ef02cfd2", "authorName": "Steven Hudspeth", "authorHandle": "hudspeth589", "authorVerified": true, "authorShort": "0x90b3...cfd2", "source": "reef", "status": "", "alsoReports": 0, "separateFrom": 0, "kind": 0, "kindLabel": "finding", "inReplyTo": 0, "fingerprint": "0x9d018cb09ba59abc30090792b5242b61775f1b7983c643c9b8b48d6340a3903d", "content": "{\"facts\":[{\"a\":\"Yes. kFLR market admin is 0xfaC3F74c3dDed68AAA5Cd6f37793fC792e74A4c7; Comptroller admin is 0x81274d9250C8a36c62d3F45F18BD34D44D433b45; Comptroller implementation is 0x2E7C09c84dBB4d08e103bd00199D2d9424c9734a.\",\"how\":\"admin() on the kFLR market; comptroller() on the kFLR market; admin() and comptrollerImplementation() on the Comptroller.\",\"q\":\"Can the code be replaced?\"},{\"a\":\"timelock 72 h for both: 0xfaC3F74c3dDed68AAA5Cd6f37793fC792e74A4c7 on the market and 0x81274d9250C8a36c62d3F45F18BD34D44D433b45 on the Comptroller.\",\"how\":\"getMinDelay() on both timelock addresses.\",\"q\":\"Who holds that power?\"},{\"a\":\"72 h (259200 seconds) on both.\",\"how\":\"getMinDelay() on both timelock addresses.\",\"q\":\"Delay before a change\"},{\"a\":\"PauseGuardian contract 0x452B97fdcB1bCf333112Bf7920a81161de29F41d; not resolved further.\",\"how\":\"pauseGuardian() on the Comptroller and eth_getCode on the PauseGuardian address.\",\"q\":\"Can it be paused?\"}],\"footer\":\"What this can't tell you: audits, team identity, intent, or whether a Safe's signers are distinct people.\",\"receipts\":[{\"block\":71410195,\"call\":\"admin()\",\"data\":\"0xf851a440\",\"fact\":\"Can the code be replaced?\",\"result\":\"0x000000000000000000000000fac3f74c3dded68aaa5cd6f37793fc792e74a4c7\",\"to\":\"0xb84F771305d10607Dd086B2f89712c0CeD379407\"},{\"block\":71410195,\"call\":\"comptroller()\",\"data\":\"0x5fe3b567\",\"fact\":\"Can the code be replaced?\",\"result\":\"0x0000000000000000000000008041680fb73e1fe5f851e76233dcdfa0f2d2d7c8\",\"to\":\"0xb84F771305d10607Dd086B2f89712c0CeD379407\"},{\"block\":71410195,\"call\":\"admin()\",\"data\":\"0xf851a440\",\"fact\":\"Can the code be replaced?\",\"result\":\"0x00000000000000000000000081274d9250c8a36c62d3f45f18bd34d44d433b45\",\"to\":\"0x8041680Fb73E1Fe5F851e76233DCDfA0f2D2D7c8\"},{\"block\":71410195,\"call\":\"comptrollerImplementation()\",\"data\":\"0xbb82aa5e\",\"fact\":\"Can the code be replaced?\",\"result\":\"0x0000000000000000000000002e7c09c84dbb4d08e103bd00199d2d9424c9734a\",\"to\":\"0x8041680Fb73E1Fe5F851e76233DCDfA0f2D2D7c8\"},{\"block\":71410195,\"call\":\"getMinDelay()\",\"data\":\"0xf27a0c92\",\"fact\":\"Who holds that power?\",\"result\":\"0x000000000000000000000000000000000000000000000000000000000003f480\",\"to\":\"0xfaC3F74c3dDed68AAA5Cd6f37793fC792e74A4c7\"},{\"block\":71410195,\"call\":\"delay()\",\"data\":\"0x6a42b8f8\",\"fact\":\"Who holds that power?\",\"result\":\"error: {'code': -32000, 'message': 'execution reverted'}\",\"to\":\"0xfaC3F74c3dDed68AAA5Cd6f37793fC792e74A4c7\"},{\"block\":71410195,\"call\":\"getTimelock()\",\"data\":\"0x6221a54b\",\"fact\":\"Who holds that power?\",\"result\":\"error: {'code': -32000, 'message': 'execution reverted'}\",\"to\":\"0xfaC3F74c3dDed68AAA5Cd6f37793fC792e74A4c7\"},{\"block\":71410195,\"call\":\"getMinDelay()\",\"data\":\"0xf27a0c92\",\"fact\":\"Who holds that power?\",\"result\":\"0x000000000000000000000000000000000000000000000000000000000003f480\",\"to\":\"0x81274d9250C8a36c62d3F45F18BD34D44D433b45\"},{\"block\":71410195,\"call\":\"delay()\",\"data\":\"0x6a42b8f8\",\"fact\":\"Who holds that power?\",\"result\":\"error: {'code': -32000, 'message': 'execution reverted'}\",\"to\":\"0x81274d9250C8a36c62d3F45F18BD34D44D433b45\"},{\"block\":71410195,\"call\":\"getTimelock()\",\"data\":\"0x6221a54b\",\"fact\":\"Who holds that power?\",\"result\":\"error: {'code': -32000, 'message': 'execution reverted'}\",\"to\":\"0x81274d9250C8a36c62d3F45F18BD34D44D433b45\"},{\"block\":71410195,\"call\":\"pauseGuardian()\",\"data\":\"0x24a3d622\",\"fact\":\"Can it be paused?\",\"result\":\"0x000000000000000000000000452b97fdcb1bcf333112bf7920a81161de29f41d\",\"to\":\"0x8041680Fb73E1Fe5F851e76233DCDfA0f2D2D7c8\"},{\"block\":71410195,\"call\":\"eth_getCode\",\"data\":\"0x\",\"fact\":\"Can it be paused?\",\"result\":\"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\",\"to\":\"0x452B97fdcB1bCf333112Bf7920a81161de29F41d\"}],\"title\":\"Who can change the rules\",\"v\":1}", "structured": null, "uri": "", "txHash": "0xe835a691e94b603dc14ed3f0affa355effcbe3e89f86b32f38318566596118f7", "receiptUrl": "https://flare-explorer.flare.network/tx/0xe835a691e94b603dc14ed3f0affa355effcbe3e89f86b32f38318566596118f7", "blockNumber": 72105780, "voice": null, "voiceReceipt": null, "amendmentReason": null, "amendmentFingerprint": null, "retractedReason": null, "authorTier": 1, "factors": ["Receipt", "Verified"], "withheld": null, "checkResults": []}], "threads": [{"projectId": 2, "rootNoteId": 2, "standing": "stands", "receiptCount": 1, "inputs": {"notes": [{"factors": ["Receipt", "Verified"], "inReplyTo": 0, "kind": 0, "noteId": 2, "retracted": false, "voice": null, "weight": 3.0, "withheld": false}], "rootNoteId": 2, "version": "0.3"}}], "voiceLabels": [], "card": {"projectId": 2, "name": "Kinetic kFLR market and Comptroller", "checked": "2026-10-28", "risk": {"word": "Lower", "reasons": ["The code can be swapped out.", "Money of users is held here today.", "More than $1 million is at stake.", "A group of signers is in control.", "A waiting period of at least 72 hours is in place."], "wouldLower": [], "reasonKeys": ["upgradeable", "money-held", "large-money", "group-signers", "long-delay"]}, "control": "A group of 3 of 7, and every change waits 3 days first.", "delay": "After 3 days.", "freeze": "We could not tell.", "siteSays": "We have not checked their site yet.", "changes": [{"date": "2026-10-14", "line": "First check recorded."}], "response": "None yet. Kinetic kFLR market and Comptroller can answer here.", "money": {"band": "over 1M", "text": "about $1 million", "receipt": {"block": 73201910, "feedId": "0x01464c522f55534400000000000000000000000000", "ftsoV2": "0x7bde3df0624114edb3a67dfe6753e62f4e7c1d20", "timestamp": 1793221675}}, "report": null, "about": "A lending market. You deposit FLR and other tokens to earn, or borrow against them.", "statusLine": "A group of 3 of 7 can change the rules, after 3 days.", "xHandle": {"handle": "Kinetic_Markets", "sourceUrl": "https://kinetic.market", "readAt": "2026-10-07"}, "sent": {"state": "not-sent"}, "receiptsMatch": {"ok": 2, "total": 4, "checkedAt": "2026-10-28"}, "findingsCount": 1, "answer": {"state": "none"}, "kind": "contract"}}