dYdX

dYdX's protocol is upgradeable via an admin key with a 3-day timelock and 2-of-3 multisig. The admin key is capable of making changes to critical parts of the smart contract ecosystem.

Is the security of user funds dependent on opsec of admin key?

Yes ⚠️

Current Admin Key Config

Timelock: 3 days Multisig: 2-of-3

Claimed Admin Key OpSec

None

Verified Admin Key OpSec

Unverifiable ⚠️

Admin Key Address

https://etherscan.io/address/0xba2906b18b069b40c6d2cafd392e76ad479b1b53

More Info & Documentation

dYdX Help CenterArticle Brahmah Audit Report (see "Highly Privileged Accounts")