dYdX's protocol is upgradeable via an admin key with a 3-day timelock and 2-of-3 multisig. The admin key is capable of making changes to critical parts of the smart contract ecosystem.
Yes ⚠️
Timelock: 3 days Multisig: 2-of-3
None
Unverifiable ⚠️
https://etherscan.io/address/0xba2906b18b069b40c6d2cafd392e76ad479b1b53
dYdX Help CenterArticle Brahmah Audit Report (see "Highly Privileged Accounts")