dYdX's protocol is upgradeable via an admin key with a 3-day timelock and 2-of-3 multisig. The admin key is capable of making changes to critical parts of the smart contract ecosystem.

Is the security of user funds dependent on opsec of admin key?

Yes ⚠️

Current Admin Key Config

Timelock: 3 days Multisig: 2-of-3

Claimed Admin Key OpSec


Verified Admin Key OpSec

Unverifiable ⚠️

Admin Key Address


More Info & Documentation

dYdX Help CenterArticle Brahmah Audit Report (see "Highly Privileged Accounts")