Safe Multisig Checker: Owners, Threshold and Modules
Inspect a Safe before trusting it: its signers, how many must sign, the modules and guards that can act on it and its recent changes.
Multi-chainEthereumBase+3Table · StrataPlanned
DeFi Admin Keys: Multisig Thresholds and Timelocks
Who can upgrade or move funds in each major protocol, how many signers must agree and how long is the timelock?
Proxy admins, owners and multisig thresholds for each major protocol, with the timelock that stands between a change and its execution.
ShareEmail it
Blueprint
What the table will hold.
The table as it will open in Strata. Each figure is named here and arrives with its receipt; until its data is published, its place stays empty.
One row One row per protocol contract and power, such as upgrade, pause or move funds, at a pinned blockSorted by Value at stake, highest first
| Protocol | Contract | Chain | Power | Held by | Holder | Threshold | Timelock delayhours | Safe modules | Value at stakeUSD | Last change | Receipt |
|---|---|---|---|---|---|---|---|---|---|---|---|
- Protocol protocol Text
- The protocol the contract belongs to, from the protocol registry.
- Contract contract Address
- The contract whose control the row describes, linked to its code.
- Chain chain Chain
- The chain the contract is deployed on.
- Power power Text
- What the holder can do: upgrade code, change parameters, pause, mint or move funds.
- Held by holder_type Text
- Whether the power sits with a single key, a Safe, a timelock, a governor or nobody.
- Holder holder Address
- The address that holds the power, labelled where a public source supports the label.
- Threshold threshold Text
- For a multisig holder, the signers required out of the total, such as three of five.
- Timelock delay timelock_delay Number
- The minimum wait between queueing and executing a change through this path, or none.
- Safe modules modules Number
- Modules enabled on the holder Safe, each able to act without the threshold.
- Value at stake tvl_guarded Exact amount
- Value locked in the contracts this power can change, from the same day's value locked figures.
- Last change last_change Date
- When the holder, threshold or delay last changed, from the logs.
- Receipt receipt Link
- The block, storage slots and calls behind the row.
Filter by Chain, Held by, Power.
About
What it answers, and for whom.
Most DeFi protocols can be changed after launch. A proxy admin can swap the code behind a contract and an owner can change parameters or move funds. Those powers usually sit with a multisig, a timelock or a governance contract. This table shows, for each major protocol, who holds each power, how many signers must agree and how long a change must wait before it can run.
Every row comes from contract state: the EIP-1967 admin and implementation slots, owner() and role assignments, a Safe's owners and threshold and a timelock's minimum delay. It describes control, not quality: a short delay or a low threshold is a fact to weigh, not a verdict on a protocol. Each row links to the reads behind it.
Method
How it will be measured.
Every figure will be read at a block, kept with its source and its exact read, and open a receipt anyone can re-check.
How receipts work →- Proxies are found from the EIP-1967 implementation and admin storage slots, read with eth_getStorageAt at a pinned block, and followed to the contract that can upgrade them.
- Owners and roles come from owner() calls and AccessControl RoleGranted and RoleRevoked logs, replayed to find the current holder of each role.
- Where a holder is a Safe, getOwners(), getThreshold() and getModulesPaginated() give its signers, threshold and modules; a module can act without the threshold and is listed as a power of its own.
- Timelocks are read from TimelockController getMinDelay() or a Compound-style Timelock delay(); a power with no timelock on its path is shown as immediate.
- On Solana, a program's upgrade authority is read from its program data account; a program with no upgrade authority cannot be changed.
The data it needs
Read from chain state and history
- address_labelsTo buildAddress labelsLabels for known addresses: exchanges, bridges, protocols, funds, treasuries, sanctioned addresses and known attackers.
- defi_tvl_dailyTo buildDeFi value lockedAssets deposited in DeFi protocols per protocol, chain and asset at day end, valued with oracle prices, never double counting receipt tokens.
- governance_votesTo buildGovernance proposals and votesProposals, votes, voting power and turnout in on-chain governors, with off-chain votes recorded with their source.
- EIP-1967 admin and implementation slots via eth_getStorageAt for protocol proxies
- owner() reads and AccessControl RoleGranted and RoleRevoked logs
- Safe getOwners(), getThreshold() and getModulesPaginated() for admin multisigs
- TimelockController getMinDelay() and Compound-style Timelock delay()
- Solana program data accounts for each program's upgrade authority
Questions
Questions people ask.
What is an admin key in DeFi?
Any address with special power over a protocol's contracts: upgrading their code, pausing them, changing parameters or moving funds. It can be a single wallet, a multisig, a timelock or a governance contract.
What does a multisig threshold mean?
A multisig needs a set number of its signers to approve each transaction, such as three of five. A higher threshold makes one stolen key less dangerous, though how independent the signers are matters as much as how many there are.
Why do timelocks matter?
A timelock forces a wait between when a change is queued and when it can run. During that window anyone can see the pending change on-chain and withdraw if they disagree, which is why a missing or very short delay is worth noticing.
Is a protocol with admin keys unsafe?
Admin keys are a trade-off. They let teams fix bugs and respond to attacks, and they also let a compromised or malicious key change the rules. This table shows who holds each power and what stands in its way, so readers can weigh that trade-off themselves.
What is an upgradeable proxy?
A contract that forwards every call to a separate implementation contract whose address can be changed. Users keep interacting with the same address while the code behind it can be replaced by whoever controls the proxy.
- Proxy admin
- The address allowed to change a proxy's implementation, stored in the EIP-1967 admin slot or set by the proxy's own upgrade logic.
- Safe
- A widely used smart-contract multisig wallet that executes a transaction only with a set threshold of owner signatures.
- Timelock
- A contract that holds queued transactions for a minimum delay before anyone can execute them.
- Safe module
- An extension enabled on a Safe that can execute transactions without the usual signer threshold.
Related
More apps like this.
Smart Contract Upgrade Tracker: Proxy and Owner Changes
Implementation, admin, owner and multisig signer changes on major protocol contracts, and the upgrades already queued in timelocks.
Multi-chainEthereumToken Safety Check: Mint, Blacklist and Owner Powers
The powers a token contract still keeps, from minting and blacklisting to pausing, fee changes and upgrades, read from the contract.
Multi-chainCrypto Hack Tracker: Exploits and Losses This Year
Every major hack and exploit of the year with the amount taken, how the attackers got in and where the stolen funds sit now.
Multi-chainDAO Governance Tracker: On-Chain Proposals and Votes
Live and recent on-chain DAO proposals: votes cast, quorum progress, voting power and whether each passed and was executed.
Multi-chainEthereumArbitrum+1DeFi TVL by Chain: Total Value Locked Rankings
DeFi value locked on each chain, counted once at oracle prices, with the chain ranking, Ethereum's share and the protocols behind it.
Multi-chainEthereumSolana+3Build DeFi Admin Keys: Multisig Thresholds and Timelocks on verified data.
Start free in Voltfin Studio: boards, tables and reports where every number opens its receipt. Tell us which data you need first and we will build it next.