CelebtirAll chains · 16 assessed protocols · 2026-10-24 · methodology v0.2
0
Recorded on-chain changes · 30-day window ending 2026-10-24.
2 Celebtir snapshots. Collection gaps do not establish an absence of changes.
Inspect observation coverage ↗outside delayed or immutable control
DefiLlama · 12/16 reporting. Deposits may overlap; TVL is not unique economic value. Unknown control is not proof of no delay.
Explore value by control ↗9 / 12
High upgrade-delay ratings · Solana
Six independent factors; no composite security score. Native HyperEVM assessment remains separate.
Explore risk assessments ↗Counts per assessed Solana protocol · Low / Medium / High / Unknown / N/A
Effective controller: Squads 6 of 10 · no delay
To improve: a time lock of 24 h+ → MEDIUM; 5 days+ → LOW
Criteria, evidence and record slot ↗30 days of DefiLlama history · 2 Celebtir snapshots. Missing days remain gaps.
Stages describe who can change the protocol and how fast. They don't measure code security.
2 daily snapshots, 2026-10-21 to 2026-10-24. Days without a snapshot are left as gaps.
| Date | Total TVL |
|---|---|
| 2026-10-21 | $8.43B |
| 2026-10-24 | $7.94B |
| Date | Single key | Unrecognized | Multisig, no delay | Multisig with delay | Immutable |
|---|---|---|---|---|---|
| 2026-10-21 | $0 | $0 | $6.02B | $2.41B | $0 |
| 2026-10-24 | $0 | $0 | $5.68B | $2.26B | $0 |
| Date | Unrated | Stage 0 | Stage 1 | Stage 2 |
|---|---|---|---|---|
| 2026-10-21 | 2 | 10 | 0 | 0 |
| 2026-10-24 | 3 | 13 | 0 | 0 |
Ranked by TVL. TVL is context and never changes a rating. Focus any factor cell for its rating and reason.
Every rated protocol.
| UCUDAPCTODDP | ||||||||
|---|---|---|---|---|---|---|---|---|
| 1 | Kamino Lend | Lending | UCUpgrade controlMediumSquads v4 multisig, 5 of 10 voters, time lock 24 hUDUpgrade delayMediumtime lock 24 hAPAdmin powersHighlending_market_owner can change parameters, held by Squads v4 multisig, 4 of 10 voters, time lock 12 hCTCode transparencyLowverified build of Kamino-Finance/klend@e921c64 at e921c648765fc2343c87614a00f4b39b640f0510ODOracle dependencyHighSOL reserve: prices come from a protocol-run feedDPDependenciesLowcalls no other programs with user funds | Missing for Stage 1:upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisigadmin powers rated Low or MediumStages describe who can change the protocol and how fast. They don't measure code security. | Squads 5 of 10 · 24 h delay | $1.26B | $143.72Kfees−5.8% | None recorded |
| 2 | Raydium | Spot DEX | UCUpgrade controlMedium675k…1Mp8: Squads v4 multisig, 3 of 4 voters, time lock 0 s; CAMM…rWqK: Squads v4 multisig, 3 of 4 voters, time lock 0 s; CPMM…KP1C: Squads v4 multisig, 3 of 4 voters, time lock 0 sUDUpgrade delayHigh675k…1Mp8: time lock 0 s; CAMM…rWqK: time lock 0 s; CPMM…KP1C: time lock 0 sAPAdmin powersHighowner can change parameters, held by single key proj…k416CTCode transparencyMedium675k…1Mp8: source public at raydium-io/raydium-amm, but the deployed build is not verified; CAMM…rWqK: source public at raydium-io/raydium-clmm@119ed36, but the deployed build is not verified; CPMM…KP1C: source public at raydium-io/raydium-cp-swap@cfdb70a, but the deployed build is not verifiedODOracle dependencyNot applicablethe registry lists no price feeds; the evidence is the core programs' upgrade readsDPDependenciesLowcalls no other programs with user funds | Missing for Stage 1:upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisigadmin powers rated Low or Mediumverified builds for all core programsStages describe who can change the protocol and how fast. They don't measure code security. | Squads 3 of 4 · no delay | $1.14B | $135.67Mvolume−6.3% | None recorded |
| 3 | Jito | Liquid staking | UCUpgrade controlLowSquads v3 multisig, 6 of 10 voters, time lock 0 sUDUpgrade delayHightime lock 0 sAPAdmin powersLowthe registry lists no admin accounts; the evidence is the core programs' upgrade readsCTCode transparencyMediumsource public at jito-foundation, but the deployed build is not verifiedODOracle dependencyNot applicablethe registry lists no price feeds; the evidence is the core programs' upgrade readsDPDependenciesLowall 1 callees rated Low on upgrade control | Missing for Stage 1:upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisigverified builds for all core programsStages describe who can change the protocol and how fast. They don't measure code security. | Squads 6 of 10 · no delay | $1.05B | $145.75Kfees+13.9% | None recorded |
| 4 | Binance Staked SOL | Liquid staking | UCUpgrade controlLowSquads v3 multisig, 6 of 10 voters, time lock 0 sUDUpgrade delayHightime lock 0 sAPAdmin powersLowthe registry lists no admin accounts; the evidence is the core programs' upgrade readsCTCode transparencyHighno public sourceODOracle dependencyNot applicablethe registry lists no price feeds; the evidence is the core programs' upgrade readsDPDependenciesLowall 1 callees rated Low on upgrade control | Missing for Stage 0:public source for every core programStages describe who can change the protocol and how fast. They don't measure code security. | Squads 6 of 10 · no delay | $1.04B | $152.73Kfees+15.1% | None recorded |
| 5 | Jupiter Lend | Lending | UCUpgrade controlLowjup3…ndc9: Squads v4 multisig, 4 of 6 voters, time lock 12 h; jupZ…T9Vd: Squads v4 multisig, 4 of 6 voters, time lock 12 h; jupe…3wZC: Squads v4 multisig, 4 of 6 voters, time lock 12 h; jupg…N6XS: Squads v4 multisig, 4 of 6 voters, time lock 12 h; jupr…Bdzi: Squads v4 multisig, 4 of 6 voters, time lock 12 hUDUpgrade delayHighjup3…ndc9: time lock 12 h; jupZ…T9Vd: time lock 12 h; jupe…3wZC: time lock 12 h; jupg…N6XS: time lock 12 h; jupr…Bdzi: time lock 12 hAPAdmin powersMediumauthority can change parameters, held by Squads v4 multisig, 4 of 7 voters, time lock 6 h; authority can change parameters, held by Squads v4 multisig, 4 of 7 voters, time lock 6 h; authority can change parameters, held by Squads v4 multisig, 4 of 7 voters, time lock 6 hCTCode transparencyMediumjup3…ndc9: source public at jup-ag, but the deployed build is not verified; jupZ…T9Vd: source public at jup-ag, but the deployed build is not verified; jupe…3wZC: source public at jup-ag, but the deployed build is not verified; jupg…N6XS: source public at jup-ag, but the deployed build is not verified; jupr…Bdzi: source public at jup-ag, but the deployed build is not verifiedODOracle dependencyUnknownprice feeds not yet listed in the registryDPDependenciesLowall 2 callees rated Low on upgrade control | Missing for Stage 1:upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisigverified builds for all core programsevery factor could be read (Unknown caps the Stage at 0)Stages describe who can change the protocol and how fast. They don't measure code security. | Squads 4 of 6 · 12 h delay | $1.01B | $136.08Kfees−10.9% | None recorded |
| 6 | Jupiter Perps | Perps | UCUpgrade controlMediumSquads v4 multisig, 4 of 8 voters, time lock 24 hUDUpgrade delayMediumtime lock 24 hAPAdmin powersMediumadmin can change parameters, held by Squads v3 multisig, 4 of 7 voters, time lock 0 sCTCode transparencyMediumsource public at jup-ag, but the deployed build is not verifiedODOracle dependencyMediumBTC custody: single oracle network (pyth), no fallback; ETH custody: single oracle network (pyth), no fallback; SOL custody: single oracle network (pyth), no fallback; USDC custody: single oracle network (pyth), no fallback; USDT custody: single oracle network (pyth), no fallbackDPDependenciesLowall 1 callees rated Low on upgrade control | Missing for Stage 1:upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisigverified builds for all core programsStages describe who can change the protocol and how fast. They don't measure code security. | Squads 4 of 8 · 24 h delay | $703.77M | $123.95Kfees−44.6% | None recorded |
| 7 | Jupiter Staked SOL | Liquid staking | UCUpgrade controlMediumSquads v3 multisig, 6 of 11 voters, time lock 0 sUDUpgrade delayHightime lock 0 sAPAdmin powersLowthe registry lists no admin accounts; the evidence is the core programs' upgrade readsCTCode transparencyMediumsource public at jup-ag, but the deployed build is not verifiedODOracle dependencyNot applicablethe registry lists no price feeds; the evidence is the core programs' upgrade readsDPDependenciesLowall 1 callees rated Low on upgrade control | Missing for Stage 1:upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisigverified builds for all core programsStages describe who can change the protocol and how fast. They don't measure code security. | Squads 6 of 11 · no delay | $521.37M | $74.41Kfees+15.0% | None recorded |
| 8 | PumpSwap | Spot DEX | UCUpgrade controlMediumSquads v4 multisig, 3 of 4 voters, time lock 0 sUDUpgrade delayHightime lock 0 sAPAdmin powersMediumadmin can pause, held by Squads v4 multisig, 3 of 4 voters, time lock 0 sCTCode transparencyMediumsource public at pump-fun, but the deployed build is not verifiedODOracle dependencyNot applicablethe registry lists no price feeds; the evidence is the core programs' upgrade readsDPDependenciesMediumcallee 6EF8…wF6P is Squads v4 multisig, 3 of 4 voters, time lock 0 s; callee pfee…ojVZ is Squads v4 multisig, 3 of 4 voters, time lock 0 s | Missing for Stage 1:upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisigverified builds for all core programsStages describe who can change the protocol and how fast. They don't measure code security. | Squads 3 of 4 · no delay | $335.9M | $266.43Mvolume−20.6% | None recorded |
| 9 | Orca | Spot DEX | UCUpgrade controlMediumSquads v4 multisig, 5 of 9 voters, time lock 24 hUDUpgrade delayMediumtime lock 24 hAPAdmin powersLowfee_authority can change parameters behind a 24 h time lockCTCode transparencyMediumsource public at orca-so/whirlpools, but the deployed build is not verifiedODOracle dependencyNot applicablethe registry lists no price feeds; the evidence is the core programs' upgrade readsDPDependenciesLowcalls no other programs with user funds | Missing for Stage 1:upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisigverified builds for all core programsStages describe who can change the protocol and how fast. They don't measure code security. | Squads 5 of 9 · 24 h delay | $300.11M | $183.81Mvolume−11.7% | None recorded |
| 10 | Forward Industries SOL | Liquid staking | UCUpgrade controlMediumSquads v3 multisig, 6 of 11 voters, time lock 0 sUDUpgrade delayHightime lock 0 sAPAdmin powersLowthe registry lists no admin accounts; the evidence is the core programs' upgrade readsCTCode transparencyHighno public sourceODOracle dependencyNot applicablethe registry lists no price feeds; the evidence is the core programs' upgrade readsDPDependenciesLowall 1 callees rated Low on upgrade control | Missing for Stage 0:public source for every core programStages describe who can change the protocol and how fast. They don't measure code security. | Squads 6 of 11 · no delay | $281.03M | $40.43Kfees+35.7% | None recorded |
| 11 | Drift Staked SOL | Liquid staking | UCUpgrade controlMediumSquads v3 multisig, 6 of 11 voters, time lock 0 sUDUpgrade delayHightime lock 0 sAPAdmin powersLowthe registry lists no admin accounts; the evidence is the core programs' upgrade readsCTCode transparencyMediumsource public at drift-labs, but the deployed build is not verifiedODOracle dependencyNot applicablethe registry lists no price feeds; the evidence is the core programs' upgrade readsDPDependenciesLowall 1 callees rated Low on upgrade control | Missing for Stage 1:upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisigverified builds for all core programsStages describe who can change the protocol and how fast. They don't measure code security. | Squads 6 of 11 · no delay | $279.7M | $41.86Kfees+14.1% | None recorded |
| 12 | GMX Solana | Perps | UCUpgrade controlMediumSquads v4 multisig, 4 of 7 voters, time lock 600 sUDUpgrade delayHightime lock 600 sAPAdmin powersMediumauthority can change parameters, held by Squads v4 multisig, 4 of 7 voters, time lock 600 sCTCode transparencyLowverified build of gmsol-labs/gmx-solana@8af1e70 at 8af1e70c0c0b6ff9d6b41ba4997910588fbcec28ODOracle dependencyUnknownprice feeds not yet listed in the registryDPDependenciesHighcallee Gt9S…ZA3c is unrecognized controller AAL4…edAD | Missing for Stage 1:upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisigevery factor could be read (Unknown caps the Stage at 0)Stages describe who can change the protocol and how fast. They don't measure code security. | Squads 4 of 7 · 600 s delay | $26.49M | $82.36Kfees−24.2% | None recorded |
| 13 | Hyperbeat LST | Liquid staking | Unassessed · native evidence | Unassessed | Unreadable | Unavailable | Unavailable | None recorded |
| 14 | Kinetiq kHYPE | Liquid staking | Unassessed · native evidence | Unassessed | Safe 4 of 8 · no delay | Unavailable | Unavailable | None recorded |
| 15 | Morpho Blue | Lending | Unassessed · native evidence | Unassessed | Immutable | Unavailable | Unavailable | None recorded |
| 16 | stHYPE | Liquid staking | Unassessed · native evidence | Unassessed | Unrecognized | Unavailable | Unavailable | None recorded |
Ratings:LowMediumHighUnknownNot applicableFactors: UC upgrade control · UD upgrade delay · AP admin powers · CT code transparency · OD oracle dependency · DP dependencies
Rules over the published ratings and events, not editorial judgement. Each rule is stated; follow an item to its evidence.
No on-chain change records available for the 30-day window ending 2026-10-24. Observation history
Upgrade delay rated High: under the methodology's Medium minimum, or none.
Core programs upgradeable by a single key or by a controller Celebtir cannot identify.
A called program rated High on upgrade control, or a dependency that could not be read.