Syrup USDC

Share in a Maple USDC lending pool (ERC-4626). Its value grows with interest from overcollateralized loans to crypto institutions and from Aave and Sky strategies. It is not a stablecoin.

Private creditNon-US persons onlyOnchain dataIssued by Maple Finance · Platform Maple Finance

JSON

Value

$937.1M

Stage

None

Below Stage 0: key facts not disclosed

Single-key powers

Single key holds critical power

Oracle age

Live

NAV computed onchain every block

Used as DeFi collateral

$63.2M· 11 markets

Control

Who can freeze, mint, pause or upgrade, and what stops them?

Red

A single key can change the onchain price.

A single key can change the onchain price.
A single key can move the assets backing the token.
Multisig signers aren't named, so their independence can't be checked.
A 3-of-6 multisig can replace the contract code with no timelock.
A 3-of-5 multisig can change the onchain price with no timelock.
A 3-of-5 multisig can move the assets backing the token with no timelock.
A 3-of-5 multisig can grant or revoke every other role with no timelock.
A single key can change who may hold the token.
On arbitrum, base, ink, monad, tempo, robinhood chain, arc, solana, the token depends on a bridge (Chainlink CCIP).
The issuer documents its admin powers.
Audited by Sigma Prime (2026-01).

Bug bounty on Immunefi, up to $500,000.

Audits and bug bounty

Sigma Prime · CCIP Receiver1 Jan 2026

Bug bounty on Immunefi, up to $500,000.

Chains and bridges

Holders on a bridged chain also depend on the bridge.

ethereumIssued natively · Maple
arbitrum, base, ink, monad, tempo, robinhood chain, arc, solanaBridged copy · Chainlink CCIP

Who controls syrupUSDC on Ethereum

Token and service contracts on the left, the accounts holding their powers on the right. Edge color is the risk status of that power.

MapleWithdrawalManager

Service · verified

0x1bc4…cfE3

LoanManager

Service · verified

0x4A1c…371b

MapleAaveStrategy

Service · verified

0x560B…91d4

LoanManager

Service · verified

0x6ACE…0fAc

MaplePoolManager

Service · verified

0x7aD5…158F

MapleGlobals

Service · verified

0x804a…390C

syrupUSDC token

MaplePool · Not a proxy

0x80ac…Cc0b

MapleSkyStrategy

Service · verified

0x859C…038C

MaplePoolPermissionManager

Service · verified

0xBe10…D8b3

PoolManagerFactory

Service · verified

0xE463…8339

Maple SecurityAdmin Safe

Safe 3/6

0x6b1A…0818

├ 0x4E10…4E4b
├ 0x8Ce4…8624
├ 0x4109…1ED1
└ +3 more signers

Maple GovernorTimelock

Timelock · 3d delay

0x2eFF…426b

Maple governance proposer Safe

Safe 4/7

0xd6d4…a196

├ 0xa16A…E72C
├ 0x0f44…BD40
├ 0xF4b3…4B7F
└ +4 more signers

Pool delegate (single wallet)

EOA

0xC1e1…B49f

Maple OperationalAdmin Safe

Safe 3/5

0xCe1c…34E8

├ 0x57d1…cc7c
├ 0x8be3…9736
├ 0x4024…307b
└ +2 more signers

STRATEGY_MANAGER bot (single wallet)

EOA

0xfB2C…2b62

SyrupRouter (syrupUSDC; grants deposit permission on Maple-signed authorizations)

Unknown contract

0x134c…df76

SyrupRouter (other Maple pool)

Unknown contract

0x191a…3849

Permission admin (single wallet)

EOA

0x252e…B5d5

Permission admin (single wallet)

EOA

0x4575…8655

Permission admin (single wallet)

EOA

0x4f6F…aA1B

Permission admin (single wallet)

EOA

0x54b1…9Dca

SyrupRouter (other Maple pool)

Unknown contract

0xF007…5Ee2

Powers

Every privileged power we found, normalized to canonical power types.

UpgradeCriticalYellow
Maple SecurityAdmin SafeSafe 3/60x6b1A…0818
No delay · via MapleWithdrawalManager.upgrade · securityAdmin, no delay, to any version the governor registered on the WithdrawalManager factory (the pool delegate can also upgrade after a 7-day scheduled call)
UpgradeCriticalYellow
Maple SecurityAdmin SafeSafe 3/60x6b1A…0818
No delay · via LoanManager.upgrade · securityAdmin, no delay, to any version the governor registered on the LoanManager factory (the pool delegate can also upgrade after a 7-day scheduled call)
UpgradeCriticalYellow
Maple SecurityAdmin SafeSafe 3/60x6b1A…0818
No delay · via MapleAaveStrategy.upgrade · securityAdmin, no delay, to any version the governor registered on the strategy factory (the pool delegate can also upgrade after a 7-day scheduled call)
UpgradeCriticalYellow
Maple SecurityAdmin SafeSafe 3/60x6b1A…0818
No delay · via LoanManager.upgrade · securityAdmin, no delay, to any version the governor registered on the LoanManager factory (the pool delegate can also upgrade after a 7-day scheduled call)
UpgradeCriticalYellow
Maple SecurityAdmin SafeSafe 3/60x6b1A…0818
No delay · via MaplePoolManager.upgrade · securityAdmin, no delay, to any version the governor registered on the PoolManager factory (the pool delegate can also upgrade after a 7-day scheduled call)
UpgradeCriticalYellow
Maple SecurityAdmin SafeSafe 3/60x6b1A…0818
No delay · via MapleSkyStrategy.upgrade · securityAdmin, no delay, to any version the governor registered on the strategy factory (the pool delegate can also upgrade after a 7-day scheduled call)
UpgradeCriticalGreen
Maple GovernorTimelockTimelock 3d0x2eFF…426b
→ Safe 4/7
3-day delay · via MapleProxyFactory.registerImplementation, setDefaultVersion, enableUpgradePath · governor (decides which code MaplePoolManager can be upgraded to)
Set priceCriticalRed
Pool delegate (single wallet)EOA0xC1e1…B49f
None · via LoanManager.impairLoan, removeLoanImpairment · pool delegate or governor (marks a loan's value down or back up in the NAV)
Set priceCriticalRed
Pool delegate (single wallet)EOA0xC1e1…B49f
None · via MapleAaveStrategy.impairStrategy, deactivateStrategy, reactivateStrategy · pool delegate, governor or operationalAdmin (changes how the strategy's assets count in the NAV)
Set priceCriticalRed
Pool delegate (single wallet)EOA0xC1e1…B49f
None · via LoanManager.impairLoan, removeLoanImpairment · pool delegate or governor (marks a loan's value down or back up in the NAV)
Set priceCriticalRed
Pool delegate (single wallet)EOA0xC1e1…B49f
None · via MaplePoolManager.triggerDefault, finishCollateralLiquidation · pool delegate, governor or operationalAdmin (realizes loan losses into the NAV)
Set priceCriticalRed
Pool delegate (single wallet)EOA0xC1e1…B49f
None · via MapleSkyStrategy.impairStrategy, deactivateStrategy, reactivateStrategy · pool delegate, governor or operationalAdmin (changes how the strategy's assets count in the NAV)
Set priceCriticalYellow
Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8
No delay · via MapleAaveStrategy.impairStrategy, deactivateStrategy, reactivateStrategy · pool delegate, governor or operationalAdmin (changes how the strategy's assets count in the NAV)
Set priceCriticalYellow
Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8
No delay · via MaplePoolManager.triggerDefault, finishCollateralLiquidation · pool delegate, governor or operationalAdmin (realizes loan losses into the NAV)
Set priceCriticalYellow
Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8
No delay · via MapleSkyStrategy.impairStrategy, deactivateStrategy, reactivateStrategy · pool delegate, governor or operationalAdmin (changes how the strategy's assets count in the NAV)
Set priceCriticalGreen
Maple GovernorTimelockTimelock 3d0x2eFF…426b
→ Safe 4/7
3-day delay · via LoanManager.impairLoan, removeLoanImpairment · pool delegate or governor (marks a loan's value down or back up in the NAV)
Set priceCriticalGreen
Maple GovernorTimelockTimelock 3d0x2eFF…426b
→ Safe 4/7
3-day delay · via MapleAaveStrategy.impairStrategy, deactivateStrategy, reactivateStrategy · pool delegate, governor or operationalAdmin (changes how the strategy's assets count in the NAV)
Set priceCriticalGreen
Maple GovernorTimelockTimelock 3d0x2eFF…426b
→ Safe 4/7
3-day delay · via LoanManager.impairLoan, removeLoanImpairment · pool delegate or governor (marks a loan's value down or back up in the NAV)
Set priceCriticalGreen
Maple GovernorTimelockTimelock 3d0x2eFF…426b
→ Safe 4/7
3-day delay · via MaplePoolManager.triggerDefault, finishCollateralLiquidation · pool delegate, governor or operationalAdmin (realizes loan losses into the NAV)
Set priceCriticalGreen
Maple GovernorTimelockTimelock 3d0x2eFF…426b
→ Safe 4/7
3-day delay · via MapleGlobals.setManualOverridePrice, setPriceOracle · governor (collateral price oracles used for liquidations)
Set priceCriticalGreen
Maple GovernorTimelockTimelock 3d0x2eFF…426b
→ Safe 4/7
3-day delay · via MapleSkyStrategy.impairStrategy, deactivateStrategy, reactivateStrategy · pool delegate, governor or operationalAdmin (changes how the strategy's assets count in the NAV)
Allocate fundsCriticalRed
Pool delegate (single wallet)EOA0xC1e1…B49f
None · via LoanManager.fund, rejectNewTerms, acceptNewTerms · pool delegate (only to loans whose borrower the governor or operationalAdmin approved)
Allocate fundsCriticalRed
Pool delegate (single wallet)EOA0xC1e1…B49f
None · via MapleAaveStrategy.fundStrategy, withdrawFromStrategy · pool delegate or a STRATEGY_MANAGER instance registered in Globals
Allocate fundsCriticalRed
STRATEGY_MANAGER bot (single wallet)EOA0xfB2C…2b62
None · via MapleAaveStrategy.fundStrategy, withdrawFromStrategy · pool delegate or a STRATEGY_MANAGER instance registered in Globals
Allocate fundsCriticalRed
Pool delegate (single wallet)EOA0xC1e1…B49f
None · via LoanManager.fund, callPrincipal, removeCall +2 more · pool delegate (only to loans whose borrower the governor or operationalAdmin approved)
Allocate fundsCriticalRed
Pool delegate (single wallet)EOA0xC1e1…B49f
None · via MaplePoolManager.setIsStrategy · pool delegate, governor or operationalAdmin (turns a strategy that can pull pool funds on or off)
Allocate fundsCriticalRed
Pool delegate (single wallet)EOA0xC1e1…B49f
None · via MapleSkyStrategy.fundStrategy, withdrawFromStrategy · pool delegate or a STRATEGY_MANAGER instance registered in Globals
Allocate fundsCriticalRed
Pool delegate (single wallet)EOA0xC1e1…B49f
None · via MapleSkyStrategy.setPsm · pool delegate, governor or operationalAdmin
Allocate fundsCriticalRed
STRATEGY_MANAGER bot (single wallet)EOA0xfB2C…2b62
None · via MapleSkyStrategy.fundStrategy, withdrawFromStrategy · pool delegate or a STRATEGY_MANAGER instance registered in Globals
Allocate fundsCriticalYellow
Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8
No delay · via MaplePoolManager.addStrategy · governor or operationalAdmin
Allocate fundsCriticalYellow
Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8
No delay · via MaplePoolManager.setIsStrategy · pool delegate, governor or operationalAdmin (turns a strategy that can pull pool funds on or off)
Allocate fundsCriticalYellow
Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8
No delay · via MapleSkyStrategy.setPsm · pool delegate, governor or operationalAdmin
Allocate fundsCriticalGreen
Maple GovernorTimelockTimelock 3d0x2eFF…426b
→ Safe 4/7
3-day delay · via MaplePoolManager.addStrategy · governor or operationalAdmin
Allocate fundsCriticalGreen
Maple GovernorTimelockTimelock 3d0x2eFF…426b
→ Safe 4/7
3-day delay · via MaplePoolManager.setIsStrategy · pool delegate, governor or operationalAdmin (turns a strategy that can pull pool funds on or off)
Allocate fundsCriticalGreen
Maple GovernorTimelockTimelock 3d0x2eFF…426b
→ Safe 4/7
3-day delay · via MapleSkyStrategy.setPsm · pool delegate, governor or operationalAdmin
Grant rolesCriticalYellow
Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8
No delay · via MapleGlobals.setValidBorrower, setValidPoolDelegate, setValidInstanceOf +2 more · governor or operationalAdmin (approves borrowers, pool delegates and bots)
Grant rolesCriticalYellow
Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8
No delay · via MaplePoolPermissionManager.setPermissionAdmin · admin or operationalAdmin
Grant rolesCriticalYellow
Maple governance proposer SafeSafe 4/70xd6d4…a196
No delay · via MaplePoolPermissionManager.setPermissionAdmin · admin or operationalAdmin
Grant rolesCriticalGreen
Maple GovernorTimelockTimelock 3d0x2eFF…426b
→ Safe 4/7
3-day delay · via MapleGlobals.setSecurityAdmin, setOperationalAdmin, setPendingGovernor +6 more · governor
Grant rolesCriticalGreen
Maple GovernorTimelockTimelock 3d0x2eFF…426b
→ Safe 4/7
3-day delay · via MapleGlobals.setValidBorrower, setValidPoolDelegate, setValidInstanceOf +2 more · governor or operationalAdmin (approves borrowers, pool delegates and bots)
PauseHighGreen
Maple GovernorTimelockTimelock 3d0x2eFF…426b
→ Safe 4/7
3-day delay · via MapleGlobals.setProtocolPause, setContractPause, setFunctionUnpause · governor or securityAdmin
PauseHighGreen
Maple SecurityAdmin SafeSafe 3/60x6b1A…0818
No delay · via MapleGlobals.setProtocolPause, setContractPause, setFunctionUnpause · governor or securityAdmin
Set complianceHighYellow
SyrupRouter (syrupUSDC; grants deposit permission on Maple-signed authorizations)Unknown contract0x134c…df76
None · via MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin
Set complianceHighYellow
SyrupRouter (other Maple pool)Unknown contract0x191a…3849
None · via MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin
Set complianceHighYellow
Permission admin (single wallet)EOA0x252e…B5d5
None · via MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin
Set complianceHighYellow
Permission admin (single wallet)EOA0x4575…8655
None · via MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin
Set complianceHighYellow
Permission admin (single wallet)EOA0x4f6F…aA1B
None · via MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin
Set complianceHighYellow
Permission admin (single wallet)EOA0x54b1…9Dca
None · via MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin
Set complianceHighYellow
Pool delegate (single wallet)EOA0xC1e1…B49f
None · via MaplePoolPermissionManager.setPoolPermissionLevel, setPoolBitmaps, setLenderAllowlist +1 more · pool delegate, admin or operationalAdmin (decides who can deposit, redeem and transfer syrupUSDC)
Set complianceHighYellow
SyrupRouter (other Maple pool)Unknown contract0xF007…5Ee2
None · via MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin
Set complianceHighGreen
Maple GovernorTimelockTimelock 3d0x2eFF…426b
→ Safe 4/7
3-day delay · via MaplePoolManager.setLiquidityCap, setPoolPermissionManager · governor or operationalAdmin
Set complianceHighGreen
Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8
No delay · via MaplePoolManager.setLiquidityCap, setPoolPermissionManager · governor or operationalAdmin
Set complianceHighGreen
Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8
No delay · via MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin
Set complianceHighGreen
Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8
No delay · via MaplePoolPermissionManager.setPoolPermissionLevel, setPoolBitmaps, setLenderAllowlist +1 more · pool delegate, admin or operationalAdmin (decides who can deposit, redeem and transfer syrupUSDC)
Set complianceHighGreen
Maple governance proposer SafeSafe 4/70xd6d4…a196
No delay · via MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin
Set complianceHighGreen
Maple governance proposer SafeSafe 4/70xd6d4…a196
No delay · via MaplePoolPermissionManager.setPoolPermissionLevel, setPoolBitmaps, setLenderAllowlist +1 more · pool delegate, admin or operationalAdmin (decides who can deposit, redeem and transfer syrupUSDC)

Power	Criticality	Held by	Checks	Status	Found via
Upgrade	Critical	Maple SecurityAdmin SafeSafe 3/60x6b1A…0818	No delay	Yellow	`MapleWithdrawalManager.upgrade · securityAdmin, no delay, to any version the governor registered on the WithdrawalManager factory (the pool delegate can also upgrade after a 7-day scheduled call)`
Upgrade	Critical	Maple SecurityAdmin SafeSafe 3/60x6b1A…0818	No delay	Yellow	`LoanManager.upgrade · securityAdmin, no delay, to any version the governor registered on the LoanManager factory (the pool delegate can also upgrade after a 7-day scheduled call)`
Upgrade	Critical	Maple SecurityAdmin SafeSafe 3/60x6b1A…0818	No delay	Yellow	`MapleAaveStrategy.upgrade · securityAdmin, no delay, to any version the governor registered on the strategy factory (the pool delegate can also upgrade after a 7-day scheduled call)`
Upgrade	Critical	Maple SecurityAdmin SafeSafe 3/60x6b1A…0818	No delay	Yellow	`LoanManager.upgrade · securityAdmin, no delay, to any version the governor registered on the LoanManager factory (the pool delegate can also upgrade after a 7-day scheduled call)`
Upgrade	Critical	Maple SecurityAdmin SafeSafe 3/60x6b1A…0818	No delay	Yellow	`MaplePoolManager.upgrade · securityAdmin, no delay, to any version the governor registered on the PoolManager factory (the pool delegate can also upgrade after a 7-day scheduled call)`
Upgrade	Critical	Maple SecurityAdmin SafeSafe 3/60x6b1A…0818	No delay	Yellow	`MapleSkyStrategy.upgrade · securityAdmin, no delay, to any version the governor registered on the strategy factory (the pool delegate can also upgrade after a 7-day scheduled call)`
Upgrade	Critical	Maple GovernorTimelockTimelock 3d0x2eFF…426b→ Safe 4/7	3-day delay	Green	`MapleProxyFactory.registerImplementation, setDefaultVersion, enableUpgradePath · governor (decides which code MaplePoolManager can be upgraded to)`
Set price	Critical	Pool delegate (single wallet)EOA0xC1e1…B49f	None	Red	`LoanManager.impairLoan, removeLoanImpairment · pool delegate or governor (marks a loan's value down or back up in the NAV)`
Set price	Critical	Pool delegate (single wallet)EOA0xC1e1…B49f	None	Red	`MapleAaveStrategy.impairStrategy, deactivateStrategy, reactivateStrategy · pool delegate, governor or operationalAdmin (changes how the strategy's assets count in the NAV)`
Set price	Critical	Pool delegate (single wallet)EOA0xC1e1…B49f	None	Red	`LoanManager.impairLoan, removeLoanImpairment · pool delegate or governor (marks a loan's value down or back up in the NAV)`
Set price	Critical	Pool delegate (single wallet)EOA0xC1e1…B49f	None	Red	`MaplePoolManager.triggerDefault, finishCollateralLiquidation · pool delegate, governor or operationalAdmin (realizes loan losses into the NAV)`
Set price	Critical	Pool delegate (single wallet)EOA0xC1e1…B49f	None	Red	`MapleSkyStrategy.impairStrategy, deactivateStrategy, reactivateStrategy · pool delegate, governor or operationalAdmin (changes how the strategy's assets count in the NAV)`
Set price	Critical	Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8	No delay	Yellow	`MapleAaveStrategy.impairStrategy, deactivateStrategy, reactivateStrategy · pool delegate, governor or operationalAdmin (changes how the strategy's assets count in the NAV)`
Set price	Critical	Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8	No delay	Yellow	`MaplePoolManager.triggerDefault, finishCollateralLiquidation · pool delegate, governor or operationalAdmin (realizes loan losses into the NAV)`
Set price	Critical	Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8	No delay	Yellow	`MapleSkyStrategy.impairStrategy, deactivateStrategy, reactivateStrategy · pool delegate, governor or operationalAdmin (changes how the strategy's assets count in the NAV)`
Set price	Critical	Maple GovernorTimelockTimelock 3d0x2eFF…426b→ Safe 4/7	3-day delay	Green	`LoanManager.impairLoan, removeLoanImpairment · pool delegate or governor (marks a loan's value down or back up in the NAV)`
Set price	Critical	Maple GovernorTimelockTimelock 3d0x2eFF…426b→ Safe 4/7	3-day delay	Green	`MapleAaveStrategy.impairStrategy, deactivateStrategy, reactivateStrategy · pool delegate, governor or operationalAdmin (changes how the strategy's assets count in the NAV)`
Set price	Critical	Maple GovernorTimelockTimelock 3d0x2eFF…426b→ Safe 4/7	3-day delay	Green	`LoanManager.impairLoan, removeLoanImpairment · pool delegate or governor (marks a loan's value down or back up in the NAV)`
Set price	Critical	Maple GovernorTimelockTimelock 3d0x2eFF…426b→ Safe 4/7	3-day delay	Green	`MaplePoolManager.triggerDefault, finishCollateralLiquidation · pool delegate, governor or operationalAdmin (realizes loan losses into the NAV)`
Set price	Critical	Maple GovernorTimelockTimelock 3d0x2eFF…426b→ Safe 4/7	3-day delay	Green	`MapleGlobals.setManualOverridePrice, setPriceOracle · governor (collateral price oracles used for liquidations)`
Set price	Critical	Maple GovernorTimelockTimelock 3d0x2eFF…426b→ Safe 4/7	3-day delay	Green	`MapleSkyStrategy.impairStrategy, deactivateStrategy, reactivateStrategy · pool delegate, governor or operationalAdmin (changes how the strategy's assets count in the NAV)`
Allocate funds	Critical	Pool delegate (single wallet)EOA0xC1e1…B49f	None	Red	`LoanManager.fund, rejectNewTerms, acceptNewTerms · pool delegate (only to loans whose borrower the governor or operationalAdmin approved)`
Allocate funds	Critical	Pool delegate (single wallet)EOA0xC1e1…B49f	None	Red	`MapleAaveStrategy.fundStrategy, withdrawFromStrategy · pool delegate or a STRATEGY_MANAGER instance registered in Globals`
Allocate funds	Critical	STRATEGY_MANAGER bot (single wallet)EOA0xfB2C…2b62	None	Red	`MapleAaveStrategy.fundStrategy, withdrawFromStrategy · pool delegate or a STRATEGY_MANAGER instance registered in Globals`
Allocate funds	Critical	Pool delegate (single wallet)EOA0xC1e1…B49f	None	Red	`LoanManager.fund, callPrincipal, removeCall +2 more · pool delegate (only to loans whose borrower the governor or operationalAdmin approved)`
Allocate funds	Critical	Pool delegate (single wallet)EOA0xC1e1…B49f	None	Red	`MaplePoolManager.setIsStrategy · pool delegate, governor or operationalAdmin (turns a strategy that can pull pool funds on or off)`
Allocate funds	Critical	Pool delegate (single wallet)EOA0xC1e1…B49f	None	Red	`MapleSkyStrategy.fundStrategy, withdrawFromStrategy · pool delegate or a STRATEGY_MANAGER instance registered in Globals`
Allocate funds	Critical	Pool delegate (single wallet)EOA0xC1e1…B49f	None	Red	`MapleSkyStrategy.setPsm · pool delegate, governor or operationalAdmin`
Allocate funds	Critical	STRATEGY_MANAGER bot (single wallet)EOA0xfB2C…2b62	None	Red	`MapleSkyStrategy.fundStrategy, withdrawFromStrategy · pool delegate or a STRATEGY_MANAGER instance registered in Globals`
Allocate funds	Critical	Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8	No delay	Yellow	`MaplePoolManager.addStrategy · governor or operationalAdmin`
Allocate funds	Critical	Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8	No delay	Yellow	`MaplePoolManager.setIsStrategy · pool delegate, governor or operationalAdmin (turns a strategy that can pull pool funds on or off)`
Allocate funds	Critical	Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8	No delay	Yellow	`MapleSkyStrategy.setPsm · pool delegate, governor or operationalAdmin`
Allocate funds	Critical	Maple GovernorTimelockTimelock 3d0x2eFF…426b→ Safe 4/7	3-day delay	Green	`MaplePoolManager.addStrategy · governor or operationalAdmin`
Allocate funds	Critical	Maple GovernorTimelockTimelock 3d0x2eFF…426b→ Safe 4/7	3-day delay	Green	`MaplePoolManager.setIsStrategy · pool delegate, governor or operationalAdmin (turns a strategy that can pull pool funds on or off)`
Allocate funds	Critical	Maple GovernorTimelockTimelock 3d0x2eFF…426b→ Safe 4/7	3-day delay	Green	`MapleSkyStrategy.setPsm · pool delegate, governor or operationalAdmin`
Grant roles	Critical	Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8	No delay	Yellow	`MapleGlobals.setValidBorrower, setValidPoolDelegate, setValidInstanceOf +2 more · governor or operationalAdmin (approves borrowers, pool delegates and bots)`
Grant roles	Critical	Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8	No delay	Yellow	`MaplePoolPermissionManager.setPermissionAdmin · admin or operationalAdmin`
Grant roles	Critical	Maple governance proposer SafeSafe 4/70xd6d4…a196	No delay	Yellow	`MaplePoolPermissionManager.setPermissionAdmin · admin or operationalAdmin`
Grant roles	Critical	Maple GovernorTimelockTimelock 3d0x2eFF…426b→ Safe 4/7	3-day delay	Green	`MapleGlobals.setSecurityAdmin, setOperationalAdmin, setPendingGovernor +6 more · governor`
Grant roles	Critical	Maple GovernorTimelockTimelock 3d0x2eFF…426b→ Safe 4/7	3-day delay	Green	`MapleGlobals.setValidBorrower, setValidPoolDelegate, setValidInstanceOf +2 more · governor or operationalAdmin (approves borrowers, pool delegates and bots)`
Pause	High	Maple GovernorTimelockTimelock 3d0x2eFF…426b→ Safe 4/7	3-day delay	Green	`MapleGlobals.setProtocolPause, setContractPause, setFunctionUnpause · governor or securityAdmin`
Pause	High	Maple SecurityAdmin SafeSafe 3/60x6b1A…0818	No delay	Green	`MapleGlobals.setProtocolPause, setContractPause, setFunctionUnpause · governor or securityAdmin`
Set compliance	High	SyrupRouter (syrupUSDC; grants deposit permission on Maple-signed authorizations)Unknown contract0x134c…df76	None	Yellow	`MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin`
Set compliance	High	SyrupRouter (other Maple pool)Unknown contract0x191a…3849	None	Yellow	`MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin`
Set compliance	High	Permission admin (single wallet)EOA0x252e…B5d5	None	Yellow	`MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin`
Set compliance	High	Permission admin (single wallet)EOA0x4575…8655	None	Yellow	`MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin`
Set compliance	High	Permission admin (single wallet)EOA0x4f6F…aA1B	None	Yellow	`MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin`
Set compliance	High	Permission admin (single wallet)EOA0x54b1…9Dca	None	Yellow	`MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin`
Set compliance	High	Pool delegate (single wallet)EOA0xC1e1…B49f	None	Yellow	`MaplePoolPermissionManager.setPoolPermissionLevel, setPoolBitmaps, setLenderAllowlist +1 more · pool delegate, admin or operationalAdmin (decides who can deposit, redeem and transfer syrupUSDC)`
Set compliance	High	SyrupRouter (other Maple pool)Unknown contract0xF007…5Ee2	None	Yellow	`MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin`
Set compliance	High	Maple GovernorTimelockTimelock 3d0x2eFF…426b→ Safe 4/7	3-day delay	Green	`MaplePoolManager.setLiquidityCap, setPoolPermissionManager · governor or operationalAdmin`
Set compliance	High	Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8	No delay	Green	`MaplePoolManager.setLiquidityCap, setPoolPermissionManager · governor or operationalAdmin`
Set compliance	High	Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8	No delay	Green	`MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin`
Set compliance	High	Maple OperationalAdmin SafeSafe 3/50xCe1c…34E8	No delay	Green	`MaplePoolPermissionManager.setPoolPermissionLevel, setPoolBitmaps, setLenderAllowlist +1 more · pool delegate, admin or operationalAdmin (decides who can deposit, redeem and transfer syrupUSDC)`
Set compliance	High	Maple governance proposer SafeSafe 4/70xd6d4…a196	No delay	Green	`MaplePoolPermissionManager.setLenderBitmaps · permission admins, admin or operationalAdmin`
Set compliance	High	Maple governance proposer SafeSafe 4/70xd6d4…a196	No delay	Green	`MaplePoolPermissionManager.setPoolPermissionLevel, setPoolBitmaps, setLenderAllowlist +1 more · pool delegate, admin or operationalAdmin (decides who can deposit, redeem and transfer syrupUSDC)`

For regulated securities, freeze and force-transfer powers are often legally required. Control rates who holds them and what checks exist, not whether they exist. A single key holding a critical power or freeze is red; a multisig with no timelock is yellow.

Discovered at block 26,176,587 · 12 Oct 2026 · tool discovery-0.1.0 · View raw JSON on GitHub ↗