00

← Control map

Orca Whirlpools

Who can change Orca Whirlpools, read straight from the chain. TVL $298.3M (DefiLlama, display only)

A85 · Strong
verified onchain

Who can move your money

click a node · pinch or use controls to zoom
  • Whirlpools program → Squads 5-of-13 (upgrade via vault #0)
  • Squads 5-of-13 → Signer
  • Squads 5-of-13 → Signer
  • Squads 5-of-13 → Signer
  • Squads 5-of-13 → Signer
  • Squads 5-of-13 → Signer
  • Squads 5-of-13 → Signer
  • Squads 5-of-13 → Signer
  • Squads 5-of-13 → Signer
  • Squads 5-of-13 → Signer
  • Squads 5-of-13 → Signer
  • Squads 5-of-13 → Signer
  • Squads 5-of-13 → Signer
  • Squads 5-of-13 → Signer

Facts

Whirlpools program
ProgramwhirLbMiicVdio4qvUfM5KAg6Ct8VwpYzGff3uctyCcProgramDataCtXfPzz36dH5Ws4UYKZvrQ1Xqzn42ecDW6y8NKuiN8nDLast deploy slot457152296Upgrade authorityWhat does this mean?The key that can replace a program's code. Whoever holds it can change the rules, including how your deposit can be withdrawn.GwH3Hiv5mACLX3ufTw1pFsrhSPon5tdw252DBs4Rx4PVAuthority typeSquads v4 multisig
Squads v4 multisigWhat does this mean?A wallet that needs several people to approve a transaction, for example 3 of 5. Safer than one key, if enough different people must sign. · upgrade authority
AddressBQsDWkL417U4tVE2sDnPks469pKdm6YzFgKH77doiEjFThresholdWhat does this mean?How many signers of a multisig must approve a change.5 of 13TimelockWhat does this mean?A mandatory waiting period between approving a change and it taking effect. It gives depositors time to withdraw if something bad is approved.1 day (86400s)Config authorityWhat does this mean?A Squads setting that lets one key change the multisig's signers, threshold and timelock instantly, without a vote.none, so changes need a votePending config#99: RemoveMember, RemoveMember, AddMember, AddMember
SignerPermissionsNonce accountsWhat does this mean?A Solana feature that lets a transaction be signed now and submitted any time later. Normal transactions expire in about a minute. The Drift attacker collected pre-signed durable-nonce transactions from signers days in advance.
2NfC…7gXbvotenone
2Usx…PShGvotenone
4ZnV…KGqginitiate · executenone
62E2…K8mnvotenone
6DWf…kddBvotenone
6JZg…ou1Xinitiate · executenone
6Li1…ueL9initiatenone
744y…9Npkvotenone
8xqd…EVvtvotenone
9FtD…ZMn4initiate · executenone
BgV5…Ajypvotenone
F1FS…gDN9votenone
HNeM…gumkvotenone
Admin config
Account2Lec…P2NQ orca:WhirlpoolsConfigAdminGwH3…x4PV same Squads vault as upgradesGuardianDXnB…PmZwdefaultProtocolFeeRate1300collectProtocolFeesAuthorityCRQd5wvbf6FKVmjHC7on8w4pzFPzudij2BKXRcMCu7aK

Score breakdown

Start100
Timelock is shorter than 48 hours.−5
A pending proposal would weaken controls.−10
Score85 · A

Flags: PENDING_WEAKENING. How grades work →

Onchain registry

RiskRecord PDAE67V…fF2qScore / grade85 / AFlags32 Version4 (slot 509975268)Publisher6x7M…PR73

Any Solana program can read this account (owner and PDAWhat does this mean?Program Derived Address: an address controlled by a program rather than a private key. check) and act on it. How programs use it →

Get alerts

Telegram: watch Orca WhirlpoolsWebhook or email

Governance timeline

  1. MEDIUMhistory
    Orca Whirlpools deployed new program code

    The upgrade authority replaced the program's code (program data CtXf…N8nD). A routine release looks exactly like this, and so would a malicious one, so check that the team announced it.

    PROGRAM_UPGRADED · slot 457152296 · tx 2Z15…wzGT

  2. MEDIUMhistory
    Orca Whirlpools deployed new program code

    The upgrade authority replaced the program's code (program data CtXf…N8nD). A routine release looks exactly like this, and so would a malicious one, so check that the team announced it.

    PROGRAM_UPGRADED · slot 440170207 · tx 2sN9…UdWK

  3. MEDIUMhistory
    Orca Whirlpools removed a signer, ran "AddSpendingLimit" and ran "RemoveSpendingLimit"

    FbLX…rDtY can no longer approve changes.

    MULTISIG_CONFIG_EXECUTED · slot 434931436 · tx Qjy8…tf2h

  4. MEDIUMhistory
    Orca Whirlpools changed its multisig settings

    Squads has since deleted the record of this change (DQBZ…F6t5), so we can't tell what moved. Its current settings are on the protocol page.

    MULTISIG_CONFIG_EXECUTED · slot 428077001 · tx 4tNz…Ac79

  5. MEDIUMhistory
    Orca Whirlpools changed its multisig settings

    Squads has since deleted the record of this change (3Mgn…DnGF), so we can't tell what moved. Its current settings are on the protocol page.

    MULTISIG_CONFIG_EXECUTED · slot 425170488 · tx 4PHa…rZJP

  6. MEDIUMhistory
    Orca Whirlpools changed its multisig settings

    Squads has since deleted the record of this change (6Mv8…Ysg1), so we can't tell what moved. Its current settings are on the protocol page.

    MULTISIG_CONFIG_EXECUTED · slot 424050318 · tx 5bRK…d3jW

  7. MEDIUMhistory
    Orca Whirlpools changed its multisig settings

    Squads has since deleted the record of this change (AeeV…Tjot), so we can't tell what moved. Its current settings are on the protocol page.

    MULTISIG_CONFIG_EXECUTED · slot 422953616 · tx 45YX…cYLD

  8. MEDIUMhistory
    Orca Whirlpools changed its multisig settings

    Squads has since deleted the record of this change (ADYY…ZTvd), so we can't tell what moved. Its current settings are on the protocol page.

    MULTISIG_CONFIG_EXECUTED · slot 422096838 · tx 2m6n…QA1n