Under active development. We're continuously fixing and improving the metrics and parameters, so scores and ratings may change. See changelog

RWABeat

Janus Henderson Anemoy Treasury Fund

Tokenized shares of a BVI professional fund holding 0–6 month US Treasury bills, with Janus Henderson as sub-manager. Runs on Centrifuge V3; subscriptions and redemptions are requests through ERC-7540 async vaults that the fund manager fills at NAV.

U.S. TreasuriesNon-US professional investors onlyTransfer-restrictedOnchain dataIssued by Anemoy Asset Management Limited · Platform Centrifuge
Value
$103.7M
Stage
Stage 0
Disclosed
Single-key powers
93
Single key holds critical power
Oracle age
32h
Late
Used as DeFi collateral
$157.01· 2 markets

Control

Who can freeze, mint, pause or upgrade, and what stops them?

Red

A single key can create new tokens.

  1. A single key can create new tokens.

  2. A single key can move tokens out of any wallet.

  3. A single key can destroy tokens in any wallet.

  4. A single key can change the onchain price.

  5. A single key can move the assets backing the token.

  6. A single key can grant or revoke every other role.

  7. A single key can freeze a holder's tokens.

  8. Multisig signers aren't named, so their independence can't be checked.

  9. A 2-of-6 multisig can create new tokens: few signers need to agree.

  10. A 2-of-6 multisig can move tokens out of any wallet: few signers need to agree.

  11. A 2-of-6 multisig can destroy tokens in any wallet: few signers need to agree.

  12. A 2-of-6 multisig can change the onchain price: few signers need to agree.

  13. A 2-of-6 multisig can move the assets backing the token: few signers need to agree.

  14. A 4-of-9 multisig can grant or revoke every other role: few signers need to agree.

  15. A single key can pause all transfers.

  16. A single key can change who may hold the token.

  17. On ethereum, base, arbitrum, avalanche, bsc, plume, the token depends on a bridge (Centrifuge messaging (LayerZero, Axelar, Wormhole, Chainlink adapters)).

  18. The issuer documents its admin powers.

  19. Audited by Sherlock (2026-02).

  • Bug bounty on Cantina, up to $250,000.
  • Transfers are limited to allowlisted wallets.

Audits and bug bounty

  • Sherlock · Centrifuge V3.1.0 deployment verification1 Feb 2026

Bug bounty on Cantina, up to $250,000.

Chains and bridges

Holders on a bridged chain also depend on the bridge.

  • ethereum, base, arbitrum, avalanche, bsc, plumeNative, and a bridge can mint · Centrifuge messaging (LayerZero, Axelar, Wormhole, Chainlink adapters)

Who controls JTRSY on Ethereum

Token and service contracts on the left, the accounts holding their powers on the right. Edge color is the risk status of that power.

Powers

Every privileged power we found, normalized to canonical power types.

  • MintCriticalRed
    JTRSY balance-sheet managerEOA0x95d2…37A9

    None · via BalanceSheet.issue · isManager(pool 281474976710662)

  • MintCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.issue · isManager(pool 281474976710662)

  • MintCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.issue · isManager(pool 281474976710662)

  • MintCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via Tranche.mint · auth (wards)

  • MintCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via Tranche.mint · auth (wards)

  • MintCriticalRed
    JTRSY hub manager (writes NAV; Vault Street says 3-signer MPC)EOA0x7Bf0…02eC

    None · via Hub.setRequestManager, updateVault · _isManager(pool 281474976710662), swaps the contracts that issue shares

  • MintCriticalYellow
    JTRSY balance-sheet manager SafeSafe 2/60x2B0f…7cfb

    No delay · via BalanceSheet.issue · isManager(pool 281474976710662)

  • MintCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via Tranche.mint · auth (wards)

  • Force-transferCriticalRed
    JTRSY balance-sheet managerEOA0x95d2…37A9

    None · via BalanceSheet.transferSharesFrom · isManager(pool 281474976710662)

  • Force-transferCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.transferSharesFrom · isManager(pool 281474976710662)

  • Force-transferCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.transferSharesFrom · isManager(pool 281474976710662)

  • Force-transferCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via Tranche.authTransferFrom · auth (wards)

  • Force-transferCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via Tranche.authTransferFrom · auth (wards)

  • Force-transferCriticalYellow
    JTRSY balance-sheet manager SafeSafe 2/60x2B0f…7cfb

    No delay · via BalanceSheet.transferSharesFrom · isManager(pool 281474976710662)

  • Force-transferCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via Tranche.authTransferFrom · auth (wards)

  • Burn from holderCriticalRed
    JTRSY balance-sheet managerEOA0x95d2…37A9

    None · via BalanceSheet.revoke · isManager(pool 281474976710662)

  • Burn from holderCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.revoke · isManager(pool 281474976710662)

  • Burn from holderCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.revoke · isManager(pool 281474976710662)

  • Burn from holderCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via Tranche.burn · auth (wards)

  • Burn from holderCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via Tranche.burn · auth (wards)

  • Burn from holderCriticalYellow
    JTRSY balance-sheet manager SafeSafe 2/60x2B0f…7cfb

    No delay · via BalanceSheet.revoke · isManager(pool 281474976710662)

  • Burn from holderCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via Tranche.burn · auth (wards)

  • Set priceCriticalRed
    JTRSY balance-sheet managerEOA0x95d2…37A9

    None · via BalanceSheet.overridePricePoolPerShare, overridePricePoolPerAsset · isManager(pool 281474976710662), within one transaction

  • Set priceCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.overridePricePoolPerShare, overridePricePoolPerAsset · isManager(pool 281474976710662), within one transaction

  • Set priceCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.overridePricePoolPerShare, overridePricePoolPerAsset · isManager(pool 281474976710662), within one transaction

  • Set priceCriticalRed
    JTRSY hub manager (writes NAV; Vault Street says 3-signer MPC)EOA0x7Bf0…02eC

    None · via Hub.updateSharePrice, notifySharePrice · _isManager(pool 281474976710662)

  • Set priceCriticalYellow
    JTRSY balance-sheet manager SafeSafe 2/60x2B0f…7cfb

    No delay · via BalanceSheet.overridePricePoolPerShare, overridePricePoolPerAsset · isManager(pool 281474976710662), within one transaction

  • Allocate fundsCriticalRed
    JTRSY balance-sheet managerEOA0x95d2…37A9

    None · via BalanceSheet.withdraw, deposit · isManager(pool 281474976710662), moves pool escrow assets

  • Allocate fundsCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.withdraw, deposit · isManager(pool 281474976710662), moves pool escrow assets

  • Allocate fundsCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.withdraw, deposit · isManager(pool 281474976710662), moves pool escrow assets

  • Allocate fundsCriticalRed
    JTRSY hub manager (writes NAV; Vault Street says 3-signer MPC)EOA0x7Bf0…02eC

    None · via Hub.updateContract · _isManager(pool 281474976710662), reconfigures pool contracts such as the on/offramp manager

  • Allocate fundsCriticalYellow
    JTRSY balance-sheet manager SafeSafe 2/60x2B0f…7cfb

    No delay · via BalanceSheet.withdraw, deposit · isManager(pool 281474976710662), moves pool escrow assets

  • Grant rolesCriticalRed
    MessageProcessor0x97cc…e30A

    → EOA

    None · via BalanceSheet.updateManager · auth (wards)

  • Grant rolesCriticalRed
    MessageDispatcher0xf837…0B27

    → EOA

    None · via BalanceSheet.updateManager · auth (wards)

  • Grant rolesCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via FullRestrictions.deny, rely · auth (wards)

  • Grant rolesCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via Tranche.deny, rely · auth (wards)

  • Grant rolesCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via Tranche.deny, rely · auth (wards)

  • Grant rolesCriticalRed
    JTRSY hub manager (writes NAV; Vault Street says 3-signer MPC)EOA0x7Bf0…02eC

    None · via Hub.updateHubManager, updateBalanceSheetManager · _isManager(pool 281474976710662)

  • Grant rolesCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via BalanceSheet.updateManager · auth (wards)

  • Grant rolesCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via FullRestrictions.deny, rely · auth (wards)

  • Grant rolesCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via Tranche.deny, rely · auth (wards)

  • FreezeHighRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via FullRestrictions.updateRestriction · auth (wards)

  • FreezeHighRed
    JTRSY hub manager (writes NAV; Vault Street says 3-signer MPC)EOA0x7Bf0…02eC

    None · via Hub.updateRestriction · _isManager(pool 281474976710662), sent to the hook

  • FreezeHighGreen
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via FullRestrictions.updateRestriction · auth (wards)

  • PauseHighYellow
    EOA0x0446…24Bf

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x0800…F155

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x4d47…f541

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x5e7A…3EE1

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x701D…02b9

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x9eDe…AEA9

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    Safe 1/20xb307…EB3a

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0xd551…2616

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0xE944…D28F

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighGreen
    Centrifuge ProtocolGuardian SafeSafe 4/90x9711…D225

    No delay · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • Set complianceHighYellow
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via FullRestrictions.trustedCall · auth (wards)

  • Set complianceHighYellow
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via Tranche.file · auth (wards)

  • Set complianceHighYellow
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via Tranche.file · auth (wards)

  • Set complianceHighYellow
    JTRSY hub manager (writes NAV; Vault Street says 3-signer MPC)EOA0x7Bf0…02eC

    None · via Hub.updateShareHook · _isManager(pool 281474976710662), swaps the transfer hook

  • Set complianceHighGreen
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via FullRestrictions.trustedCall · auth (wards)

  • Set complianceHighGreen
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via Tranche.file · auth (wards)

For regulated securities, freeze and force-transfer powers are often legally required. Control rates who holds them and what checks exist, not whether they exist. A single key holding a critical power or freeze is red; a multisig with no timelock is yellow.

Discovered at block 26,183,886 · 13 Oct 2026 · tool discovery-0.2.0 · View raw JSON on GitHub ↗

Who controls JTRSY on Base

Token and service contracts on the left, the accounts holding their powers on the right. Edge color is the risk status of that power.

Powers

Every privileged power we found, normalized to canonical power types.

  • MintCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.issue · isManager(pool 281474976710662)

  • MintCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.issue · isManager(pool 281474976710662)

  • MintCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via Tranche.mint · auth (wards)

  • MintCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via Tranche.mint · auth (wards)

  • MintCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via Tranche.mint · auth (wards)

  • Force-transferCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.transferSharesFrom · isManager(pool 281474976710662)

  • Force-transferCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.transferSharesFrom · isManager(pool 281474976710662)

  • Force-transferCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via Tranche.authTransferFrom · auth (wards)

  • Force-transferCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via Tranche.authTransferFrom · auth (wards)

  • Force-transferCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via Tranche.authTransferFrom · auth (wards)

  • Burn from holderCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.revoke · isManager(pool 281474976710662)

  • Burn from holderCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.revoke · isManager(pool 281474976710662)

  • Burn from holderCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via Tranche.burn · auth (wards)

  • Burn from holderCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via Tranche.burn · auth (wards)

  • Burn from holderCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via Tranche.burn · auth (wards)

  • Set priceCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.overridePricePoolPerShare, overridePricePoolPerAsset · isManager(pool 281474976710662), within one transaction

  • Set priceCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.overridePricePoolPerShare, overridePricePoolPerAsset · isManager(pool 281474976710662), within one transaction

  • Allocate fundsCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.withdraw, deposit · isManager(pool 281474976710662), moves pool escrow assets

  • Allocate fundsCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.withdraw, deposit · isManager(pool 281474976710662), moves pool escrow assets

  • Grant rolesCriticalRed
    MessageProcessor0x97cc…e30A

    → EOA

    None · via BalanceSheet.updateManager · auth (wards)

  • Grant rolesCriticalRed
    MessageDispatcher0xf837…0B27

    → EOA

    None · via BalanceSheet.updateManager · auth (wards)

  • Grant rolesCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via FullRestrictions.deny, rely · auth (wards)

  • Grant rolesCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via Tranche.deny, rely · auth (wards)

  • Grant rolesCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via Tranche.deny, rely · auth (wards)

  • Grant rolesCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via BalanceSheet.updateManager · auth (wards)

  • Grant rolesCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via FullRestrictions.deny, rely · auth (wards)

  • Grant rolesCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via Tranche.deny, rely · auth (wards)

  • FreezeHighRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via FullRestrictions.updateRestriction · auth (wards)

  • FreezeHighGreen
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via FullRestrictions.updateRestriction · auth (wards)

  • PauseHighYellow
    EOA0x0446…24Bf

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x0800…F155

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x4d47…f541

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x5e7A…3EE1

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x701D…02b9

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x9eDe…AEA9

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    Safe 1/20xb307…EB3a

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0xd551…2616

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0xE944…D28F

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighGreen
    Centrifuge ProtocolGuardian SafeSafe 4/90x9711…D225

    No delay · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • Set complianceHighYellow
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via FullRestrictions.trustedCall · auth (wards)

  • Set complianceHighYellow
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via Tranche.file · auth (wards)

  • Set complianceHighYellow
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via Tranche.file · auth (wards)

  • Set complianceHighGreen
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via FullRestrictions.trustedCall · auth (wards)

  • Set complianceHighGreen
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via Tranche.file · auth (wards)

For regulated securities, freeze and force-transfer powers are often legally required. Control rates who holds them and what checks exist, not whether they exist. A single key holding a critical power or freeze is red; a multisig with no timelock is yellow.

Discovered at block 52,554,374 · 13 Oct 2026 · tool discovery-0.2.0 · View raw JSON on GitHub ↗

Who controls JTRSY on Arbitrum

Token and service contracts on the left, the accounts holding their powers on the right. Edge color is the risk status of that power.

Powers

Every privileged power we found, normalized to canonical power types.

  • MintCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.issue · isManager(pool 281474976710662)

  • MintCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.issue · isManager(pool 281474976710662)

  • MintCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via Tranche.mint · auth (wards)

  • MintCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via Tranche.mint · auth (wards)

  • MintCriticalYellow
    JTRSY balance-sheet manager SafeSafe 2/70x2B0f…7cfb

    No delay · via BalanceSheet.issue · isManager(pool 281474976710662)

  • MintCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via Tranche.mint · auth (wards)

  • Force-transferCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.transferSharesFrom · isManager(pool 281474976710662)

  • Force-transferCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.transferSharesFrom · isManager(pool 281474976710662)

  • Force-transferCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via Tranche.authTransferFrom · auth (wards)

  • Force-transferCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via Tranche.authTransferFrom · auth (wards)

  • Force-transferCriticalYellow
    JTRSY balance-sheet manager SafeSafe 2/70x2B0f…7cfb

    No delay · via BalanceSheet.transferSharesFrom · isManager(pool 281474976710662)

  • Force-transferCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via Tranche.authTransferFrom · auth (wards)

  • Burn from holderCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.revoke · isManager(pool 281474976710662)

  • Burn from holderCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.revoke · isManager(pool 281474976710662)

  • Burn from holderCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via Tranche.burn · auth (wards)

  • Burn from holderCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via Tranche.burn · auth (wards)

  • Burn from holderCriticalYellow
    JTRSY balance-sheet manager SafeSafe 2/70x2B0f…7cfb

    No delay · via BalanceSheet.revoke · isManager(pool 281474976710662)

  • Burn from holderCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via Tranche.burn · auth (wards)

  • Set priceCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.overridePricePoolPerShare, overridePricePoolPerAsset · isManager(pool 281474976710662), within one transaction

  • Set priceCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.overridePricePoolPerShare, overridePricePoolPerAsset · isManager(pool 281474976710662), within one transaction

  • Set priceCriticalYellow
    JTRSY balance-sheet manager SafeSafe 2/70x2B0f…7cfb

    No delay · via BalanceSheet.overridePricePoolPerShare, overridePricePoolPerAsset · isManager(pool 281474976710662), within one transaction

  • Allocate fundsCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.withdraw, deposit · isManager(pool 281474976710662), moves pool escrow assets

  • Allocate fundsCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.withdraw, deposit · isManager(pool 281474976710662), moves pool escrow assets

  • Allocate fundsCriticalYellow
    JTRSY balance-sheet manager SafeSafe 2/70x2B0f…7cfb

    No delay · via BalanceSheet.withdraw, deposit · isManager(pool 281474976710662), moves pool escrow assets

  • Grant rolesCriticalRed
    MessageProcessor0x97cc…e30A

    → EOA

    None · via BalanceSheet.updateManager · auth (wards)

  • Grant rolesCriticalRed
    MessageDispatcher0xf837…0B27

    → EOA

    None · via BalanceSheet.updateManager · auth (wards)

  • Grant rolesCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via FullRestrictions.deny, rely · auth (wards)

  • Grant rolesCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via Tranche.deny, rely · auth (wards)

  • Grant rolesCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via Tranche.deny, rely · auth (wards)

  • Grant rolesCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via BalanceSheet.updateManager · auth (wards)

  • Grant rolesCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via FullRestrictions.deny, rely · auth (wards)

  • Grant rolesCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via Tranche.deny, rely · auth (wards)

  • FreezeHighRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via FullRestrictions.updateRestriction · auth (wards)

  • FreezeHighGreen
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via FullRestrictions.updateRestriction · auth (wards)

  • PauseHighYellow
    EOA0x0446…24Bf

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x0800…F155

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x4d47…f541

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x5e7A…3EE1

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x701D…02b9

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x9eDe…AEA9

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    Safe 1/20xb307…EB3a

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0xd551…2616

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0xE944…D28F

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighGreen
    Centrifuge ProtocolGuardian SafeSafe 4/90x9711…D225

    No delay · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • Set complianceHighYellow
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via FullRestrictions.trustedCall · auth (wards)

  • Set complianceHighYellow
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via Tranche.file · auth (wards)

  • Set complianceHighYellow
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via Tranche.file · auth (wards)

  • Set complianceHighGreen
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via FullRestrictions.trustedCall · auth (wards)

  • Set complianceHighGreen
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via Tranche.file · auth (wards)

For regulated securities, freeze and force-transfer powers are often legally required. Control rates who holds them and what checks exist, not whether they exist. A single key holding a critical power or freeze is red; a multisig with no timelock is yellow.

Discovered at block 514,442,727 · 13 Oct 2026 · tool discovery-0.2.0 · View raw JSON on GitHub ↗

Who controls JTRSY on BNB Chain

Token and service contracts on the left, the accounts holding their powers on the right. Edge color is the risk status of that power.

Powers

Every privileged power we found, normalized to canonical power types.

  • MintCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.issue · isManager(pool 281474976710662)

  • MintCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.issue · isManager(pool 281474976710662)

  • MintCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via ShareToken.mint · auth (wards)

  • MintCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via ShareToken.mint · auth (wards)

  • MintCriticalYellow
    JTRSY balance-sheet manager SafeSafe 2/50x2B0f…7cfb

    No delay · via BalanceSheet.issue · isManager(pool 281474976710662)

  • MintCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via ShareToken.mint · auth (wards)

  • Force-transferCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.transferSharesFrom · isManager(pool 281474976710662)

  • Force-transferCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.transferSharesFrom · isManager(pool 281474976710662)

  • Force-transferCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via ShareToken.authTransferFrom · auth (wards)

  • Force-transferCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via ShareToken.authTransferFrom · auth (wards)

  • Force-transferCriticalYellow
    JTRSY balance-sheet manager SafeSafe 2/50x2B0f…7cfb

    No delay · via BalanceSheet.transferSharesFrom · isManager(pool 281474976710662)

  • Force-transferCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via ShareToken.authTransferFrom · auth (wards)

  • Burn from holderCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.revoke · isManager(pool 281474976710662)

  • Burn from holderCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.revoke · isManager(pool 281474976710662)

  • Burn from holderCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via ShareToken.burn · auth (wards)

  • Burn from holderCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via ShareToken.burn · auth (wards)

  • Burn from holderCriticalYellow
    JTRSY balance-sheet manager SafeSafe 2/50x2B0f…7cfb

    No delay · via BalanceSheet.revoke · isManager(pool 281474976710662)

  • Burn from holderCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via ShareToken.burn · auth (wards)

  • Set priceCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.overridePricePoolPerShare, overridePricePoolPerAsset · isManager(pool 281474976710662), within one transaction

  • Set priceCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.overridePricePoolPerShare, overridePricePoolPerAsset · isManager(pool 281474976710662), within one transaction

  • Set priceCriticalYellow
    JTRSY balance-sheet manager SafeSafe 2/50x2B0f…7cfb

    No delay · via BalanceSheet.overridePricePoolPerShare, overridePricePoolPerAsset · isManager(pool 281474976710662), within one transaction

  • Allocate fundsCriticalRed
    OnOfframpManager (JTRSY balance-sheet manager)Unknown contract0xB6c9…3d85

    None · via BalanceSheet.withdraw, deposit · isManager(pool 281474976710662), moves pool escrow assets

  • Allocate fundsCriticalRed
    AsyncRequestManager0xF482…61Ae

    → EOA

    None · via BalanceSheet.withdraw, deposit · isManager(pool 281474976710662), moves pool escrow assets

  • Allocate fundsCriticalYellow
    JTRSY balance-sheet manager SafeSafe 2/50x2B0f…7cfb

    No delay · via BalanceSheet.withdraw, deposit · isManager(pool 281474976710662), moves pool escrow assets

  • Grant rolesCriticalRed
    MessageProcessor0x97cc…e30A

    → EOA

    None · via BalanceSheet.updateManager · auth (wards)

  • Grant rolesCriticalRed
    MessageDispatcher0xf837…0B27

    → EOA

    None · via BalanceSheet.updateManager · auth (wards)

  • Grant rolesCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via FullRestrictions.deny, rely · auth (wards)

  • Grant rolesCriticalRed
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via ShareToken.deny, rely · auth (wards)

  • Grant rolesCriticalRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via ShareToken.deny, rely · auth (wards)

  • Grant rolesCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via BalanceSheet.updateManager · auth (wards)

  • Grant rolesCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via FullRestrictions.deny, rely · auth (wards)

  • Grant rolesCriticalYellow
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via ShareToken.deny, rely · auth (wards)

  • FreezeHighRed
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via FullRestrictions.updateRestriction · auth (wards)

  • FreezeHighGreen
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via FullRestrictions.updateRestriction · auth (wards)

  • PauseHighYellow
    EOA0x0446…24Bf

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x0800…F155

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x4d47…f541

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x5e7A…3EE1

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x701D…02b9

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0x9eDe…AEA9

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    Safe 1/20xb307…EB3a

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0xd551…2616

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighYellow
    EOA0xE944…D28F

    None · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • PauseHighGreen
    Centrifuge ProtocolGuardian SafeSafe 4/90x9711…D225

    No delay · via ProtocolGuardian.pause · onlySafeOrOwner: the Safe or any one of its owners

  • Set complianceHighYellow
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via FullRestrictions.trustedCall · auth (wards)

  • Set complianceHighYellow
    Centrifuge BalanceSheet (shared)BalanceSheet0x12a1…f43e

    → EOA

    None · via ShareToken.file · auth (wards)

  • Set complianceHighYellow
    Centrifuge Spoke (shared)Spoke0xEC35…25aB

    → EOA

    None · via ShareToken.file · auth (wards)

  • Set complianceHighGreen
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via FullRestrictions.trustedCall · auth (wards)

  • Set complianceHighGreen
    Centrifuge Root (shared)Root0x7Ed4…368f

    → Timelock 2d → Safe 4/9

    2-day delay · via ShareToken.file · auth (wards)

For regulated securities, freeze and force-transfer powers are often legally required. Control rates who holds them and what checks exist, not whether they exist. A single key holding a critical power or freeze is red; a multisig with no timelock is yellow.

Discovered at block 127,410,883 · 13 Oct 2026 · tool discovery-0.2.0 · View raw JSON on GitHub ↗