EPIC
EPIC
Back to Rules Library
EPIC-SEC-003HIGHTarget: Access Control

Unauthorized Program Upgrade Authority Gate

Description

Locks authority to governance multisigs.

Technical Rationale

Upgrading programs with direct developer keys exposes the program to single-point-of-failure hotkey compromises. Asserting that only verified multisig accounts (e.g. Squads PDAs) hold the authorization buffer verifies governance integration.

Code Assessment Examples

Insecure Practice
// Vulnerable: Deploying using standard CLI keypair directly
$ solana program deploy \
    --upgrade-authority developer_hotkey.json \
    target/deploy/program.so
Secure Resolution
// Safe: Asserting expected governance PDA authority before deploy
$ epic verify-authority \
    --expected-authority squads_multisig_pda \
    --binary target/deploy/program.so

Related Documentation

CLI Reference Guide →Security Rules Docs →