Glossary entry
Admin Key
DeFiA privileged credential that can upgrade, pause or drain a contract. The questions are which powers exist, who holds them and whether a timelock applies.
Definition
An admin key is a privileged credential that lets its holder change how a deployed contract behaves — typically to upgrade the code, pause the system, adjust parameters, mint tokens or move funds held by the protocol. Its existence is not by itself a defect: someone has to be able to fix a bug or halt an exploit, and a system with no such control can be drained while its holders watch. What matters is the specific answer to four questions, all of which are readable on-chain rather than a matter of trust. Which powers exist. Who holds them — a single address, a multi-signature arrangement requiring several parties, or a governance process. Whether changes pass through a timelock, so that users see them coming and can leave first. And whether the powers can be renounced, and were. A protocol described as decentralised while a single key can replace its code and take its balances is centralised in the only sense that matters for the money.
Next