Audit-to-deploy gap

Evidence summary #

v3.6.0 released 2025-01-08; the comprehensive audit batch (Pashov, MixBytes, Blackthorn, Savant, Certora) is dated Nov 2025, 10+ months post-deploy. Some audits pre-dated the v3.6.0 deploy, but precise pre-deploy sign-off dates are not determinable from the public security index for all firms. Conservative yellow given ambiguity in whether any pre-deploy audit specifically covers the v3.6.0 bytecode as deployed.

Sources #

Methodology #

Measure the number of days between the audit report sign-off date and the mainnet deploy of the audited bytecode.

See the full factor methodology and distribution across all protocols →