Deployed bytecode matches signed release tag

Evidence summary #

v3.6.0 release tag exists at aave-dao/aave-v3-origin (2025-01-08). T-10 noted a commit SHA discrepancy between Governance Proposal 429 (b3ce634) and v3.6.0 release tag (5a230ec). This discrepancy was not resolved independently in this session.

Sources #

Methodology #

Determine whether the deployed runtime bytecode corresponds to a signed git tag in the protocol's repository.

See the full factor methodology and distribution across all protocols →