Fix-merged-but-not-deployed gap

Axelar Network's assessment for RD-F-140 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Code4rena 2023-07 H-01 and H-02 were both marked fixed via specific PRs (PR#102 and PR#96 respectively). No known outstanding un-deployed vulnerability fixes identified. Axelar's active audit engagement (70+ reports) reduces the likelihood of long-standing undeployed fixes.

Sources #

Audit
Code4rena 2023-07 Axelar Audit — H-01, H-02 resolutionCode4rena 2023-07-axelar: H-01 fixed PR#102 (reentrancy in expressReceiveToken), H-02 fixed PR#96retrieved 2026-05-17

Methodology #

Determine whether a known vulnerability has a PR merged in the repo but the fix has not been included in the deployed bytecode.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol axelar factor RD-F-140 score green collected_at 2026-05-16 21:57:49