defirisk.co
rubric v1.7.0

Deployed bytecode reproducibility

Compound V3 (Comet)'s assessment for RD-F-145 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Build: Solidity 0.8.15, optimizer_runs=1, via_ir=true (data cache confirmed). The via_ir=true compilation path routes through Yul IR, which can introduce toolchain-specific bytecode variation. Reproducibility theoretically possible with pinned settings but via_ir increases build non-determinism risk. No independent third-party reproducibility confirmation found in public evidence.

Sources #

Methodology #

Determine whether anyone can independently reproduce the deployed bytecode from the repo and declared build toolchain.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol compound-v3 factor RD-F-145 score gray collected_at 2026-04-28 00:20:50