Fix-merged-but-not-deployed gap
Concrete's assessment for RD-F-140 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No specific known vulnerability with a PR merged but not deployed identified. GitHub last commit April 20, 2026 (27 days before profile date). Recent commits may include security fixes not yet deployed. Cannot confirm without full commit-to-bytecode diff.
Sources #
- GitHubConcrete GitHub repo — last commit date (no known open fix-not-deployed gap)Blueprint-Finance/concrete-earn-v2-bug-bounty: last commit 2026-04-20; no known CVE or public vulnerability disclosure requiring a fixretrieved 2026-05-17
Methodology #
Determine whether a known vulnerability has a PR merged in the repo but the fix has not been included in the deployed bytecode.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol concrete factor RD-F-140 score gray collected_at 2026-05-17 14:36:59