Audit recency

Curve Finance's assessment for RD-F-002 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Most recent audit with disclosed date is ChainSecurity FeeSplitter 2024-09-25 (~550 days ago). Most recent NG pool audit is MixBytes stableswap-ng Oct 2023 (~910 days). NG pool contracts have not been re-audited post the 2023 MixBytes/ChainSecurity engagements; recency is borderline but acceptable for a protocol with ongoing active audits and a $250K bug bounty payout in May 2024.

Sources #

GitHub
MixBytes StableSwapNG Audit READMEMixBytes StableSwapNG audit README (Sept-Oct 2023)retrieved 2026-04-28
URL
Curve Fee Splitter Smart Contract Audit — ChainSecurity (2024-09-25)ChainSecurity FeeSplitter auditretrieved 2026-04-28

Methodology #

Measure the number of days between today and the sign-off date of the most recent audit report covering the currently-deployed bytecode.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol curve-v2 factor RD-F-002 score yellow collected_at 2026-04-28 19:48:40