Resolved-without-proof findings
Curve Finance's assessment for RD-F-003 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
MixBytes stableswap-ng audit (Sept-Oct 2023) found 3 critical, 5 high, 12 medium, 21 low issues; all stated as acknowledged or fixed. On-chain proof of individual finding resolutions is not independently verifiable via public sources (audit PDFs binary). No post-mortem evidence of unpatched critical or high audit finding exploited. Protocol's self-disclosure claims all findings resolved.
Sources #
- URLCurve Finance Security Architecture — Zealynx SecurityZealynx Curve security architecture analysisretrieved 2026-04-28
- MixBytes StableSwapNG Audit READMEMixBytes StableSwapNG audit README — finding counts and resolutionretrieved 2026-04-28
Methodology #
Count the number of findings the audit report marks "Resolved" or "Fixed" where no matching on-chain bytecode change or verifiable commit can be found.
See the full factor methodology and distribution across all protocols →