Audit-to-deploy gap
Curve Finance's assessment for RD-F-006 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Exact deploy-to-audit-end delta not independently verifiable without commit SHA matching (PDFs binary). Indicative: ChainSecurity tricrypto-ng audit dated 2023-06-23; tricrypto-ng factory deployed summer-fall 2023, estimated delta <180 days. FeeSplitter audit 2024-09-25 announced on Curve X. No evidence of pre-audit deployment found; insufficient data for precise delta measurement across all NG contracts.
Sources #
- URLCurve Finance X: FeeSplitter audit announcementCurve X announcement of FeeSplitter auditretrieved 2026-04-28
- Curve Tricrypto-NG Audit — ChainSecurity (2023-06-23)ChainSecurity tricrypto-ng audit dateretrieved 2026-04-28
Methodology #
Measure the number of days between the audit report sign-off date and the mainnet deploy of the audited bytecode.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol curve-v2 factor RD-F-006 score yellow collected_at 2026-04-28 19:48:40