★ Audit scope mismatch
Dolomite's assessment for RD-F-001 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
The Ethereum mainnet DolomiteMargin deployment (0x003Ca23Fd5F0ca87D01F6eC6CD14A8AE60c2b97D, deployed July 1 2025, $129.7M / 68.5% TVL) post-dates all known audits. Latest core audit is Cyfrin 2023-08-23; Guardian Jan 2024 covered modules only. No audit report commit SHA maps to the Ethereum mainnet deployed bytecode. The Berachain full deployment is similarly uncovered (Cyfrin Apr 2025 POLVaults audit covers only PoL vault modules). Only the Arbitrum deployment ($21.6M, 11.4% TVL) has plausible audit coverage continuity from the Cyfrin 2023 and Guardian 2024 engagements.
Sources #
- AuditDolomite — Guardian Audits 2024-01-11Guardian Audits Jan 2024: modules only, not the full Ethereum DolomiteMargin instanceretrieved 2026-05-16
- Dolomite on Ethereum: A New Chapter BeginsDolomite Ethereum launch announcement July 1 2025 — no new audit mentionedretrieved 2026-05-16
- Dolomite Margin — Cyfrin Audit 2023-08-23Cyfrin audit 2023-08-23: most recent core DolomiteMargin audit, pre-Ethereum mainnet deploymentretrieved 2026-05-16
- DolomiteMargin Ethereum Mainnet — Etherscan Source VerificationDolomiteMargin Ethereum 0x003Ca23Fd5F0ca87D01F6eC6CD14A8AE60c2b97D verified source: v0.5.16+commit.9c3226ce, optimizer 10000 runs, Istanbul EVMretrieved 2026-05-16
Methodology #
Check whether the commit SHA cited in the audit report matches the bytecode deployed at the production proxy/implementation address.
See the full factor methodology and distribution across all protocols →