defirisk.co
rubric v1.7.0

Deployed bytecode matches signed release tag

Dolomite's assessment for RD-F-136 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No GPG-signed release tags confirmed for DolomiteMargin repo. data-cache github.last_commit_date=2026-04-22. hardhat_config_present=false, foundry_toml_present=false. Bytecode matches unsigned commit tags at best; signed release tag practice not evidenced.

Sources #

  • Partner feed
    Data cache — GitHub build config absentdata-cache github section: last_commit_date=2026-04-22, foundry_toml_present=false, hardhat_config_present=falseretrieved 2026-05-16
  • GitHub
    Dolomite Margin GitHub Repositorygithub.com/dolomite-exchange/dolomite-margin — repo structureretrieved 2026-05-16

Methodology #

Determine whether the deployed runtime bytecode corresponds to a signed git tag in the protocol's repository.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol dolomite factor RD-F-136 score yellow collected_at 2026-05-16 11:12:56