Fix-merged-but-not-deployed gap
dYdX v4 (dYdX Chain)'s assessment for RD-F-140 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No evidence of a known-vulnerability fix merged to the repo but not deployed. The October 2025 chain-halt patch was deployed within ~8 hours of halt. No fix-merged-but-undeployed gap identified.
Sources #
- URLOctober 2025 dYdX Chain Incident ReviewOctober 2025 incident — chain resumed promptly after patchretrieved 2026-05-17
- dYdX v4-chain GitHub repositorydYdX v4-chain GitHub — public issue and PR trackingretrieved 2026-05-17
Methodology #
Determine whether a known vulnerability has a PR merged in the repo but the fix has not been included in the deployed bytecode.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol dydx-v4 factor RD-F-140 score green collected_at 2026-05-17 09:58:47