Audit-to-deploy gap

Frax Finance's assessment for RD-F-006 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

frxUSD/sfrxUSD launched Jan 2025 (FIP-419) but first external audit coverage by Zellic is dated Jul 2025 — approximately 6 months (>180 days) of live deployment with user funds before audit. BAMM similarly appears to have been deployed before the Certora (Oct 2024) and ChainSecurity (Jul 2025) audits. Scoring on highest-risk product (frxUSD: deploy Jan 2025, first audit Jul 2025 = ~180 days gap = red threshold). This is the clearest score against the factor definition (>180 days = red).

Sources #

Docs
Frax Protocol Security AuditsFrax audits page — Zellic Jul 2025 first frxUSD auditretrieved 2026-05-17
URL
Frax Launches frxUSD Stablecoin Jan 2025frxUSD launch press release Jan 2025retrieved 2026-05-17

Methodology #

Measure the number of days between the audit report sign-off date and the mainnet deploy of the audited bytecode.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol frax factor RD-F-006 score red collected_at 2026-05-16 20:44:31