Static-analyzer high-severity count

Jupiter's assessment for RD-F-010 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Slither/Mythril/Semgrep require Etherscan-verified Solidity source. Jupiter programs are Rust/BPF on Solana — no Etherscan-verified source and no Solidity source. Additionally closed-source binary. Structural gray per non-EVM template: static-analysis factors requiring EVM tooling are not assessable for Solana programs.

Sources #

Curator note
process-learnings.md §Non-EVM / L1-nativeNon-EVM template: static-analysis EVM factors structural gray for Solana closed-source binaryretrieved 2026-04-29

Methodology #

Count the number of unique high-severity detector findings from Slither + Mythril + Semgrep run against the deployed verified source (after deduplication across tools).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol jupiter factor RD-F-010 score gray collected_at 2026-04-29 11:51:25