Fix-merged-but-not-deployed gap

Lista DAO's assessment for RD-F-140 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No known specific vulnerability PR with merged-but-not-deployed fix identified. Post-Dec 2022 Ankr/Helio incident, oracle fix (switch to ankrBNB collateral) was deployed. No current open fix-merged-not-deployed gap identified from available evidence.

Sources #

URL
https://www.halborn.com/blog/post/explained-the-ankr-and-helio-hacks-november-2022retrieved 2026-05-12

Methodology #

Determine whether a known vulnerability has a PR merged in the repo but the fix has not been included in the deployed bytecode.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol lista-dao factor RD-F-140 score green collected_at 2026-05-12 17:54:05