Fix-merged-but-not-deployed gap
Meteora's assessment for RD-F-140 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No known instance of a merged fix not deployed. No public disclosure of such a gap in governance forum, audit reports, or news sources. Active audit cadence per version update reduces likelihood of fix-but-not-deployed gap.
Sources #
- GovernanceMeteora Governance ForumMeteora governance forum — no fix-not-deployed disclosures foundretrieved 2026-05-16
- MeteoraAg Audits RepositoryMeteoraAg/audits — no undeployed-fix disclosures in audit PDFs or READMEretrieved 2026-05-16
Methodology #
Determine whether a known vulnerability has a PR merged in the repo but the fix has not been included in the deployed bytecode.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol meteora factor RD-F-140 score green collected_at 2026-05-16 10:03:05