defirisk.co
rubric v1.7.0

Commit timezone consistent with stated geography

Midas's assessment for RD-F-119 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Main repo RedDuck-Software/midas-contracts is private — commit timestamp distribution not enumerable. RedDuck Software GitHub org lists Ukraine as location (UTC+2/+3); Midas Software GmbH is Berlin/Germany (UTC+1/+2). These timezones are geographically consistent with stated geography and inconsistent with DPRK UTC+9 pattern. However, formal commit-hour analysis cannot be performed on private repo. Sherlock audit repos (public read-only forks) contain insufficient commit metadata for timezone distribution analysis.

Sources #

Methodology #

Determine whether the distribution of commit hours in the repo is consistent with the team's publicly stated geography (anomaly flag for DPRK-precursor pattern).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol midas factor RD-F-119 score gray collected_at 2026-05-16 09:34:55