Audit-to-deploy gap

OpenEden's assessment for RD-F-006 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Hacken Nov-2024 finalized 2024-12-10 (V4Impl, commit 1299050d). The V5 implementation was deployed 2025-08-14 — approximately 244 days after the last audit of V4, with no V5 audit. The audit-to-deploy gap for V5 exceeds the 60-day green threshold and the 180-day red threshold, but V5 is an upgrade of audited code rather than a fresh unaudited deployment. Yellow applied for the gap between audit and V5 deploy.

Sources #

Audit
Hacken Security Audit — OpenEden Vault Nov-2024Hacken Nov-2024 sign-off 2024-12-10retrieved 2026-05-16
Etherscan
TBILL Vault Proxy — Etherscan Upgrade HistoryTBILL Vault proxy — V5 impl deployed Aug 2025 per upgrade event block 23138149retrieved 2026-05-16

Methodology #

Measure the number of days between the audit report sign-off date and the mainnet deploy of the audited bytecode.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol openeden factor RD-F-006 score yellow collected_at 2026-05-16 10:11:45