Deployed bytecode matches signed release tag

Evidence summary #

GitHub repo has 8 commits on main branch with no signed (GPG) release tags. Most recent commit 47a77ab (Sep 8, 2025) is unsigned. Deployed V5 implementation (0xc4545Bf80f) was upgraded 2025-08-14. No signed release tags found in the openeden.vault.audit repo. Deployed bytecode cannot be matched to a signed release tag.

Sources #

Methodology #

Determine whether the deployed runtime bytecode corresponds to a signed git tag in the protocol's repository.

See the full factor methodology and distribution across all protocols →