Formal verification coverage

Orca's assessment for RD-F-009 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No formal verification engagement found (Certora Prover, Kani, Halmos, or equivalent). Sec3 uses X-ray static analysis but this is not a full FV proof system. No published invariant specification found in the repository. The Certora SecurityReports index does not list Orca. Formal verification is genuinely absent for this protocol — consistent with the current norm for Solana AMMs. Gray: protocol has not declared critical invariants in a machine-checkable form.

Sources #

URL
SecurityReportshttps://github.com/Certora/SecurityReportsretrieved 2026-04-28
GitHub
Orca Whirlpools GitHub repo (no FV spec directory found)https://github.com/orca-so/whirlpoolsretrieved 2026-05-16

Methodology #

Determine the percentage of protocol-declared critical invariants covered by a formal verification proof (Certora Prover, Kani, Halmos, or equivalent).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol orca factor RD-F-009 score gray collected_at 2026-05-16 02:39:16