Resolved-without-proof findings

Pendle Finance's assessment for RD-F-003 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Spearbit high-severity finding (LP supply manipulation via truncation syUsed/ptUsed) resolved and verified in commit 14c9f26a of PR 526. ChainSecurity low-severity issues resolution status not fully confirmed (PDF binary). No high/critical finding left unresolved per available evidence. Ackee 3 medium findings addressed per blog but commit verification not feasible.

Sources #

URL
Pendle Finance Spearbit Security Review — findings and resolutionsSpearbit findings and resolutions (hyh lead researcher)retrieved 2026-04-29
Audit
Ackee Pendle V2 audit summaryAckee blog — 3 medium findings addressedretrieved 2026-04-29

Methodology #

Count the number of findings the audit report marks "Resolved" or "Fixed" where no matching on-chain bytecode change or verifiable commit can be found.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol pendle factor RD-F-003 score yellow collected_at 2026-04-28 21:09:40