defirisk.co
rubric v1.7.0

Code complexity vs audit coverage

QuickSwap's assessment for RD-F-024 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

V3 Algebra core: 1,833 LoC in 13 contracts, C4 contest Sep 26-Oct 1 (5 days). With 118 warden submissions, coverage is reasonable for a competitive audit. V2 core: ABDK 4-month review with FV — thorough coverage. Gap: V3 periphery (SwapRouter, NonfungiblePositionManager proxy implementations) at $451M TVL has no publicly accessible audit coverage. The proxy implementation complexity (multi-chain router, ERC-721 NFT management) at this TVL level makes the periphery audit gap a legitimate complexity concern.

Sources #

Methodology #

Determine whether the cyclomatic complexity or LOC-per-audit-day ratio exceeds the curator-declared credibility threshold for the audit to be meaningful.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol quickswap factor RD-F-024 score yellow collected_at 2026-05-16 08:48:31