Audit recency
Sushi (SushiSwap) — v2 + v3 + Trident + BentoBox/Kashi + SushiXSwap's assessment for RD-F-002 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
v2-core last audited Sep 2020 (~68 months before assessment date). v3-core: no Sushi-specific audit ever conducted; upstream Uniswap v3 audit was March 2021 (>60 months ago). RouteProcessor3 audited by Zellic April 2023 (~25 months ago). No component has received an independent audit within 365 days of the assessment date (2026-05-17). Threshold: red = >730 days since last audit; v2 (68 months) and v3 (no Sushi-specific audit ever) both exceed.
Sources #
- AuditPeckShield-Audit-Report-SushiSwap-v1.0.pdfPeckShield SushiSwap v1 audit — signed off Sep 2020; ~68 months before assessmentretrieved 2026-05-17
- Zellic SushiSwap RouteProcessor3 AuditZellic RouteProcessor3 audit — April 13-14 2023; most recent Sushi-specific engagement (~25 months before assessment)retrieved 2026-05-17
Methodology #
Measure the number of days between today and the sign-off date of the most recent audit report covering the currently-deployed bytecode.
See the full factor methodology and distribution across all protocols →