★ Post-audit code changes without re-audit

Synapse Protocol's assessment for RD-F-139 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Only confirmed audit is CertiK Nerve Finance (April 2021). 24+ post-rebrand upgrades with no publicly accessible audit reports. Every deployed upgrade since April 2021 is unaudited.

Sources #

URL
https://halborn.com/explained-the-synapse-and-nerve-bridge-hacks-november-2021/retrieved 2026-05-06
URL
https://www.quadrigainitiative.com/casestudy/saddlefinancemetaswapnervebridgeexploit.phpretrieved 2026-05-06
URL
https://skynet.certik.com/projects/synapseprotocolretrieved 2026-04-26

Methodology #

Count deployed changes to audited bytecode where no subsequent audit or spot-review covers the changed code.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol synapse factor RD-F-139 score red collected_at 2026-04-26 21:35:35