Static-analyzer high-severity count
Wormhole's assessment for RD-F-010 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No published Slither/Mythril/Semgrep automated output against deployed EVM bytecode found in public sources. CertiK 2023-03-08 used "manual review and static analysis" per CertiK Skynet, with 11 total findings (2 major, 1 medium, 5 minor, 3 informational). The "major" findings (Centralization/Privilege) are governance-related, not direct exploit code patterns like reentrancy or integer overflow. No high-severity code-vulnerability class (reentrancy, overflow, unprotected selfdestruct) identif...
Sources #
- Curator noteExtracted from 01-code-security.md — RD-F-010 finding; no URL cited in originalretrieved 2026-04-28
Methodology #
Count the number of unique high-severity detector findings from Slither + Mythril + Semgrep run against the deployed verified source (after deduplication across tools).
See the full factor methodology and distribution across all protocols →