GitHub force-push to sensitive branch

Evidence summary #

GitHub force-push to sensitive branch | Yes | Across's primary contracts repo: https://github.com/across-protocol/contracts. No public reports of unauthorized force-push to main/production branches in the assessment window. The February 2026 audits correspond to recent main-branch changes, consistent with normal development cadence. | Force-push or unauthorized push to main/production branch | No

Sources #

Methodology #

Detect whether the repository shows a force-push or push to a sensitive branch (main, production tag) from a non-protocol account.

See the full factor methodology and distribution across all protocols →